
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e203332343138.roa
File: 3130332e3130342e3139392e302f32342d3234203d3e203332343138.roa (raw, json)
Hash identifier: 11dplvxUH97aGqTgIFUnHCudWEe4IdnTAvEPx3BJ6Wg=
Subject key identifier: BC:62:FD:3B:27:81:7F:2D:A0:BA:54:5E:CF:F4:5E:74:BC:D8:4D:B2
Certificate issuer: /CN=A917135E0000/serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86
Certificate serial: 0A9D302F3FACB22DC96DF6898345CE03BC84DC65
Authority key identifier: FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e203332343138.roa
Signing time: Thu 29 Oct 2026 07:22:08 +0000
ROA not before: Thu 29 Oct 2026 07:17:08 +0000
ROA not after: Thu 28 Oct 2027 07:22:08 +0000
asID: 32418
IP address blocks: 103.104.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl
rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 22:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9d:30:2f:3f:ac:b2:2d:c9:6d:f6:89:83:45:ce:03:bc:84:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917135E0000, serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86
Validity
Not Before: Oct 29 07:17:08 2026 GMT
Not After : Oct 28 07:22:08 2027 GMT
Subject: CN=BC62FD3B27817F2DA0BA545ECFF45E74BCD84DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:e3:01:98:31:4d:ed:33:0a:ba:9a:35:69:
32:f1:ac:e8:9f:99:89:91:7c:87:3d:1f:bc:70:83:
eb:81:cf:48:29:b7:95:1a:cb:08:9c:a1:42:4e:28:
33:f5:ae:9c:17:29:fe:fb:67:af:5e:03:93:e1:af:
39:0b:80:c1:cc:3a:58:dd:82:78:80:55:c9:e1:c5:
d9:51:0c:18:d1:76:07:61:b6:87:f5:05:9f:6d:41:
65:86:5b:45:50:f5:26:fd:50:84:58:6f:a0:a9:0a:
3c:15:49:b5:f3:00:58:55:76:e2:c6:bc:b3:e2:3f:
2a:ea:74:f0:19:ef:c5:de:df:ae:7f:7d:0d:cc:40:
91:9a:a0:9c:e2:11:7a:83:bc:41:09:71:0c:2c:17:
be:ad:d4:67:a9:a5:12:f7:4f:88:4c:4b:35:e5:45:
f6:77:fb:9c:6a:11:ab:b0:2f:0e:12:c6:37:33:07:
44:2f:23:75:41:ba:fa:39:9c:41:b4:c8:0e:22:35:
eb:25:0e:29:57:56:7c:d6:61:5b:da:90:12:69:7e:
48:4a:41:ca:43:51:1d:77:ca:40:71:69:8f:16:11:
b2:49:35:83:83:03:12:4a:ff:30:5a:2c:0d:66:c6:
da:c1:e1:60:80:53:4e:49:91:cf:95:b2:17:6b:84:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:FD:3B:27:81:7F:2D:A0:BA:54:5E:CF:F4:5E:74:BC:D8:4D:B2
X509v3 Authority Key Identifier:
keyid:FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139392e302f32342d3234203d3e203332343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.199.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4e:ac:0d:59:65:25:de:9d:88:15:39:4d:6e:57:e4:19:96:
31:bc:e6:4e:5a:8d:fd:02:9c:31:7e:7c:13:0e:16:2b:da:75:
20:6a:f1:00:dd:40:b3:6f:15:9f:45:bf:0a:03:ee:8f:ac:41:
91:8e:1e:da:e1:94:1b:30:c2:5b:e3:8a:b1:3b:ab:c5:27:24:
79:34:0c:84:9b:fc:5c:8a:f8:cb:3e:df:45:44:55:66:4f:ea:
49:52:f4:51:51:25:fe:0b:79:2a:b3:f6:1d:fa:47:70:34:ba:
71:90:4c:92:4d:26:35:8b:6d:76:b9:75:f1:47:7e:ba:0e:18:
4e:5d:61:d9:f9:7a:27:a5:32:1a:f8:44:1e:70:e0:5d:12:fb:
a6:56:c7:2b:29:6e:2c:5b:cc:51:0b:24:87:1f:b3:27:32:18:
72:3c:54:d6:98:da:e2:7c:53:0c:1e:15:b8:ca:cd:a8:dc:ae:
c8:d9:f6:d5:88:5a:a1:18:7f:e4:a4:55:ec:9b:11:de:fb:9b:
e8:08:56:57:76:a3:25:7e:6d:60:c3:80:dd:47:da:7a:3a:58:
26:c8:37:14:28:55:77:a8:87:9a:31:36:3b:94:6d:c7:c4:63:
30:de:cb:69:df:4f:34:3e:b4:12:ee:27:bb:59:7c:e6:78:6d:
f8:de:55:75
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUCp0wLz+ssi3JbfaJg0XOA7yE3GUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzEzNUUwMDAwMTEwLwYDVQQFEyhGQjgwQjQyNzI2
RTgyMjg1QUU3MUExMzFBM0E3N0M0Mzg5MjVFRDg2MB4XDTI2MTAyOTA3MTcwOFoX
DTI3MTAyODA3MjIwOFowMzExMC8GA1UEAxMoQkM2MkZEM0IyNzgxN0YyREEwQkE1
NDVFQ0ZGNDVFNzRCQ0Q4NERCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFb4wGYMU3tMwq6mjVpMvGs6J+ZiZF8hz0fvHCD64HPSCm3lRrLCJyhQk4o
M/WunBcp/vtnr14Dk+GvOQuAwcw6WN2CeIBVyeHF2VEMGNF2B2G2h/UFn21BZYZb
RVD1Jv1QhFhvoKkKPBVJtfMAWFV24sa8s+I/Kup08Bnvxd7frn99DcxAkZqgnOIR
eoO8QQlxDCwXvq3UZ6mlEvdPiExLNeVF9nf7nGoRq7AvDhLGNzMHRC8jdUG6+jmc
QbTIDiI16yUOKVdWfNZhW9qQEml+SEpBykNRHXfKQHFpjxYRskk1g4MDEkr/MFos
DWbG2sHhYIBTTkmRz5WyF2uEXI0CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBS8Yv07
J4F/LaC6VF7P9F50vNhNsjAfBgNVHSMEGDAWgBT7gLQnJugiha5xoTGjp3xDiSXt
hjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3MTM1RTAwMDAvMC9GQjgwQjQy
NzI2RTgyMjg1QUU3MUExMzFBM0E3N0M0Mzg5MjVFRDg2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8tNEMwSnlib0lv
V3VjYUV4bzZkOFE0a2w3WVkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTcx
MzVFMDAwMC8wLzMxMzAzMzJlMzEzMDM0MmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMzMyMzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2jHMA0GCSqGSIb3DQEBCwUA
A4IBAQB3TqwNWWUl3p2IFTlNblfkGZYxvOZOWo39ApwxfnwTDhYr2nUgavEA3UCz
bxWfRb8KA+6PrEGRjh7a4ZQbMMJb44qxO6vFJyR5NAyEm/xcivjLPt9FRFVmT+pJ
UvRRUSX+C3kqs/Yd+kdwNLpxkEySTSY1i212uXXxR366DhhOXWHZ+XonpTIa+EQe
cOBdEvumVscrKW4sW8xRCySHH7MnMhhyPFTWmNrifFMMHhW4ys2o3K7I2fbViFqh
GH/kpFXsmxHe+5voCFZXdqMlfm1gw4DdR9p6OlgmyDcUKFV3qIeaMTY7lG3HxGMw
3stp3080PrQS7ie7WXzmeG343lV1
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:09 2026 by rpki-client