
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
File: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: 7ng0Lz0v75i9UIOOgIh6OtvWrPo/NJYnzs1xeOHzW3c=
Subject key identifier: B6:F7:7F:6C:03:FB:42:77:ED:A2:9F:2F:0F:32:98:69:56:BB:DE:A0
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 085B6FFCEA8B735D9BE762B0FF8EAB7D1C3503AA
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 15 Oct 2026 08:03:55 +0000
ROA not before: Thu 15 Oct 2026 07:58:55 +0000
ROA not after: Thu 14 Oct 2027 08:03:55 +0000
asID: 200017
IP address blocks: 43.255.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 01:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5b:6f:fc:ea:8b:73:5d:9b:e7:62:b0:ff:8e:ab:7d:1c:35:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Oct 15 07:58:55 2026 GMT
Not After : Oct 14 08:03:55 2027 GMT
Subject: CN=B6F77F6C03FB4277EDA29F2F0F32986956BBDEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:d1:2c:19:43:81:32:24:d5:dd:36:7f:db:
16:36:97:bb:05:84:a2:83:8e:3a:94:b8:77:99:a8:
16:b7:f3:9d:43:6c:0b:e0:fc:b3:4b:51:ab:b4:30:
17:3c:42:c8:25:26:b0:8a:90:f6:29:f4:49:9c:00:
27:3e:80:f0:d0:1b:38:5b:6d:d0:2d:6a:7a:73:0c:
46:cd:68:6c:51:b4:9d:28:aa:30:e6:e3:b7:5a:e6:
c8:f3:5f:5c:00:13:68:1e:db:72:ec:b9:1a:79:97:
b4:c5:7f:2e:58:d9:5b:69:cb:59:26:db:4c:68:bb:
b0:20:77:11:01:71:2c:23:5c:e0:6d:c1:92:9e:03:
f7:31:0a:39:29:c6:fa:b3:60:11:9c:7f:af:6b:ba:
47:28:4d:23:cf:9c:05:0a:e0:0e:b1:e0:4c:2a:8c:
ea:ec:ef:ce:19:09:86:86:31:2f:b5:bb:ae:7a:7d:
86:67:8a:16:bb:9c:90:f5:d0:3e:7b:77:57:81:87:
ef:90:0d:56:d7:98:9c:aa:9a:7f:28:ac:ec:48:84:
b0:45:35:eb:ed:66:c0:fa:71:2a:8d:43:d2:97:e0:
93:8c:7f:5d:cb:d5:75:92:ad:ca:b2:fe:da:6f:cb:
68:e3:0c:e6:53:d8:51:55:9a:79:90:39:ea:0a:1c:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:7F:6C:03:FB:42:77:ED:A2:9F:2F:0F:32:98:69:56:BB:DE:A0
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.83.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a4:92:37:2b:94:2d:3c:6c:29:21:38:55:f4:c1:ce:ff:b1:
0f:c6:8a:f8:22:75:f2:07:8f:9d:54:b5:2b:ac:b7:be:18:35:
61:cb:c2:11:48:ec:a5:07:18:06:83:85:7e:04:f9:e3:0c:f2:
f7:46:fc:23:54:b5:74:9d:3c:58:17:89:0b:87:b2:0a:7e:9a:
e6:8f:41:a2:93:76:61:b3:7d:05:99:68:63:ef:2d:8c:0f:9f:
5e:ca:e4:50:21:bd:ee:85:3c:f8:d4:f2:7e:c5:93:c3:4a:87:
8d:db:1b:4e:aa:12:fb:48:96:b3:3e:81:94:78:70:76:48:4c:
07:6c:23:32:9b:e8:54:dc:73:5c:c3:f3:29:b5:e8:52:af:5b:
9f:7c:05:60:4a:47:c7:f7:b1:4e:66:d1:33:f8:02:aa:a0:d4:
0b:cd:af:c7:53:40:09:5b:d6:ce:2c:0f:17:d1:d7:d2:91:f5:
00:00:7a:8a:cd:80:32:f9:c9:33:b4:97:ea:f4:92:2d:0e:46:
48:7c:4c:de:aa:65:08:c2:c9:71:13:33:de:57:4a:2c:66:5a:
91:a3:0a:de:18:61:0d:be:ee:90:e7:d1:9b:ad:7a:e3:4d:69:
91:af:02:b0:5c:f1:4a:6c:ef:01:d9:da:01:ec:30:81:ca:79:
67:62:35:66
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUCFtv/OqLc12b52Kw/46rfRw1A6owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MTAxNTA3NTg1NVoX
DTI3MTAxNDA4MDM1NVowMzExMC8GA1UEAxMoQjZGNzdGNkMwM0ZCNDI3N0VEQTI5
RjJGMEYzMjk4Njk1NkJCREVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOq00SwZQ4EyJNXdNn/bFjaXuwWEooOOOpS4d5moFrfznUNsC+D8s0tRq7Qw
FzxCyCUmsIqQ9in0SZwAJz6A8NAbOFtt0C1qenMMRs1obFG0nSiqMObjt1rmyPNf
XAATaB7bcuy5GnmXtMV/LljZW2nLWSbbTGi7sCB3EQFxLCNc4G3Bkp4D9zEKOSnG
+rNgEZx/r2u6RyhNI8+cBQrgDrHgTCqM6uzvzhkJhoYxL7W7rnp9hmeKFruckPXQ
Pnt3V4GH75ANVteYnKqafyis7EiEsEU16+1mwPpxKo1D0pfgk4x/XcvVdZKtyrL+
2m/LaOMM5lPYUVWaeZA56gockjMCAwEAAaOCAhEwggINMB0GA1UdDgQWBBS2939s
A/tCd+2iny8PMphpVrveoDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx
MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzIzMDMwMzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/9TMA0GCSqGSIb3DQEBCwUAA4IB
AQACpJI3K5QtPGwpIThV9MHO/7EPxor4InXyB4+dVLUrrLe+GDVhy8IRSOylBxgG
g4V+BPnjDPL3RvwjVLV0nTxYF4kLh7IKfprmj0Gik3Zhs30FmWhj7y2MD59eyuRQ
Ib3uhTz41PJ+xZPDSoeN2xtOqhL7SJazPoGUeHB2SEwHbCMym+hU3HNcw/MptehS
r1uffAVgSkfH97FOZtEz+AKqoNQLza/HU0AJW9bOLA8X0dfSkfUAAHqKzYAy+ckz
tJfq9JItDkZIfEzeqmUIwslxEzPeV0osZlqRowreGGENvu6Q59GbrXrjTWmRrwKw
XPFKbO8B2doB7DCBynlnYjVm
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:42:56 2026 by rpki-client