
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
File: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (raw, json)
Hash identifier: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=
Subject key identifier: 66:60:62:F4:4A:26:7A:2D:49:7F:88:9E:68:35:DE:0A:C1:BD:EA:7A
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 56C1C5ADCC75AE697143A7B97AAFA2D59062237C
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
Signing time: Mon 20 Apr 2026 07:27:12 +0000
ROA not before: Mon 20 Apr 2026 07:22:12 +0000
ROA not after: Mon 19 Apr 2027 07:27:12 +0000
asID: 9913
IP address blocks: 203.31.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c1:c5:ad:cc:75:ae:69:71:43:a7:b9:7a:af:a2:d5:90:62:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Apr 20 07:22:12 2026 GMT
Not After : Apr 19 07:27:12 2027 GMT
Subject: CN=666062F44A267A2D497F889E6835DE0AC1BDEA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:7a:9c:da:a5:df:46:97:90:4d:db:fc:cf:
fa:9d:be:1f:fa:1f:fc:f2:33:22:dd:08:f5:c6:ee:
f6:a3:62:6e:6a:f3:de:03:67:a5:12:24:f4:01:2d:
b5:95:eb:f7:aa:45:b7:21:aa:0b:0c:db:b4:99:1e:
b6:80:3e:f9:96:ce:d9:31:66:41:87:d8:9d:b3:0b:
6d:3b:79:57:93:1c:e3:3a:bc:45:80:92:be:fc:97:
3f:25:9c:e2:03:bb:15:b1:38:9d:c2:4c:bb:b2:3b:
e8:dc:c1:71:5e:f8:2f:77:87:1d:2c:c8:f1:f4:51:
4e:c5:5d:93:ad:5b:d6:03:d5:5c:09:87:34:11:c7:
85:93:cd:b4:ba:a8:97:8d:c3:22:17:89:74:50:3a:
a6:79:d8:3a:b3:ef:2f:f2:43:a8:aa:28:5b:b8:9d:
7c:70:d1:eb:e9:cb:ff:b1:46:ac:79:7f:4f:de:7e:
1e:84:f3:e9:e9:a1:20:c3:07:43:99:46:3b:30:41:
73:49:39:3f:2f:d2:a3:cb:11:ca:13:7c:ac:22:9a:
c3:63:b5:f4:10:f8:a9:99:11:29:27:7e:65:7e:53:
65:81:86:65:31:e6:80:79:35:19:ce:02:d2:7f:5f:
59:ca:fb:f0:10:0e:6b:66:da:85:4b:d3:5e:a9:90:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:62:F4:4A:26:7A:2D:49:7F:88:9E:68:35:DE:0A:C1:BD:EA:7A
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.31.110.0/24
Signature Algorithm: sha256WithRSAEncryption
49:15:89:5f:00:40:43:7f:42:76:48:8b:e6:73:21:26:b0:67:
06:5e:48:d7:be:14:70:9d:61:42:20:11:d7:2e:ad:a3:1e:80:
e0:ac:27:e9:93:b7:de:38:4f:67:5e:11:5b:41:f5:ce:70:80:
95:61:17:57:e6:1c:08:45:ff:0d:02:f1:34:95:aa:b0:95:9b:
59:d6:78:7e:63:0a:6a:1a:70:fc:90:ba:b1:e7:79:4c:3d:3e:
ac:ea:08:44:91:8a:2e:58:00:1d:2a:8d:70:c2:79:9a:1e:74:
52:bd:ee:96:b8:65:c8:08:e5:19:5a:33:8c:50:b5:f6:ca:cb:
13:cc:3a:8e:dc:6f:05:94:e8:86:90:75:07:b0:2a:68:20:fc:
41:16:61:e8:12:24:0f:85:29:0f:87:cf:70:e0:b4:36:5c:ad:
9c:bb:ef:1f:d3:2a:32:af:e9:72:8f:af:27:a8:02:eb:0a:42:
3f:95:7e:ad:73:00:66:0b:b1:16:2b:2f:a2:b3:8d:68:68:e2:
53:40:27:dd:41:c8:6c:8a:88:43:5a:24:eb:5f:7f:22:bb:e4:
ae:ff:9f:2c:7b:bf:3b:ea:6a:d8:eb:c5:2a:e1:40:bc:4d:07:
73:78:67:a3:7f:6e:cc:c4:6f:4b:29:0c:ad:c2:4a:a8:56:9f:
d2:c3:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:35 2026 by rpki-client