
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2037353436.roa
File: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (raw, json)
Hash identifier: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=
Subject key identifier: F3:A0:14:4A:4B:AE:03:D8:F5:F3:A2:20:3A:E2:06:00:5D:CD:64:8A
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 313324A42D1D54B738C070B8C07773A917F1F931
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2037353436.roa
Signing time: Mon 29 Jun 2026 01:02:40 +0000
ROA not before: Mon 29 Jun 2026 00:57:40 +0000
ROA not after: Mon 28 Jun 2027 01:02:40 +0000
asID: 7546
IP address blocks: 203.7.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 16:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:33:24:a4:2d:1d:54:b7:38:c0:70:b8:c0:77:73:a9:17:f1:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jun 29 00:57:40 2026 GMT
Not After : Jun 28 01:02:40 2027 GMT
Subject: CN=F3A0144A4BAE03D8F5F3A2203AE206005DCD648A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:22:85:d8:06:7c:bb:35:e8:0b:c0:43:19:
58:27:0e:b5:52:d9:c0:e4:4e:57:fb:68:b5:64:47:
6e:38:9f:73:12:88:c9:ea:30:7b:cc:c1:6e:46:b2:
6d:54:e2:5c:65:9e:af:f3:da:51:28:78:ae:f3:87:
d9:52:c3:b1:09:2f:49:72:82:d4:03:cd:64:c7:26:
59:c8:32:89:03:ae:2e:65:a5:68:5e:cc:82:dc:f9:
76:e9:97:5b:4e:12:75:4e:2f:c4:f7:d8:99:72:12:
b7:0b:a2:eb:fc:2b:0f:50:eb:05:a0:ef:ec:42:21:
a6:3c:7d:3b:35:56:50:11:b4:b8:49:40:0b:a6:d5:
95:52:5e:8f:d4:b5:55:9b:a8:86:7f:ef:5d:ea:3b:
ed:e7:f9:4b:93:a1:a5:23:9a:70:52:58:4f:0c:ec:
a0:de:b7:bd:84:b0:af:b7:fa:3a:c7:40:56:d4:ac:
c7:31:3c:a0:51:92:e0:70:1a:25:4f:4f:b3:4c:0b:
be:b0:be:4a:96:7d:e4:cf:6d:79:1e:dc:e5:81:c9:
62:b9:78:5d:b9:de:5f:8f:59:b0:bc:04:39:23:52:
02:25:52:5d:8e:90:d7:fc:90:bf:dc:ef:c8:db:f1:
d2:ad:90:56:62:f7:fd:57:05:a1:a9:42:a4:50:b8:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:14:4A:4B:AE:03:D8:F5:F3:A2:20:3A:E2:06:00:5D:CD:64:8A
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.197.0/24
Signature Algorithm: sha256WithRSAEncryption
43:87:9c:0a:9f:6a:d3:a6:3e:f4:72:b1:99:74:b9:af:e6:3d:
d9:b0:f7:de:52:2f:61:13:2b:a0:2e:c1:b7:a4:c4:91:96:9a:
e2:2e:f0:c0:4e:83:c2:b7:b5:45:bf:44:17:3f:cb:5b:a4:de:
d0:58:a0:a7:ce:78:4f:23:b9:ed:99:e4:f5:c7:02:eb:33:db:
c3:d1:5e:6c:35:54:4b:23:39:cb:4e:76:02:c0:72:ec:1a:82:
06:00:93:92:f4:2d:a3:18:fc:75:aa:5d:e2:bd:ad:c6:99:b5:
96:74:0e:64:91:3a:09:3f:d4:83:85:db:44:5e:d7:67:10:84:
b8:8c:02:48:41:6d:0e:fe:ce:e0:ce:ef:5b:cc:7b:12:f7:2a:
a8:40:54:8a:0f:f5:a7:c1:0b:61:05:1f:2b:aa:a4:5b:a1:22:
94:cb:84:da:c3:80:93:c9:ec:ab:39:d7:18:a9:c9:c9:d1:35:
54:07:3e:77:e8:b0:42:8d:40:82:f0:0e:5e:1e:4e:50:23:6b:
a5:ba:26:8e:bc:de:1a:e0:1f:ab:a3:38:ee:73:53:95:45:94:
ca:fc:d1:68:0e:e4:02:7b:f1:1a:1f:28:62:c8:31:fd:fb:08:
68:ce:58:35:f4:9c:27:a4:7c:2b:4a:20:e6:88:f0:f3:72:1a:
7a:a2:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:40 2026 by rpki-client