
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
File: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier: Yif9zAcaCiGPMsa6nFpzg5c6EtmMp4yn18LmSsTMSYg=
Subject key identifier: 83:8F:4A:D4:70:E6:64:63:37:DB:CD:53:AF:E4:FF:FC:DA:C0:0D:0B
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 3F70431D2EF6414030D16D808FD492DA959099C9
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
Signing time: Sun 06 Sep 2026 05:56:55 +0000
ROA not before: Sun 06 Sep 2026 05:51:55 +0000
ROA not after: Sun 05 Sep 2027 05:56:55 +0000
asID: 9449
IP address blocks: 2403:7e00:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 22:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:70:43:1d:2e:f6:41:40:30:d1:6d:80:8f:d4:92:da:95:90:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Sep 6 05:51:55 2026 GMT
Not After : Sep 5 05:56:55 2027 GMT
Subject: CN=838F4AD470E6646337DBCD53AFE4FFFCDAC00D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:22:4d:8b:95:ed:67:6b:9e:22:94:7a:2f:
66:04:5f:40:8e:be:b2:d5:09:a4:3c:bb:c4:60:c0:
d1:0e:4c:75:5e:db:d8:47:7c:0d:9f:9e:e8:be:30:
d3:c7:75:cf:1d:b5:c5:ee:00:fd:1f:62:12:cd:4a:
f4:ea:82:75:99:1d:7d:6c:5e:45:c8:70:c0:0e:a6:
d2:d1:18:61:39:ab:38:d0:5b:f0:62:dc:59:95:61:
4c:83:e8:b5:bd:3c:66:46:57:8f:7b:38:3e:db:d1:
b0:9b:49:f4:30:cb:fa:67:1e:82:eb:0b:a6:c8:4a:
0d:f3:30:f5:d9:32:de:bb:9c:20:ad:30:29:41:ea:
c7:8c:6b:c6:8f:97:f5:20:a1:8c:27:d5:6e:b3:ab:
b8:44:2c:0c:7a:d0:82:83:53:24:fd:46:76:32:53:
0f:88:6c:2a:ad:cc:25:4e:3e:f9:95:2e:95:5c:c6:
93:95:11:a4:50:ae:f6:57:66:a2:e0:04:b6:9c:f3:
d1:2a:dc:37:1b:c6:74:18:17:da:da:93:97:6a:14:
33:6c:d3:1c:78:01:a5:3e:ad:6a:43:4f:bd:f7:68:
ea:de:d2:9b:5c:85:ad:5a:c9:d1:fd:80:2a:41:38:
36:f3:2a:cd:91:a4:0f:7f:42:1d:5a:3c:d0:5c:39:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:4A:D4:70:E6:64:63:37:DB:CD:53:AF:E4:FF:FC:DA:C0:0D:0B
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:7e00:f001::/48
Signature Algorithm: sha256WithRSAEncryption
8c:90:df:de:d3:86:a5:7e:5e:39:06:9c:4d:fd:35:a1:9c:bf:
d3:a0:d9:22:11:be:20:e8:67:73:03:ef:33:32:da:59:ce:ac:
d5:64:eb:c1:f1:b7:1e:40:9a:bd:d0:9e:ae:0d:ae:b3:9a:75:
df:2d:0c:fe:51:37:5d:82:60:d6:27:ea:f5:d5:ec:1b:76:f6:
41:8b:30:b8:85:f0:5d:27:70:e4:2d:3b:01:a0:52:81:30:09:
44:56:38:60:1c:03:82:02:48:b6:06:a8:3a:e3:c7:6e:bb:9d:
23:12:05:43:e4:d2:9d:5d:22:dd:9f:76:d0:ce:f8:cd:46:d4:
3a:e1:41:e1:20:05:f2:e0:5e:91:b6:47:ec:b1:ab:d4:09:8c:
0a:35:c7:7e:1a:f7:48:ee:df:8b:7e:19:b7:2f:2e:9a:bb:90:
a9:8a:c2:a9:25:96:0b:3d:28:eb:27:f0:ca:6b:1b:95:5b:56:
2e:8a:25:cb:be:50:7b:a6:83:cf:77:83:73:22:b4:0f:d2:6a:
c9:4a:96:07:bb:32:03:11:b3:5f:ae:8c:07:7a:89:fa:19:5e:
89:37:af:71:ec:20:b2:50:35:e6:37:c2:24:2b:69:c6:39:09:
29:f2:31:9a:9f:a0:8e:3a:72:64:de:13:50:74:ff:4d:c3:fd:
f1:60:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:02:57 2026 by rpki-client