
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa
File: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (raw, json)
Hash identifier: KWhrBV/zjumpPUyS3bkIhwSt0IKmcrtP3SgZZsS+/20=
Subject key identifier: 93:00:37:10:0C:C9:6A:CD:8C:6E:AC:20:DF:55:3E:FE:5A:A2:3E:53
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 5B62024CCA6D0C6DDAF418273DBC3B359C60A249
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa
Signing time: Mon 29 Jun 2026 12:03:55 +0000
ROA not before: Mon 29 Jun 2026 11:58:55 +0000
ROA not after: Mon 28 Jun 2027 12:03:55 +0000
asID: 153771
IP address blocks: 103.25.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:62:02:4c:ca:6d:0c:6d:da:f4:18:27:3d:bc:3b:35:9c:60:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jun 29 11:58:55 2026 GMT
Not After : Jun 28 12:03:55 2027 GMT
Subject: CN=930037100CC96ACD8C6EAC20DF553EFE5AA23E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:d5:f3:d0:c4:47:74:57:a8:db:cd:73:b1:
49:e6:1b:06:b1:b6:3e:31:66:15:5f:55:91:54:1e:
40:45:58:c6:37:84:24:dc:e7:d7:25:ea:f8:25:b7:
4e:4c:50:0f:58:55:7b:f9:7b:a0:f4:06:cd:86:05:
27:0e:6d:f0:35:91:19:1c:55:4d:9d:b1:4e:8e:ca:
d1:a8:fc:52:08:bd:c0:fa:c3:77:49:30:3d:9e:98:
c8:a0:59:26:a6:61:7c:2b:fa:2b:4c:bc:30:46:57:
e9:f9:6e:03:e4:b9:30:4c:76:2f:3f:a9:c7:0c:35:
60:32:27:8a:ba:fc:5d:40:fd:db:62:4f:f1:89:09:
22:63:cf:d7:41:fd:21:98:67:2a:8c:25:b3:6c:8b:
93:e0:b2:84:ec:86:73:b8:85:20:1f:f6:8e:3e:af:
28:79:b2:20:12:43:55:17:6f:9d:1a:8d:6d:e2:f2:
d7:03:32:f6:a5:72:8e:b3:34:3c:c9:4e:3a:a2:5c:
cf:c3:62:8e:74:a6:54:04:cb:ba:ac:07:9c:43:77:
46:ca:df:e0:d9:2f:fa:57:de:b0:a1:bc:d7:36:7e:
31:54:50:b1:55:5e:e4:0b:a8:e3:62:7e:8a:7f:80:
f0:44:ef:be:01:0b:51:c9:72:10:3b:9e:a6:9f:31:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:37:10:0C:C9:6A:CD:8C:6E:AC:20:DF:55:3E:FE:5A:A2:3E:53
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.125.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d2:7a:e4:18:35:ed:36:74:9b:e9:c5:e0:5c:38:54:26:e8:
04:51:21:ee:07:63:5c:5e:cb:c1:5d:79:eb:5b:d6:14:29:e4:
4d:a6:30:2d:87:59:e7:43:3a:1a:a8:a8:77:68:0e:ad:ec:3a:
b7:ef:a6:ee:e3:e3:9b:2a:d7:7f:38:a8:3e:bc:35:5a:b1:b1:
3e:ea:78:8d:45:f0:11:44:50:54:f1:32:55:3b:eb:f5:97:e8:
12:68:6e:f2:e4:43:36:13:72:d4:ee:3e:5c:0a:0a:ed:75:aa:
24:5e:1a:5c:96:64:d2:3d:51:00:6f:8b:58:75:d7:3a:ef:dc:
c6:b3:bf:d4:00:4c:82:38:bb:91:35:ad:96:14:fd:f4:77:1b:
b7:dc:0e:4d:fb:0d:2f:8d:c9:b4:3a:07:15:be:64:35:7e:da:
1a:c9:16:b4:97:e1:8b:ce:2f:f2:e7:72:1e:68:59:ac:ef:2b:
cf:a9:48:f3:5c:8c:46:62:39:39:d1:6b:1a:cc:96:b9:fa:b1:
2b:8e:c8:fe:ba:e7:5a:ae:f8:d8:c2:5f:2b:0c:da:2a:0e:46:
39:c8:d7:13:13:87:38:d6:08:7a:c2:f2:b7:c8:08:4a:82:70:
66:66:18:80:3b:0b:a5:1a:eb:67:22:84:a9:d8:02:a2:5f:30:
fc:47:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:13 2026 by rpki-client