
$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: Sz8Yqo9El2Bi4eL3F+Huj3SiQQVuMNGxLIiSQIJ4RT8=
Subject key identifier: F2:56:59:A2:94:4E:BB:7A:8C:9E:52:7C:F4:AD:12:58:93:C0:D2:F6
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 70747C7177A68B2E2F0CC3F1F0F152E924E318FC
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Tue 22 Sep 2026 12:00:01 +0000
ROA not before: Tue 22 Sep 2026 11:55:01 +0000
ROA not after: Tue 21 Sep 2027 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:74:7c:71:77:a6:8b:2e:2f:0c:c3:f1:f0:f1:52:e9:24:e3:18:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Sep 22 11:55:01 2026 GMT
Not After : Sep 21 12:00:01 2027 GMT
Subject: CN=F25659A2944EBB7A8C9E527CF4AD125893C0D2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:5c:cc:9b:e8:e7:e9:22:eb:cc:08:76:d4:
b1:18:e5:aa:0b:50:26:71:98:55:39:4b:7c:80:93:
7c:b8:27:1a:3f:4e:19:df:30:52:0b:cc:f8:44:df:
98:95:d1:ab:58:4a:1d:1e:89:a2:6e:25:14:26:a7:
cc:e4:55:7c:7e:93:09:62:26:1b:23:74:83:66:4c:
a6:ec:54:e3:69:d0:e5:53:f2:d8:70:d7:05:e9:4d:
3e:a6:20:29:d8:19:75:7d:a6:05:47:f6:d2:78:e5:
c7:97:5a:1c:8a:df:44:74:65:65:d0:c8:63:65:21:
7b:28:17:b5:ff:d9:5b:05:6e:14:01:a1:7e:5b:73:
e9:0d:af:cf:29:32:17:ef:b3:4b:bb:1e:e4:27:f0:
23:8c:d7:79:4d:fe:a3:0a:45:ba:03:f4:a1:b3:1e:
76:b8:3a:3f:97:f4:ea:c1:d8:48:da:9a:00:8c:9d:
1f:e0:db:15:c3:3d:9b:98:2f:67:63:94:8a:fe:31:
4a:35:cf:ec:79:3d:f2:4e:53:cd:5b:3c:34:ef:96:
12:44:04:0e:06:02:f7:6c:f8:61:c9:b8:a1:5a:ca:
98:e1:21:d3:93:4a:9a:79:8b:65:98:5e:f1:34:2e:
e1:51:be:f8:86:67:e2:90:a2:7c:1c:eb:3e:bf:15:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:59:A2:94:4E:BB:7A:8C:9E:52:7C:F4:AD:12:58:93:C0:D2:F6
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
be:09:1b:eb:55:52:b0:9e:a3:dc:06:41:7a:a7:2b:ef:2c:0f:
68:d8:e6:7f:5e:ac:4a:82:87:66:39:cd:32:a4:2c:d9:64:39:
ae:ec:75:ae:a2:59:b1:65:05:2f:2b:15:b0:26:db:bc:a4:2d:
ba:a9:aa:1e:d3:a1:c9:30:d2:51:a1:b7:40:df:3d:0d:3a:5f:
d4:6a:e1:9c:59:11:f4:2e:ff:12:ae:0e:67:b8:4b:3f:e0:6c:
99:98:8c:62:d1:61:9c:6b:f3:d4:89:cd:28:e9:d1:39:e6:18:
71:d3:6e:c3:1f:35:cf:74:77:c1:37:65:7a:45:74:1a:60:6f:
e0:db:f8:ef:31:4a:76:6d:47:cd:b9:82:d3:54:ec:4b:8e:5c:
60:66:52:58:63:db:c9:6b:d1:fd:65:76:4c:c1:97:21:69:fd:
9f:50:b7:0a:4c:11:fc:4e:18:d4:0f:c5:cd:31:ca:5d:51:e3:
7b:41:bd:98:95:eb:63:aa:5a:29:af:57:e4:aa:71:e3:1e:67:
f9:c6:24:f5:a4:d6:aa:9e:b1:a6:97:9c:66:69:12:7d:33:64:
46:36:62:5c:75:df:2f:08:ca:86:33:4c:4c:de:58:10:96:39:
68:51:c1:d2:37:46:58:b4:44:32:37:35:92:34:b9:67:e5:9e:
e0:90:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:48:07 2026 by rpki-client