
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323139303735.roa
File: 3130332e3139362e3132342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: zZzkF0vYGeXJ/3dTxfU2BWWvUtR9Fzmsmy8hSyXpVDo=
Subject key identifier: BE:67:95:BE:DD:52:90:26:1D:C3:84:28:72:64:02:75:36:A6:D6:13
Certificate issuer: /CN=A91A76B50000/serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
Certificate serial: 5C8AB51BFE4E1602CFE4D2D71DEFAB635EDA2802
Authority key identifier: 19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323139303735.roa
Signing time: Fri 30 Oct 2026 10:30:53 +0000
ROA not before: Fri 30 Oct 2026 10:25:53 +0000
ROA not after: Fri 29 Oct 2027 10:30:53 +0000
asID: 219075
IP address blocks: 103.196.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl
rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 19:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8a:b5:1b:fe:4e:16:02:cf:e4:d2:d7:1d:ef:ab:63:5e:da:28:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A76B50000, serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
Validity
Not Before: Oct 30 10:25:53 2026 GMT
Not After : Oct 29 10:30:53 2027 GMT
Subject: CN=BE6795BEDD5290261DC384287264027536A6D613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:a9:86:64:f0:1e:ab:9a:57:e7:16:45:0a:
6c:46:82:b0:1b:49:59:38:f5:04:da:2f:cf:b4:3c:
2b:d7:27:63:61:30:1f:d6:24:7b:b1:2f:61:d2:6b:
f3:97:6f:c5:43:11:b9:37:03:d5:6e:9c:37:8c:c1:
3f:61:1e:1d:64:3c:9e:16:9d:16:f5:6a:6d:28:cc:
dc:63:88:7b:bc:2a:7a:c1:26:45:cf:b6:2d:4e:a3:
62:23:e0:b1:44:80:79:ed:c3:d9:e8:a3:de:23:3e:
a1:f2:35:b0:c7:0e:8d:7a:87:c2:0e:77:f1:76:61:
5b:e5:81:b7:61:98:90:b4:10:06:83:ba:72:ab:f2:
7a:90:b4:7f:36:6c:4b:3d:1a:8f:c8:8d:ff:96:30:
ea:7d:00:aa:80:12:c8:c4:43:35:61:d0:40:94:0f:
93:aa:2b:ef:00:06:db:35:c7:2b:57:7b:ce:5f:9e:
35:4e:d3:5f:86:45:d2:24:1b:60:9c:d6:39:d7:da:
b9:10:fa:2a:70:47:8a:85:a5:3c:be:1a:df:70:56:
40:72:33:86:dd:f3:40:32:49:98:e1:2c:9c:8a:07:
9f:db:c9:02:50:91:6d:d3:b1:42:5c:da:2e:5d:15:
fe:47:0e:2e:b6:11:b7:bc:0c:11:c9:c2:0d:64:99:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:95:BE:DD:52:90:26:1D:C3:84:28:72:64:02:75:36:A6:D6:13
X509v3 Authority Key Identifier:
keyid:19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e4:f6:fa:68:90:88:4b:3a:e0:ea:75:db:55:34:fe:95:32:
19:4d:2e:b0:89:fe:05:7c:90:a8:eb:3b:25:56:99:00:8e:09:
a8:66:c1:89:e2:51:f9:6c:8a:d2:90:70:26:af:b2:86:8f:31:
d3:60:7b:81:1d:a5:a4:8a:ad:21:e0:f6:fd:1d:c0:cb:1f:2a:
f5:66:83:4e:54:46:36:c2:a3:50:a7:64:75:40:e2:a4:36:9b:
56:43:67:cc:d8:da:00:82:d3:dc:1f:ee:0d:62:92:cf:b1:68:
c4:2c:9a:6c:13:0c:3b:55:ea:88:b7:23:57:16:76:18:03:e0:
97:b8:75:50:a2:7f:cb:12:cf:fa:34:33:83:b5:8d:d3:35:e4:
03:47:c2:83:a9:79:a5:41:a9:e7:03:f9:96:c3:58:3b:8e:31:
6c:72:7b:5b:b1:a8:fb:b8:a9:37:7f:b3:9c:14:c2:f9:68:19:
98:33:38:37:e7:da:83:58:50:d1:ce:af:68:74:89:19:27:4e:
57:ec:7e:33:ed:af:02:a6:1a:b1:3f:ea:7f:5d:60:01:e5:00:
e1:6e:18:03:10:1a:2d:2b:8f:e6:b3:5d:84:a2:f9:00:4c:d9:
16:90:3b:ec:a8:c0:c0:b5:c4:a8:a7:14:00:21:f1:1b:3d:ef:
57:64:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:02 2026 by rpki-client