
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
File: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (raw, json)
Hash identifier: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=
Subject key identifier: 83:4C:34:7B:CF:17:13:E4:0C:2D:14:73:54:C4:F6:36:23:22:E6:50
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 1D1C16875094121F1FE181958883DADB693305A8
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
Signing time: Thu 09 Oct 2025 13:08:22 +0000
ROA not before: Thu 09 Oct 2025 13:03:22 +0000
ROA not after: Thu 08 Oct 2026 13:08:22 +0000
asID: 401443
IP address blocks: 103.238.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 22:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1c:16:87:50:94:12:1f:1f:e1:81:95:88:83:da:db:69:33:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Oct 9 13:03:22 2025 GMT
Not After : Oct 8 13:08:22 2026 GMT
Subject: CN=834C347BCF1713E40C2D147354C4F6362322E650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:7f:f2:d7:e5:d7:fb:f8:cb:e4:12:40:ea:
9d:8b:da:1c:b9:8c:b9:81:27:65:2c:2a:76:70:a6:
31:1b:79:54:cb:87:b6:b2:ca:f4:8d:35:61:f7:11:
c9:07:71:93:79:37:ab:16:c5:df:24:ea:48:de:94:
9c:aa:77:af:a4:05:6a:8a:d6:4f:ae:ad:77:70:0d:
34:19:62:8c:5d:2a:6a:bf:23:50:07:ce:86:96:93:
76:41:ec:28:e7:1e:4f:a9:e9:9b:37:7c:3e:59:30:
64:c3:20:09:f3:19:10:81:87:8f:0a:37:cd:f9:c7:
f4:d8:94:39:6c:61:7d:b8:d0:27:93:30:9b:7f:00:
25:7d:c0:4e:1a:e7:05:c5:6b:7e:da:d1:9c:68:27:
94:94:52:a1:e0:90:0f:a9:09:22:d9:af:fa:2b:d6:
63:0f:99:22:59:2f:ca:fb:d6:cc:9b:22:3f:90:e9:
f4:58:30:97:da:f7:c0:1c:9a:43:5c:82:f4:03:cd:
cb:5d:73:56:23:ed:48:fa:39:48:4c:18:78:e6:79:
a3:a1:d3:e9:5b:44:89:9e:f6:82:0e:42:4f:46:29:
5b:be:78:86:6f:2f:85:9f:59:4f:fd:b5:2f:77:96:
ac:d9:92:98:eb:11:b0:85:47:cb:ee:54:d4:83:a4:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:34:7B:CF:17:13:E4:0C:2D:14:73:54:C4:F6:36:23:22:E6:50
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:eb:f1:1e:73:b5:9a:f3:35:bb:05:c4:1e:74:fc:b0:24:78:
9c:c0:1b:d2:91:0f:f6:a7:dc:f1:ca:24:fe:db:c2:75:21:0f:
8f:53:54:78:c3:b6:93:24:0b:41:8f:82:2a:80:d3:3e:69:43:
d2:58:b0:9d:15:d4:9f:93:ca:f7:36:f3:d2:78:3e:05:eb:c4:
3f:8d:98:41:52:aa:bf:f1:4d:21:0d:40:3c:bf:66:6d:d4:dd:
4e:49:ed:8b:2d:c9:f8:6c:7c:72:76:8d:94:77:0f:76:11:f6:
e2:0b:24:34:6f:e7:94:30:c8:b3:6c:c4:2c:ea:07:6e:02:c7:
3a:f0:42:2d:7f:58:8d:e3:82:78:ce:a2:36:16:f4:2b:a4:a2:
c2:62:8d:6a:43:78:20:50:55:37:37:7c:a9:a6:b1:5e:88:cd:
f7:3c:ae:9d:40:55:2b:a5:e8:8f:c7:32:78:ff:0f:37:fe:00:
7b:82:db:b9:20:3a:cf:86:85:8b:78:1b:c7:40:14:72:7e:09:
4a:5a:be:61:95:f8:87:c1:38:16:ac:27:9b:7e:19:3c:ef:a8:
64:fd:a9:87:01:4d:81:ca:07:34:c2:6f:1b:76:bb:d9:a2:f7:
2b:47:ce:f7:45:d3:9b:ac:9e:46:28:74:97:c5:95:2e:e2:9b:
92:e4:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:31 2025 by rpki-client