
$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: QUb7ChJa1HiC1ObYB1Wni5vVe/r6WtkP3PTHuVjuYRg=
Subject key identifier: 82:27:70:90:17:8E:C5:59:49:25:55:35:9F:F2:8F:BB:81:E2:A0:66
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 637977157AB8872A897B7FFA09FD7FABF69E127A
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Tue 27 Oct 2026 12:00:01 +0000
ROA not before: Tue 27 Oct 2026 11:55:01 +0000
ROA not after: Tue 26 Oct 2027 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 12:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:79:77:15:7a:b8:87:2a:89:7b:7f:fa:09:fd:7f:ab:f6:9e:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Oct 27 11:55:01 2026 GMT
Not After : Oct 26 12:00:01 2027 GMT
Subject: CN=82277090178EC559492555359FF28FBB81E2A066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:e8:b7:4f:ba:81:b8:50:3a:0c:01:3d:c6:
3e:25:7a:98:11:c9:f1:ad:e0:24:9c:3a:41:88:65:
22:d7:7f:e7:91:d1:ee:d6:8a:7c:3e:1d:24:d6:01:
1c:41:c5:84:c9:63:4c:43:94:1a:62:ec:70:b0:6e:
5e:1e:5b:ca:62:bc:57:96:cc:28:af:13:c8:30:dd:
2c:87:79:d7:63:0a:16:d4:23:d8:e3:6d:b6:8b:b0:
ba:c7:68:88:01:f5:ad:32:3c:9e:13:31:43:73:05:
ef:2c:9a:4d:4e:30:9b:ad:18:18:ca:9e:e0:a9:08:
07:d7:59:20:c0:33:7b:89:61:43:0e:bc:2f:68:12:
88:9f:12:f6:d5:a7:dd:ca:6f:89:94:8a:5f:d9:91:
94:64:47:3b:32:50:94:53:53:b6:96:ba:13:c8:ae:
d1:4c:ed:d6:f1:ab:a7:31:65:dc:4f:7b:ac:76:50:
ce:09:7b:c8:3b:a2:fa:b5:73:e0:8e:4f:b2:3d:31:
dd:1d:97:d9:44:be:10:b4:eb:0b:ad:49:fe:dc:3b:
49:3b:0d:b6:b3:56:79:76:31:ce:ea:64:77:a5:08:
0b:12:eb:15:99:f6:18:fb:d5:51:be:58:9d:2c:f3:
24:ba:a0:80:20:f9:ec:be:5e:aa:ac:be:36:31:db:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:70:90:17:8E:C5:59:49:25:55:35:9F:F2:8F:BB:81:E2:A0:66
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
92:87:49:64:83:52:de:f7:b8:05:f0:2a:9d:cb:db:99:2e:d8:
0d:5d:b5:a8:88:94:c9:18:8b:47:a6:e0:3e:ef:3d:b8:ca:1b:
e6:19:53:ca:b3:4a:01:a3:52:86:96:45:d8:c6:69:f8:3f:5c:
75:fc:57:d1:38:f6:89:af:54:b0:39:dc:0e:a3:27:c9:3d:87:
07:79:3b:5f:55:31:2a:87:de:10:c4:e4:55:71:8a:71:aa:b1:
b5:29:af:15:dd:ac:d0:28:39:c6:82:5b:f7:af:ea:ae:d9:92:
7c:4a:7a:63:db:a2:2f:12:d4:ad:ec:dc:0f:07:1d:c8:da:bc:
5f:66:08:20:17:68:b7:31:8e:e3:2d:fe:5b:d4:27:75:c6:36:
1e:63:97:04:e0:cd:00:59:75:94:b6:5e:4f:55:90:23:71:a4:
a8:6b:c9:16:4d:e4:7e:e6:19:e6:c7:f2:2a:c3:96:8a:49:0f:
28:ed:a4:ac:da:eb:dd:81:36:00:4f:3e:4a:95:7c:29:a7:f6:
fa:ca:29:a0:14:6f:6e:93:f6:3a:df:93:a7:fe:65:1a:1a:65:
9b:47:61:0d:db:78:23:61:c0:1c:73:4e:69:2b:ba:87:50:a5:
c1:d0:db:90:19:28:ed:d2:d2:fb:ec:33:8c:4c:73:ac:df:3d:
85:fa:7d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUY3l3FXq4hyqJe3/6Cf1/q/aeEnowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MTAyNzExNTUwMVoX
DTI3MTAyNjEyMDAwMVowMzExMC8GA1UEAxMoODIyNzcwOTAxNzhFQzU1OTQ5MjU1
NTM1OUZGMjhGQkI4MUUyQTA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOXY6LdPuoG4UDoMAT3GPiV6mBHJ8a3gJJw6QYhlItd/55HR7taKfD4dJNYB
HEHFhMljTEOUGmLscLBuXh5bymK8V5bMKK8TyDDdLId512MKFtQj2ONttouwusdo
iAH1rTI8nhMxQ3MF7yyaTU4wm60YGMqe4KkIB9dZIMAze4lhQw68L2gSiJ8S9tWn
3cpviZSKX9mRlGRHOzJQlFNTtpa6E8iu0Uzt1vGrpzFl3E97rHZQzgl7yDui+rVz
4I5Psj0x3R2X2US+ELTrC61J/tw7STsNtrNWeXYxzupkd6UICxLrFZn2GPvVUb5Y
nSzzJLqggCD57L5eqqy+NjHblUMCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSCJ3CQ
F47FWUklVTWf8o+7geKgZjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy
c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z
MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQz
NTMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEAkodJZINS
3ve4BfAqncvbmS7YDV21qIiUyRiLR6bgPu89uMob5hlTyrNKAaNShpZF2MZp+D9c
dfxX0Tj2ia9UsDncDqMnyT2HB3k7X1UxKofeEMTkVXGKcaqxtSmvFd2s0Cg5xoJb
96/qrtmSfEp6Y9uiLxLUrezcDwcdyNq8X2YIIBdotzGO4y3+W9QndcY2HmOXBODN
AFl1lLZeT1WQI3GkqGvJFk3kfuYZ5sfyKsOWikkPKO2krNrr3YE2AE8+SpV8Kaf2
+sopoBRvbpP2Ot+Tp/5lGhplm0dhDdt4I2HAHHNOaSu6h1ClwdDbkBko7dLS++wz
jExzrN89hfp9Bw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:52 2026 by rpki-client