
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa
File: 3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: OcqsdLDtMbRRfAMVaO1K99xhO+aLsojGYCO5peADbbA=
Subject key identifier: 33:A0:A1:DA:1E:14:70:56:B3:C6:4B:6C:07:EA:72:03:18:D5:06:1A
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 75367623099D5CD39D6107511BF249C94475FC80
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa
Signing time: Sun 30 Aug 2026 11:53:25 +0000
ROA not before: Sun 30 Aug 2026 11:48:25 +0000
ROA not after: Sun 29 Aug 2027 11:53:25 +0000
asID: 197537
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 21:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:36:76:23:09:9d:5c:d3:9d:61:07:51:1b:f2:49:c9:44:75:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Aug 30 11:48:25 2026 GMT
Not After : Aug 29 11:53:25 2027 GMT
Subject: CN=33A0A1DA1E147056B3C64B6C07EA720318D5061A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:02:83:9d:d5:84:b8:b8:f9:ed:6c:49:7b:
d1:1e:e9:7f:a5:e4:45:62:c5:9b:24:93:bb:2d:d5:
7b:81:10:56:9b:2d:03:31:4b:e0:49:66:93:94:9f:
a0:61:e1:17:e0:8f:38:8f:ff:2c:e4:83:31:83:71:
24:10:31:7c:e9:a0:15:69:7f:8c:26:67:30:46:89:
77:d7:77:e7:aa:23:ab:56:5d:f3:ed:08:70:3e:5c:
9b:22:75:37:fe:df:fe:dd:04:d6:dc:c1:c6:10:5f:
ca:08:9f:55:ba:48:03:b7:2e:3a:b2:d0:59:b6:72:
2a:2c:f7:5c:2d:66:3d:94:72:b2:cb:70:d9:d9:b3:
bb:32:91:6d:0e:01:08:63:1f:4d:38:b0:66:9d:6b:
6c:df:ee:71:56:51:69:00:ab:b2:0b:63:c7:ce:a7:
ac:53:13:cc:1e:98:f3:bb:5a:9d:9a:a7:0b:37:36:
8d:76:a3:56:46:34:b4:4c:07:1b:b4:23:29:99:c7:
c5:69:28:62:17:a5:ed:f0:d2:9c:b5:cb:98:f9:1d:
ee:d3:54:12:0e:e6:f3:d0:70:8a:4f:23:a2:20:45:
9f:70:5e:a8:12:2a:89:0f:67:94:32:94:16:9a:b6:
b1:2f:6d:f3:be:6b:af:6a:50:07:35:73:17:a9:2f:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:A1:DA:1E:14:70:56:B3:C6:4B:6C:07:EA:72:03:18:D5:06:1A
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:66:ca:72:8a:9c:26:ed:9a:97:c2:65:7b:5d:83:6d:9f:b7:
d9:12:59:4d:9c:c7:21:9c:5e:38:dd:12:c1:51:bb:e1:88:f4:
b2:d3:f7:d9:79:4b:30:ee:5b:f7:22:a8:9e:6a:b4:17:56:82:
3d:77:f7:57:63:66:26:42:48:a5:8a:60:d9:eb:84:32:86:ab:
5f:3d:72:51:3b:fb:ad:eb:c5:70:fa:81:9d:a1:a5:d8:fb:e5:
e7:a1:6a:2f:bc:d6:4c:8c:4f:58:a2:37:73:55:cf:27:ec:4d:
39:5e:2e:d7:de:7b:87:a8:ae:25:42:44:d3:7b:7e:8f:f7:80:
29:ea:74:7f:0e:f1:4e:da:44:4c:06:8e:ca:cb:b0:c7:50:21:
b9:77:4f:8a:0f:5c:ea:cc:81:ef:45:f7:5d:fc:ae:f4:94:03:
d8:18:91:d0:16:ab:b2:fb:33:99:34:58:c4:8d:dc:4f:44:29:
30:28:68:dd:c7:4e:d5:8f:23:d9:4e:42:be:30:00:e6:d6:93:
16:38:ff:a3:e1:fe:9d:00:b2:ab:84:b2:39:48:49:90:49:ae:
97:72:90:4f:ca:ad:ba:6e:5a:9c:6e:2d:c3:a2:6e:d0:68:e1:
29:8b:10:24:9b:35:77:60:7e:85:12:3a:22:10:2b:18:85:62:
1e:2e:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:54 2026 by rpki-client