
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UrfKF10uUTv4Q/1dYjAlo4kXXtIWK8p5Z4ct5BPye0E=
Subject key identifier: 76:7E:9A:5B:C4:67:F0:99:26:E2:6B:4D:0E:D9:A2:04:1E:D7:6E:DC
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 27B5283D3B84E82AAECE2B3AA77B5DC133D78CC2
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 11:10:59 +0000
ROA not before: Thu 15 Oct 2026 11:05:59 +0000
ROA not after: Thu 14 Oct 2027 11:10:59 +0000
asID: 834
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 01:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b5:28:3d:3b:84:e8:2a:ae:ce:2b:3a:a7:7b:5d:c1:33:d7:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Oct 15 11:05:59 2026 GMT
Not After : Oct 14 11:10:59 2027 GMT
Subject: CN=767E9A5BC467F09926E26B4D0ED9A2041ED76EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:88:76:96:cc:49:19:34:ed:f5:04:ce:7c:
8d:60:44:0e:b6:64:d6:ef:e5:7c:e6:09:d5:5b:c9:
8e:d1:30:f1:b3:cd:91:9f:de:17:5d:1a:4c:3b:34:
be:c4:5e:d4:f5:f6:07:60:94:66:b4:28:2b:5c:f9:
64:a0:fe:dd:36:03:49:d6:e4:6d:09:0c:6c:8b:ee:
0f:c2:1f:eb:4a:c3:ed:b1:58:c2:99:e3:b2:f9:f9:
64:e6:35:43:ca:1e:87:91:6a:38:38:1d:84:75:9a:
4c:c9:54:e4:b4:e2:b4:7b:ae:70:ea:67:42:a0:31:
44:0c:74:ad:9a:38:82:50:70:be:49:38:77:67:7a:
6a:0e:08:37:f4:94:52:01:a3:3c:37:3a:21:66:17:
06:6e:9f:91:97:b4:a6:cc:02:4b:4c:39:fb:74:a4:
0b:1c:8b:47:bf:28:ef:6c:03:c5:7a:40:8c:5a:db:
f2:7e:1a:e0:ad:d4:18:eb:62:77:d5:13:51:2e:93:
24:52:da:8c:30:e6:d2:40:a4:e6:da:84:64:ce:cc:
0a:d7:ac:40:4e:e0:bd:af:73:d1:19:92:c8:bc:a5:
f0:94:ff:20:cd:00:89:41:81:93:f2:ad:75:8e:5e:
8a:79:ab:c4:ef:5b:27:b7:f7:b6:96:6d:96:92:5a:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:9A:5B:C4:67:F0:99:26:E2:6B:4D:0E:D9:A2:04:1E:D7:6E:DC
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:71:97:1f:32:31:54:36:5b:1b:fe:d1:e1:0e:ce:6f:31:2a:
aa:52:d8:14:5f:fe:6b:ad:99:98:5c:4e:78:9f:aa:ad:d2:4e:
c4:c1:9c:71:52:e7:48:16:f1:87:d3:be:43:af:d7:31:69:4e:
55:20:98:8b:6b:05:16:ce:4f:83:7a:ae:22:e1:f6:1f:7c:ba:
c3:4c:f3:75:d7:03:59:bb:23:8d:01:33:d9:98:55:be:8d:81:
2b:e2:7a:22:fb:4f:62:a8:d6:94:6e:70:d5:db:1b:74:f9:ed:
5c:72:0c:fa:3b:2e:d9:63:f3:d1:fc:b1:ff:f6:21:29:14:44:
67:a7:2b:95:62:ac:41:cb:f3:b8:a1:91:65:4d:33:1e:91:b9:
49:7c:b6:3e:77:0d:77:aa:37:a0:9f:5c:38:cd:2c:c4:d8:a1:
f0:43:45:c2:1b:db:df:d1:27:a1:ab:5c:6f:f7:e8:bf:84:1f:
5d:69:0b:78:e9:e5:28:06:d6:06:26:18:ee:75:55:0b:48:4c:
fe:11:9a:8a:a2:cb:03:12:b2:48:85:bd:2d:a5:0b:36:fa:65:
91:e2:00:e7:6c:04:4d:27:06:02:f3:53:c4:86:e9:ab:4c:e7:
ed:c9:41:d5:9d:b0:2e:86:ee:01:d9:d0:23:4d:c4:7c:75:72:
f5:1f:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:00 2026 by rpki-client