
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e20313336383039.roa
File: 3130332e3130342e3139392e302f32342d3234203d3e20313336383039.roa (raw, json)
Hash identifier: cWrY5oiA9JNUs/svZO/yBTjLRvACAjU84zCJuuunp5s=
Subject key identifier: DD:66:1F:B5:8F:0B:7B:07:D2:F8:AD:14:EF:EA:D5:9B:E6:BC:C2:26
Certificate issuer: /CN=A917135E0000/serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86
Certificate serial: 51EAAEAEE3826BD8789B62E6CDB647B55495E1F3
Authority key identifier: FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e20313336383039.roa
Signing time: Thu 29 Oct 2026 07:21:50 +0000
ROA not before: Thu 29 Oct 2026 07:16:50 +0000
ROA not after: Thu 28 Oct 2027 07:21:50 +0000
asID: 136809
IP address blocks: 103.104.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl
rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 22:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ea:ae:ae:e3:82:6b:d8:78:9b:62:e6:cd:b6:47:b5:54:95:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917135E0000, serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86
Validity
Not Before: Oct 29 07:16:50 2026 GMT
Not After : Oct 28 07:21:50 2027 GMT
Subject: CN=DD661FB58F0B7B07D2F8AD14EFEAD59BE6BCC226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:cb:76:6a:c3:de:d6:ad:98:fc:86:3e:bb:
7b:97:5f:50:3c:80:b0:e4:01:1a:ae:ca:3f:b8:c0:
1e:d7:4e:7c:dd:13:d4:fa:50:4b:c7:e2:c7:0f:f0:
58:be:2d:f5:94:28:02:3c:29:aa:6a:ce:65:fb:c1:
12:4e:8a:77:47:b8:f8:d9:91:8e:31:04:2c:10:4e:
c2:2d:03:84:f7:b9:31:c4:ce:a2:27:a1:1e:0a:1f:
79:ae:37:e2:2e:ae:2b:8d:31:7c:60:c1:ff:45:40:
6c:89:c5:d1:bc:35:9a:7b:a7:0c:9b:fc:a0:bb:a7:
cf:98:0d:b8:b8:e8:6c:52:fb:9b:5a:58:c3:6a:5c:
c3:90:e6:7b:ff:3c:fb:3e:30:9d:b2:18:70:93:07:
61:6a:36:83:69:cc:d2:9f:6d:92:54:80:41:8d:b9:
6b:f8:9e:48:3e:30:24:ea:2c:8d:9e:ee:bd:dc:20:
a6:d9:78:e8:91:10:19:ca:f5:91:60:dd:19:aa:77:
7f:34:e9:cb:8b:04:ec:eb:f5:a0:10:5b:07:b0:f3:
64:36:f9:f1:c3:54:5d:66:cb:96:8b:1b:19:a4:13:
a5:05:36:aa:c3:be:cd:3e:6d:08:9b:38:8c:21:c1:
bf:25:74:d3:fc:de:0d:54:19:cc:87:ed:15:cb:67:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:1F:B5:8F:0B:7B:07:D2:F8:AD:14:EF:EA:D5:9B:E6:BC:C2:26
X509v3 Authority Key Identifier:
keyid:FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e20313336383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6e:f0:da:95:3e:70:6c:7e:60:a7:f6:0e:77:9a:a6:79:99:
38:d1:7f:2b:c3:36:73:b1:d1:74:89:4d:93:53:91:12:02:9a:
71:34:15:6d:15:38:6a:a2:53:74:f6:62:74:94:47:b6:63:55:
9d:b6:15:0c:04:9f:53:02:7e:27:05:6a:ca:41:6b:d1:58:dc:
8c:3d:9c:67:49:be:5b:58:5d:02:66:28:4b:6e:39:c0:5d:5a:
bf:c1:a0:4c:14:c3:fb:c6:65:e3:fe:7c:52:90:79:25:52:90:
d0:4a:9d:63:c7:e8:86:23:c7:a9:a8:35:a2:3a:0d:76:60:06:
38:a9:60:26:d9:0d:ca:f6:e4:ed:5b:44:23:ff:77:31:68:e5:
4d:f4:3d:8c:9e:60:82:02:86:50:ae:5f:c6:aa:ab:58:89:a8:
f1:38:78:c6:b6:d4:99:9c:92:7f:4e:c1:49:b9:06:c4:a7:a5:
8c:f1:b0:c9:18:ea:49:67:04:2f:c0:ec:55:8f:ef:55:57:21:
eb:7d:89:87:f6:f0:d9:64:77:4e:67:c3:38:37:4f:eb:c2:d8:
7e:11:9b:b3:1e:51:06:20:e4:6e:e3:3f:bb:cc:69:e7:8e:3a:
1e:69:c9:64:64:f9:b3:c0:e8:ca:40:88:b1:41:a0:55:23:68:
c4:a6:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:57:26 2026 by rpki-client