
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa
File: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (raw, json)
Hash identifier: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=
Subject key identifier: 1E:25:BD:B8:A1:FE:0A:98:87:43:B0:50:53:B6:28:59:6D:09:9A:3E
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 4787F452C8774A455060FD2876FAD708B11C629A
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa
Signing time: Mon 20 Apr 2026 07:27:11 +0000
ROA not before: Mon 20 Apr 2026 07:22:11 +0000
ROA not after: Mon 19 Apr 2027 07:27:11 +0000
asID: 9913
IP address blocks: 202.14.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:87:f4:52:c8:77:4a:45:50:60:fd:28:76:fa:d7:08:b1:1c:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Apr 20 07:22:11 2026 GMT
Not After : Apr 19 07:27:11 2027 GMT
Subject: CN=1E25BDB8A1FE0A988743B05053B628596D099A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:69:d6:f6:15:f8:5b:e7:77:08:f7:ad:e2:
ac:22:69:d4:b0:ac:0b:6b:eb:48:72:2f:c4:73:fa:
27:fa:65:5a:ef:ea:2b:76:1a:4b:2e:46:21:87:da:
6c:bc:21:d8:11:15:d7:eb:73:de:46:28:7f:8b:8f:
1c:c1:fe:28:3e:49:f8:17:1b:8a:15:e7:38:0d:24:
6d:54:11:f5:f9:64:49:ed:62:cc:8f:08:01:17:d7:
55:cc:c1:83:b9:e7:f4:b4:e1:a7:cb:59:39:5c:06:
2e:3e:75:50:97:62:f2:9e:b6:95:71:1a:7e:1f:2d:
f8:70:35:a2:27:ea:66:e0:74:6d:59:9d:bb:76:a1:
ba:4c:ab:3f:e1:4a:d1:4e:d1:e7:48:31:60:88:9c:
e8:7c:ff:5d:a7:a9:81:09:14:26:37:67:71:39:87:
7e:43:3c:34:5a:77:d0:8f:c0:00:34:d9:41:df:fb:
37:9f:7e:58:8a:01:1d:bb:ee:be:7b:94:fc:22:be:
21:3a:07:18:1b:33:ab:c6:b5:09:f2:74:6a:aa:d2:
55:5f:a1:c3:7b:f2:13:85:e0:da:9a:c3:42:67:f0:
c6:9c:bd:17:d2:e3:5f:cd:0c:8c:14:a5:2d:d3:bb:
2f:aa:e8:17:96:23:f7:dc:26:fe:0a:ef:b9:0c:b5:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:BD:B8:A1:FE:0A:98:87:43:B0:50:53:B6:28:59:6D:09:9A:3E
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.14.148.0/24
Signature Algorithm: sha256WithRSAEncryption
32:87:7e:94:f0:62:54:df:42:b6:1a:e7:72:c1:28:43:a3:96:
63:8a:54:af:ee:8b:b5:f9:b7:1e:1d:6c:7b:12:89:06:75:9f:
c3:63:2f:16:32:d8:4b:17:44:5a:85:6e:7f:be:6d:24:12:35:
67:b0:2c:61:ff:b9:51:fd:67:d8:8e:bc:db:bf:c5:75:92:4f:
35:27:fc:59:81:f7:1d:b5:23:04:37:61:74:db:1b:c1:75:c5:
ce:13:7e:6f:33:c8:09:3c:f5:d2:50:16:ca:b4:ee:6d:18:97:
a9:7a:44:09:16:89:1f:1a:9c:a4:6f:30:ec:9c:08:f1:a5:26:
6c:78:54:0e:03:22:1d:36:90:bb:98:00:7c:1f:be:8a:63:1d:
2c:9f:c3:95:f3:21:95:1e:17:e4:7b:e6:69:ae:54:d8:2c:4b:
e3:91:ef:9a:93:c6:03:06:6f:5e:ae:1c:22:fc:00:d1:b6:00:
9a:28:09:f2:d3:7c:1e:8b:64:e7:94:af:69:0b:01:72:4d:21:
29:e8:86:63:1e:60:24:ca:6a:41:45:a0:9c:6f:71:3e:a4:4d:
2b:8e:b3:93:09:ce:c2:44:af:ad:6a:4c:8f:46:be:01:aa:5b:
c4:6d:5d:30:fd:bd:b1:16:04:3d:76:1f:a4:07:fa:b6:0b:e5:
71:38:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:01 2026 by rpki-client