
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
File: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=
Subject key identifier: D5:B2:F7:C0:58:9B:14:38:A2:23:E8:BB:EB:49:C2:36:06:84:39:AB
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 79928578215AAD2728088329CA9B6C6F60B35F0E
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
Signing time: Fri 04 Jul 2025 12:05:03 +0000
ROA not before: Fri 04 Jul 2025 12:00:03 +0000
ROA not after: Fri 03 Jul 2026 12:05:03 +0000
asID: 136792
IP address blocks: 103.96.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 03:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:92:85:78:21:5a:ad:27:28:08:83:29:ca:9b:6c:6f:60:b3:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jul 4 12:00:03 2025 GMT
Not After : Jul 3 12:05:03 2026 GMT
Subject: CN=D5B2F7C0589B1438A223E8BBEB49C236068439AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a8:fb:a4:ae:f7:51:50:1b:d0:a0:6c:18:d4:
79:7a:2a:df:55:8f:4f:31:8c:33:f5:8b:c0:ff:be:
20:7c:47:5e:d3:89:a6:aa:b8:3b:c6:99:7d:d9:4d:
99:ef:a1:36:fc:3f:20:1c:e0:13:b1:be:52:b9:69:
e1:15:89:90:67:2a:ec:f0:aa:4e:8f:8d:42:e9:74:
16:01:c1:ea:57:ed:ac:97:15:d8:37:8c:15:c3:eb:
17:b2:dd:70:e1:b5:d4:df:51:32:cf:c1:66:d7:66:
8d:2e:e0:18:18:4a:90:fc:52:dc:ce:de:4e:0d:b1:
96:0e:8c:76:c8:b7:a9:68:20:81:63:d5:6c:3c:ce:
1e:cb:e6:07:d2:ad:d5:71:cd:46:3d:50:26:9d:84:
86:67:b4:41:93:21:a2:06:65:85:3e:e7:ed:ec:3a:
0b:a7:ed:6a:75:72:f1:70:7d:18:ae:a0:c6:4a:ab:
33:06:b8:93:4b:39:22:a8:fe:e7:06:7e:38:09:85:
fe:37:fc:78:61:9e:95:c0:37:ac:3e:1a:26:49:e5:
65:41:b5:0f:3b:bd:e4:f4:7b:62:c9:aa:b3:b7:da:
36:e6:d1:8e:a7:21:f5:fd:28:09:38:3c:b8:59:0f:
9f:f0:04:cb:68:06:a9:44:a1:48:de:ba:1c:a9:e2:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:F7:C0:58:9B:14:38:A2:23:E8:BB:EB:49:C2:36:06:84:39:AB
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.21.0/24
Signature Algorithm: sha256WithRSAEncryption
58:30:5e:f0:1e:eb:71:a3:36:77:24:c4:bd:48:3c:9f:70:60:
e5:69:55:22:07:dd:3b:df:64:e8:55:c7:d0:47:cc:b1:51:d6:
4b:40:62:55:13:dd:69:ff:47:6d:29:4b:9d:92:0c:44:52:99:
32:0e:78:63:de:fc:25:fe:a4:a1:bf:c9:6c:b0:ba:94:b4:d6:
8b:90:6d:9e:b4:40:df:36:24:f5:ae:47:30:e8:4c:f6:c9:d8:
01:aa:dc:7d:02:1c:01:8a:69:ca:7a:43:64:21:f9:97:26:6f:
9d:2d:63:ef:40:18:93:e0:65:0b:6b:cc:92:63:20:6c:ab:15:
2a:5e:25:1a:7c:05:49:0f:4b:44:ba:d2:cb:1e:ae:5d:bb:3e:
3a:b7:c3:eb:58:38:a0:5a:2f:e9:97:d3:43:12:94:22:d7:b8:
74:a0:dc:46:58:e9:61:2a:17:00:d8:99:ae:02:1a:17:53:87:
55:99:5f:7d:e3:d3:62:2a:45:44:94:25:3c:3a:8c:28:3e:5e:
fd:44:12:c5:56:a6:c5:87:62:94:5a:f6:39:18:6f:54:c9:f6:
f7:cb:4b:67:bb:fd:5d:93:fb:52:60:90:23:8d:d8:c7:00:7b:
49:d3:9d:b1:a5:08:e0:b7:b3:52:fc:e9:3b:bc:66:66:d5:56:
d6:47:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:22 2025 by rpki-client