
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
File: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (raw, json)
Hash identifier: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=
Subject key identifier: 4D:CC:4C:66:F9:11:9E:FE:F6:E2:E8:16:A4:9F:DC:D3:2E:A9:6B:18
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 01B2692CB3C62AB7EB5BC5321F4417EBE62E69B8
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
Signing time: Mon 20 Apr 2026 07:27:11 +0000
ROA not before: Mon 20 Apr 2026 07:22:11 +0000
ROA not after: Mon 19 Apr 2027 07:27:11 +0000
asID: 9913
IP address blocks: 103.233.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b2:69:2c:b3:c6:2a:b7:eb:5b:c5:32:1f:44:17:eb:e6:2e:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Apr 20 07:22:11 2026 GMT
Not After : Apr 19 07:27:11 2027 GMT
Subject: CN=4DCC4C66F9119EFEF6E2E816A49FDCD32EA96B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:95:54:86:a3:d8:df:5e:69:e2:8d:94:5e:
05:a8:7f:d1:c9:ed:25:4f:17:a1:64:c5:fa:92:d0:
0b:55:e3:a0:1a:13:a0:9c:b2:df:86:83:49:ae:b0:
fd:0d:f5:92:b9:58:6d:22:17:c5:01:c1:09:53:bf:
8f:8a:3f:cb:e9:c1:00:f4:b5:07:8a:2e:1d:a4:cc:
9e:f0:b9:e7:1f:c0:11:a7:46:43:06:31:f1:50:2d:
60:a9:23:98:7f:99:83:fc:fe:75:96:73:d9:b3:c2:
d9:6a:d6:ae:bb:a9:01:07:e9:8b:09:2d:f2:f7:74:
c3:de:64:4e:20:b9:66:e2:3d:35:70:58:a4:12:31:
43:ad:8b:66:60:aa:07:cf:68:8f:96:60:92:d7:06:
1a:dc:b8:b0:4e:03:7b:58:4c:0d:28:e2:6a:46:66:
bc:e7:30:e0:e1:df:82:15:e1:11:78:75:ac:56:3f:
ca:dc:46:85:09:6b:24:4c:48:d8:ae:31:36:d5:87:
e7:f2:54:5d:77:66:e7:54:f6:f4:17:94:05:15:49:
b6:98:cc:26:f3:2c:d9:ab:ae:86:0f:2f:2e:93:4a:
86:42:4e:bb:25:e0:7d:28:47:5d:aa:98:a5:b8:17:
d5:4d:e2:70:72:c4:e9:44:34:35:1f:b1:ec:a8:d7:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:4C:66:F9:11:9E:FE:F6:E2:E8:16:A4:9F:DC:D3:2E:A9:6B:18
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:49:5a:36:ac:e4:4f:b4:2a:34:22:9d:9a:73:76:40:4c:5c:
dd:a9:56:da:e7:c4:52:c6:38:43:c8:48:45:77:4b:0c:90:10:
e9:18:16:a4:9d:08:ad:8e:94:4f:9d:75:30:4b:7d:d0:45:37:
ac:16:f2:4e:25:25:53:69:39:b9:87:e5:4c:b9:41:38:56:c2:
75:c4:5e:4c:ac:1e:2f:ec:62:73:18:e4:3d:b8:de:8a:07:16:
d7:e7:f6:4a:d2:f4:c4:5d:d9:66:1e:8c:34:46:27:99:53:94:
8c:b9:0d:7a:c1:0b:30:bb:45:65:93:9d:0e:21:f9:29:88:40:
a6:ef:0e:59:9d:ea:ac:d8:19:ea:87:79:59:46:82:ed:48:aa:
0c:5b:c8:10:9d:da:d0:2e:c1:03:56:c2:b7:70:f1:1e:88:c9:
c2:94:ee:ad:c4:01:a7:ff:4e:30:b6:a8:05:10:c5:a5:84:ea:
5c:08:e6:b3:20:57:24:73:b5:72:47:bf:17:71:2d:eb:80:f8:
23:b3:7a:a3:8c:06:37:ef:f5:d3:b1:0b:42:c3:ad:4a:5d:74:
7a:f1:55:96:07:02:9b:a7:57:c6:1b:55:31:68:75:f7:dd:94:
40:68:f6:7d:86:4d:b6:aa:a8:fe:57:a1:0a:b6:ca:43:1f:f5:
6d:f3:28:8f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUAbJpLLPGKrfrW8UyH0QX6+YuabgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2
QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDQyMDA3MjIxMVoX
DTI3MDQxOTA3MjcxMVowMzExMC8GA1UEAxMoNERDQzRDNjZGOTExOUVGRUY2RTJF
ODE2QTQ5RkRDRDMyRUE5NkIxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANM8lVSGo9jfXmnijZReBah/0cntJU8XoWTF+pLQC1XjoBoToJyy34aDSa6w
/Q31krlYbSIXxQHBCVO/j4o/y+nBAPS1B4ouHaTMnvC55x/AEadGQwYx8VAtYKkj
mH+Zg/z+dZZz2bPC2WrWrrupAQfpiwkt8vd0w95kTiC5ZuI9NXBYpBIxQ62LZmCq
B89oj5ZgktcGGty4sE4De1hMDSjiakZmvOcw4OHfghXhEXh1rFY/ytxGhQlrJExI
2K4xNtWH5/JUXXdm51T29BeUBRVJtpjMJvMs2auuhg8vLpNKhkJOuyXgfShHXaqY
pbgX1U3icHLE6UQ0NR+x7KjXNL0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBRNzExm
+RGe/vbi6Bakn9zTLqlrGDAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf
6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy
MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f
OXZNbXJnbTBTX3Z2RmluLXMuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzkvMzEzMDMzMmUzMjMzMzMyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQy
MDNkM2UyMDM5MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+nQMA0GCSqGSIb3DQEBCwUAA4IB
AQANSVo2rORPtCo0Ip2ac3ZATFzdqVba58RSxjhDyEhFd0sMkBDpGBaknQitjpRP
nXUwS33QRTesFvJOJSVTaTm5h+VMuUE4VsJ1xF5MrB4v7GJzGOQ9uN6KBxbX5/ZK
0vTEXdlmHow0RieZU5SMuQ16wQswu0Vlk50OIfkpiECm7w5Zneqs2Bnqh3lZRoLt
SKoMW8gQndrQLsEDVsK3cPEeiMnClO6txAGn/04wtqgFEMWlhOpcCOazIFckc7Vy
R78XcS3rgPgjs3qjjAY37/XTsQtCw61KXXR68VWWBwKbp1fGG1UxaHX33ZRAaPZ9
hk22qqj+V6EKtspDH/Vt8yiP
-----END CERTIFICATE-----
Generated at Wed May 13 08:43:45 2026 by rpki-client