
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039393133.roa
File: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (raw, json)
Hash identifier: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=
Subject key identifier: C4:B4:F1:FD:A2:65:21:70:6E:5B:5E:32:49:63:E8:13:29:10:18:87
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 5BC7C5E07AD1C288234E066B222E8E2D39C37921
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039393133.roa
Signing time: Mon 20 Apr 2026 07:27:11 +0000
ROA not before: Mon 20 Apr 2026 07:22:11 +0000
ROA not after: Mon 19 Apr 2027 07:27:11 +0000
asID: 9913
IP address blocks: 203.0.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c7:c5:e0:7a:d1:c2:88:23:4e:06:6b:22:2e:8e:2d:39:c3:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Apr 20 07:22:11 2026 GMT
Not After : Apr 19 07:27:11 2027 GMT
Subject: CN=C4B4F1FDA26521706E5B5E324963E81329101887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:38:13:5d:8f:0c:d6:5b:02:ce:41:57:4b:
22:32:b9:26:28:f1:dd:59:b1:ce:64:7c:55:6f:5d:
b6:c7:95:96:09:50:28:03:9f:5d:10:a3:52:cc:8f:
79:9f:89:52:91:1f:46:1a:04:a8:12:64:96:8f:43:
d5:5c:7b:eb:72:d8:ba:7c:58:5e:f3:4c:3f:69:82:
00:a8:8a:d3:33:58:09:0b:13:4e:85:8b:10:12:4b:
bc:94:e9:45:52:7c:f1:62:ff:7a:8d:b5:53:67:b9:
f8:6d:28:a4:3f:2c:32:86:c1:0d:b3:8c:ba:99:1b:
de:fa:6a:a2:d7:6b:e7:07:75:e2:d5:c0:10:02:0f:
23:de:b9:99:e1:a8:17:14:f8:89:99:bf:6f:43:b7:
a6:54:16:51:ec:77:dd:4a:6d:19:6c:f7:e8:25:fe:
f2:6e:64:12:65:56:e4:80:ed:55:57:93:26:c1:10:
ea:78:c2:24:29:a0:8c:4e:99:f7:0d:93:69:8d:98:
2f:32:35:b7:e0:b2:bd:ae:39:04:3c:76:76:f7:65:
ed:13:1d:be:bb:8a:d6:5a:b4:ba:9d:f5:c8:65:70:
65:1a:25:b2:7d:1e:02:1d:24:3b:b0:f4:f6:aa:b6:
41:cd:c9:29:77:3d:47:17:02:26:35:68:a9:95:cf:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:F1:FD:A2:65:21:70:6E:5B:5E:32:49:63:E8:13:29:10:18:87
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.0.80.0/24
Signature Algorithm: sha256WithRSAEncryption
66:90:64:92:14:1b:32:83:23:77:1c:ca:35:fb:73:0f:1a:29:
cb:73:ee:e5:c3:5b:fb:89:54:d2:45:fb:2a:41:95:f6:67:ed:
9f:4a:33:01:a2:b2:b4:16:7e:f1:5b:b8:c7:72:69:9f:54:f0:
5a:36:b0:66:a5:83:b0:19:0b:7d:7b:84:ff:29:c8:f8:65:f0:
01:6f:24:da:c8:f3:96:1f:aa:1e:13:2b:fd:68:a0:ed:25:19:
7e:5d:01:57:38:68:c5:cd:eb:c0:6c:df:97:28:54:57:40:bd:
f7:a2:d7:ce:6c:61:de:df:fe:50:95:a7:9f:3d:b7:43:2c:8f:
6c:8b:0f:3d:d6:d3:6a:c7:8c:28:07:b2:be:d4:21:30:be:b4:
21:fb:83:54:f3:cf:7d:13:73:b4:6d:e9:d2:75:05:c7:35:83:
f5:55:af:20:33:5d:b0:c1:27:4d:42:6b:a7:64:60:7e:14:5e:
55:cd:d0:d4:24:61:46:c7:df:b2:d4:6a:e8:c4:8d:bf:4a:4a:
ba:b7:74:2c:49:67:7b:06:15:cc:d8:b1:6b:50:b9:c6:c8:a3:
a2:40:1d:bf:84:ce:20:55:bd:11:de:34:4d:65:a6:9f:32:29:
b9:34:7f:98:24:7b:7f:bd:fb:19:4e:15:dc:15:df:46:2e:61:
d1:47:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:03 2026 by rpki-client