
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
File: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (raw, json)
Hash identifier: Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=
Subject key identifier: 07:87:E5:5A:F0:8E:ED:79:0F:EA:A7:E1:F1:44:0F:5A:9F:5E:FE:DA
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 1B20AB033B3A348AF0904B585721DC5D7EEB431F
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
Signing time: Sun 20 Sep 2026 07:03:55 +0000
ROA not before: Sun 20 Sep 2026 06:58:55 +0000
ROA not after: Sun 19 Sep 2027 07:03:55 +0000
asID: 46559
IP address blocks: 43.255.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 01:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:20:ab:03:3b:3a:34:8a:f0:90:4b:58:57:21:dc:5d:7e:eb:43:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Sep 20 06:58:55 2026 GMT
Not After : Sep 19 07:03:55 2027 GMT
Subject: CN=0787E55AF08EED790FEAA7E1F1440F5A9F5EFEDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:93:a8:ad:35:54:ef:32:ff:12:5d:84:7f:
12:c7:5f:d6:67:df:9f:80:dc:09:21:ec:7b:17:bb:
14:71:db:b5:3b:31:2f:55:19:0d:38:40:7a:f8:f2:
a2:52:fd:1c:ad:cb:62:bb:34:0e:11:74:66:5a:92:
9f:6d:82:cd:bb:24:05:0a:89:68:d1:6d:b8:9d:0a:
01:0e:83:09:d2:e6:44:d7:78:be:f8:59:b1:fd:83:
5a:27:8e:c0:2f:cc:be:4a:6a:97:4d:82:83:00:67:
e8:62:83:5d:06:f8:86:21:1c:b5:c4:f9:e3:24:96:
11:5c:a7:c5:81:76:2a:c4:8b:6a:8d:6b:2d:af:00:
5b:5b:14:c3:8b:68:8f:20:d3:eb:f6:0e:5c:94:11:
59:65:f7:0b:43:2c:9e:96:3d:d8:ed:91:20:35:9e:
4d:b4:73:b1:d4:b0:8e:96:7d:88:2b:f6:7d:4c:c5:
8b:d1:5e:44:9e:a5:e5:89:a2:2f:38:a7:b7:96:05:
10:0a:de:c8:eb:85:47:b0:b6:4f:22:ce:15:83:4e:
85:b1:79:fd:f0:b0:f2:67:93:35:85:c2:fa:91:e6:
13:47:7d:79:88:44:66:bb:a7:03:91:1d:37:52:54:
ba:87:d9:e0:5a:bb:40:ce:e1:28:0e:c4:d7:b7:a6:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:E5:5A:F0:8E:ED:79:0F:EA:A7:E1:F1:44:0F:5A:9F:5E:FE:DA
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.81.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b0:75:4a:7e:a8:db:52:82:26:9f:78:7a:f6:7d:2e:a4:8e:
62:2a:49:24:21:f2:9c:a8:47:f3:27:1e:d9:c9:20:71:f9:29:
4a:95:55:da:2e:a7:64:0e:d0:f6:ed:86:73:77:62:3a:33:fc:
11:83:bc:fe:b2:6b:2c:ef:77:7b:5f:59:67:18:de:17:a8:1f:
13:58:96:b1:d6:a4:2f:d6:b8:9c:41:6a:3a:c0:c1:dc:f2:9d:
d7:fc:5a:d0:ea:4b:8a:e2:35:78:19:97:2d:57:3c:9d:43:74:
34:7c:ff:09:5c:db:e8:c6:63:37:39:e9:58:99:0e:f5:68:f5:
78:76:c1:9e:35:78:86:3a:17:ee:e0:a3:fd:f3:34:e5:40:15:
40:d6:d5:71:9d:15:91:22:f7:62:01:ef:3f:7d:8e:5f:c5:0b:
30:87:2f:5d:f8:33:0b:e7:e5:28:8f:9e:6e:79:34:cb:a2:44:
8f:25:ff:35:18:73:b7:b9:18:6d:cf:fe:99:3d:04:6b:48:87:
9f:e3:2e:66:68:0e:da:1f:f8:0c:d4:8f:24:38:c9:b4:ae:af:
8e:00:dc:71:7c:a7:95:fc:b1:67:2b:65:77:4c:ef:4a:17:eb:
98:1e:5e:91:c9:ea:25:03:22:4a:3c:80:db:ec:f0:d1:d2:78:
2e:74:b1:94
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUGyCrAzs6NIrwkEtYVyHcXX7rQx8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDkyMDA2NTg1NVoX
DTI3MDkxOTA3MDM1NVowMzExMC8GA1UEAxMoMDc4N0U1NUFGMDhFRUQ3OTBGRUFB
N0UxRjE0NDBGNUE5RjVFRkVEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvck6itNVTvMv8SXYR/Esdf1mffn4DcCSHsexe7FHHbtTsxL1UZDThAevjy
olL9HK3LYrs0DhF0ZlqSn22CzbskBQqJaNFtuJ0KAQ6DCdLmRNd4vvhZsf2DWieO
wC/Mvkpql02CgwBn6GKDXQb4hiEctcT54ySWEVynxYF2KsSLao1rLa8AW1sUw4to
jyDT6/YOXJQRWWX3C0MsnpY92O2RIDWeTbRzsdSwjpZ9iCv2fUzFi9FeRJ6l5Ymi
Lzint5YFEAreyOuFR7C2TyLOFYNOhbF5/fCw8meTNYXC+pHmE0d9eYhEZrunA5Ed
N1JUuofZ4Fq7QM7hKA7E17emuB8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBQHh+Va
8I7teQ/qp+HxRA9an17+2jAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx
MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzQzNjM1MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv/UTANBgkqhkiG9w0BAQsFAAOCAQEA
FLB1Sn6o21KCJp94evZ9LqSOYipJJCHynKhH8yce2ckgcfkpSpVV2i6nZA7Q9u2G
c3diOjP8EYO8/rJrLO93e19ZZxjeF6gfE1iWsdakL9a4nEFqOsDB3PKd1/xa0OpL
iuI1eBmXLVc8nUN0NHz/CVzb6MZjNznpWJkO9Wj1eHbBnjV4hjoX7uCj/fM05UAV
QNbVcZ0VkSL3YgHvP32OX8ULMIcvXfgzC+flKI+ebnk0y6JEjyX/NRhzt7kYbc/+
mT0Ea0iHn+MuZmgO2h/4DNSPJDjJtK6vjgDccXynlfyxZytld0zvShfrmB5ekcnq
JQMiSjyA2+zw0dJ4LnSxlA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:03 2026 by rpki-client