
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa
File: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (raw, json)
Hash identifier: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=
Subject key identifier: F8:24:2D:C8:C8:E8:B3:8A:2A:98:6D:D6:A3:B2:A6:B4:3A:75:3B:8D
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 4FCE4D7402269F9D3BF5C4E1364E05CE24B134C6
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa
Signing time: Fri 05 Jun 2026 12:30:56 +0000
ROA not before: Fri 05 Jun 2026 12:25:56 +0000
ROA not after: Fri 04 Jun 2027 12:30:56 +0000
asID: 136792
IP address blocks: 2401:73c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 10:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ce:4d:74:02:26:9f:9d:3b:f5:c4:e1:36:4e:05:ce:24:b1:34:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jun 5 12:25:56 2026 GMT
Not After : Jun 4 12:30:56 2027 GMT
Subject: CN=F8242DC8C8E8B38A2A986DD6A3B2A6B43A753B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:8c:2f:ea:5d:6d:f3:8d:f2:9e:af:fc:1d:
2f:ee:b4:40:1b:3b:20:0d:03:7a:14:c8:db:71:a6:
77:a0:4e:eb:4b:36:7d:46:23:32:d2:f5:74:6b:40:
28:c0:e5:26:3c:90:95:ad:7e:6a:5e:e0:ac:85:68:
12:e9:78:27:e5:ee:6a:16:d1:4d:e3:a5:b5:de:85:
78:b4:29:e2:b1:22:58:0c:f6:03:1e:e5:3d:a2:41:
a8:6a:af:04:f6:14:24:b7:53:33:da:27:ec:67:49:
2f:5c:85:a9:19:c2:f8:5d:46:b6:c4:60:87:0e:50:
d8:ca:d0:28:38:39:d3:90:07:0b:f9:22:19:9a:6f:
06:c9:3e:3f:54:e4:2f:9c:da:ec:59:20:f1:4d:b7:
53:ca:62:2b:f1:7a:16:f1:95:b1:93:84:d7:79:5a:
b0:65:49:6d:6b:36:03:3c:1e:a9:29:c3:05:0c:79:
54:d4:b3:96:ef:ef:d9:f5:94:f1:d8:9f:31:d8:e7:
f4:be:2c:3d:f8:3f:0c:75:98:1a:50:20:b1:37:1e:
d3:52:4f:91:8a:cb:f7:52:95:9a:45:c1:e9:2f:06:
f6:a2:8e:14:f6:b8:5c:0d:8d:4c:50:15:64:17:a6:
56:e8:6f:90:46:b8:7d:48:1c:1a:ab:ed:69:4d:3b:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:2D:C8:C8:E8:B3:8A:2A:98:6D:D6:A3:B2:A6:B4:3A:75:3B:8D
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:73c0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:f8:c5:de:87:11:c8:5f:61:57:2b:96:4e:4d:3e:19:7d:1b:
d9:2c:5f:44:4d:ce:2e:ae:d0:da:c1:5d:be:53:19:c3:7f:47:
fe:54:ba:dc:80:54:3f:cf:77:50:91:f3:51:3e:41:62:1c:80:
2e:34:d1:e4:38:50:c7:5f:1e:8e:cf:ef:51:6e:25:4b:d6:40:
b8:a2:f9:33:df:e5:af:1c:ab:d4:c3:ca:09:e1:7e:84:85:48:
7f:f2:c6:60:08:4d:14:e0:ae:b4:3e:b9:71:cf:35:69:f9:cb:
c6:8a:af:2c:f0:6a:bb:07:42:ca:a7:06:1b:93:bc:6d:77:32:
c7:13:23:7a:2c:25:51:28:58:68:b2:2b:73:c3:e2:af:88:a7:
90:a0:0f:7a:9e:43:b7:a1:58:23:c2:7f:28:52:ce:ac:d5:b7:
ac:9e:bc:86:27:28:32:9f:64:b8:30:ae:a5:cb:60:c3:d2:62:
35:94:93:cd:fd:2c:35:56:2f:72:5a:1e:ae:a1:76:7e:f4:d1:
67:4e:77:33:6d:46:9e:b9:7c:1e:d7:d6:32:b0:8a:42:48:17:
f3:59:e2:d4:c2:6a:1d:3e:d2:53:51:96:13:3e:bb:d5:ad:b0:
0a:e9:2a:88:e6:07:96:bf:0b:82:c1:ea:e4:71:21:dc:ce:5a:
e5:89:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:07 2026 by rpki-client