
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: d1XIE95syZP0v07zjAuCvJR2QmouxxiaARcQuCz9mh0=
Subject key identifier: A4:BB:C2:54:91:A2:D1:04:66:F6:D0:B3:95:9A:F5:91:42:6D:96:4C
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 083EAFBE91610008FBD7E4F5F03BD366A0F9644A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa
Signing time: Wed 04 Nov 2026 10:30:09 +0000
ROA not before: Wed 04 Nov 2026 10:25:09 +0000
ROA not after: Wed 03 Nov 2027 10:30:09 +0000
asID: 16509
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 23:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3e:af:be:91:61:00:08:fb:d7:e4:f5:f0:3b:d3:66:a0:f9:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 4 10:25:09 2026 GMT
Not After : Nov 3 10:30:09 2027 GMT
Subject: CN=A4BBC25491A2D10466F6D0B3959AF591426D964C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:e1:25:21:9a:64:d1:54:90:28:4b:9d:31:
36:4f:e9:09:4f:13:24:35:39:57:e5:04:03:29:a7:
f4:52:b9:ae:7a:9f:95:40:4f:52:6c:87:f7:a6:bf:
cf:46:a8:7a:31:d8:1d:f1:98:08:15:39:3c:5b:3f:
e6:b5:1c:80:d6:e4:ac:f9:84:dd:c9:3d:41:f0:37:
66:18:02:99:8a:61:55:16:0f:24:cc:37:a3:e9:1a:
28:c1:55:88:45:2d:fd:3c:b4:19:91:6a:6c:ce:61:
f9:28:be:50:22:4d:ec:1f:2f:b8:77:54:0b:fb:4b:
81:79:f6:c2:40:d9:a0:02:59:f9:d2:51:0c:16:d7:
f5:7d:e6:19:f3:f7:ca:50:ea:a7:14:37:83:6b:d5:
d5:98:fd:ac:a5:22:33:d2:13:1f:bc:3e:9f:80:32:
50:6d:45:b1:4f:94:a2:01:95:e7:73:7e:6d:d3:f2:
00:d1:b2:1c:5a:8e:03:fe:43:65:4e:b0:5c:dc:6a:
08:82:7d:b6:3e:df:05:f0:3b:38:fc:fa:b8:93:91:
85:e2:9f:bb:5f:72:28:94:de:8f:f3:fa:06:87:bf:
84:91:f9:71:14:fd:a4:1a:eb:24:e8:24:42:94:0d:
30:00:30:0d:a9:a5:0a:84:90:a3:3b:88:a0:27:02:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:C2:54:91:A2:D1:04:66:F6:D0:B3:95:9A:F5:91:42:6D:96:4C
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c5:54:4b:22:9a:df:50:98:76:d0:1a:b6:87:82:64:29:83:
83:75:cc:61:96:5e:2d:63:9f:33:ad:2c:79:ed:98:c8:a8:e1:
e8:f4:db:79:0d:21:ec:7f:b2:e5:35:de:d9:1a:c3:4c:00:05:
3c:42:5d:f7:e7:a8:6f:e4:3a:18:f9:56:d3:26:4e:57:e4:29:
77:11:b2:0d:1d:b6:c6:b6:10:f4:b3:4c:c5:21:ea:01:b2:bf:
ea:2d:a6:af:bd:90:8b:3c:50:95:a9:8b:14:2c:45:75:1c:6f:
01:c9:62:67:fa:de:8d:c7:1f:cc:f8:c2:73:a1:4b:0c:ec:e3:
88:ac:47:80:59:64:6e:76:5c:84:79:bb:9b:9b:db:48:de:b8:
e9:9e:69:75:7f:d3:00:75:ed:ca:95:50:d5:66:43:05:28:7e:
15:08:f7:8e:22:5c:5d:2f:65:99:ce:09:a0:b0:5d:f5:7e:45:
0e:c8:ec:19:bf:33:be:fa:0f:16:f9:07:45:9d:8f:62:c6:f0:
5d:4f:26:3d:f7:7d:b1:99:74:dd:b9:5f:6f:17:21:86:e4:85:
2e:4e:70:07:68:7a:e3:06:fc:0b:06:f7:ce:9a:83:4c:9e:d0:
cb:b1:6f:c8:da:9a:5b:be:88:ce:bb:84:09:c0:30:87:2a:6e:
a3:c6:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:51 2026 by rpki-client