
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132362e302f32342d3234203d3e2039333034.roa
File: 3130332e3139362e3132362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 6WNU+wqfdT0fXBx5W/E6F6fRmxjXf0BvzI/NHS9gxjU=
Subject key identifier: 84:79:62:63:08:9D:AC:3E:5C:14:17:2E:52:D5:BF:8F:E4:82:3A:27
Certificate issuer: /CN=A91A76B50000/serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
Certificate serial: 1A5AD87F1E07D38EA625282D5F25AFDDEC5F0FB8
Authority key identifier: 19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132362e302f32342d3234203d3e2039333034.roa
Signing time: Fri 30 Oct 2026 09:54:49 +0000
ROA not before: Fri 30 Oct 2026 09:49:49 +0000
ROA not after: Fri 29 Oct 2027 09:54:49 +0000
asID: 9304
IP address blocks: 103.196.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl
rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 19:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5a:d8:7f:1e:07:d3:8e:a6:25:28:2d:5f:25:af:dd:ec:5f:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A76B50000, serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
Validity
Not Before: Oct 30 09:49:49 2026 GMT
Not After : Oct 29 09:54:49 2027 GMT
Subject: CN=84796263089DAC3E5C14172E52D5BF8FE4823A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:90:94:30:13:ef:20:ad:93:15:37:56:32:
8e:25:76:19:f5:8d:af:60:ba:41:64:75:2b:32:ae:
ab:54:8d:b2:a4:79:8a:41:58:49:d3:9d:08:d8:39:
49:a3:43:aa:c5:ae:b1:72:d0:ab:72:fc:2c:59:ae:
c8:83:d3:48:dc:8c:9e:ea:d9:99:8b:7d:ee:da:b3:
6e:de:4c:83:10:88:a1:b3:ef:0d:4f:fe:8d:35:1a:
c2:cd:34:60:2c:30:d0:60:34:71:be:c4:8b:8d:5a:
99:e1:ff:8e:df:5b:25:ee:ed:e5:01:02:a0:0e:e0:
f2:4d:0e:3c:12:e4:45:7f:f8:e4:b3:1b:f9:21:43:
4e:1e:e5:a2:cb:9c:45:78:56:0b:f8:68:94:41:00:
c1:a4:1d:e7:5f:2f:ab:b0:e6:31:79:2a:d8:88:dd:
4f:2c:5c:7d:15:cd:96:79:0d:56:10:0a:22:d2:0f:
78:95:f4:7d:e0:5f:d4:d2:a5:33:9e:b8:ba:d6:44:
08:60:9a:95:1f:77:65:bb:0a:32:1c:a6:d9:16:cf:
05:a1:49:02:5d:41:e7:5a:c5:e8:36:d4:af:51:9f:
a4:10:0e:55:d8:19:e1:6a:87:04:a3:fe:d7:fd:b8:
02:11:b0:30:c5:c8:ca:32:01:d7:72:e2:67:2c:7c:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:62:63:08:9D:AC:3E:5C:14:17:2E:52:D5:BF:8F:E4:82:3A:27
X509v3 Authority Key Identifier:
keyid:19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132362e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.126.0/24
Signature Algorithm: sha256WithRSAEncryption
67:91:ee:59:84:00:f0:56:c6:f1:0f:16:d2:ab:2b:e2:c6:6a:
6b:67:ec:b3:2e:94:d4:53:58:dd:77:95:5a:7a:36:9f:81:c9:
29:2a:19:d5:4c:ad:4a:8e:f3:fa:b6:25:13:2f:62:fe:f9:27:
8c:60:3b:b1:7c:4d:a4:80:63:90:b0:f3:c4:4c:d3:a1:2e:74:
2f:b2:ce:35:45:03:c5:b4:3b:1b:0d:46:66:85:6a:45:46:44:
f3:2c:5a:0f:cf:34:3e:4d:a4:7e:fe:15:9e:b2:77:e1:0f:8f:
4b:16:73:94:e2:4b:94:86:d6:b1:90:27:36:7e:71:86:0c:ee:
aa:46:3f:00:63:33:84:8a:7d:76:5b:e9:09:b2:2f:c6:2c:a9:
55:2d:b4:43:90:ff:eb:07:cd:79:44:fa:01:9f:6a:38:42:e1:
cb:68:e7:96:e2:a1:8a:d1:c3:ff:35:0c:5a:1b:6a:3d:21:82:
bd:45:03:7e:d1:8b:0a:99:95:63:88:4a:37:5b:0e:38:c6:c6:
2c:19:ee:c7:89:0e:dc:5d:1a:88:ad:81:f4:08:7e:5d:6e:47:
f1:eb:84:d0:31:98:c0:5b:e7:a1:0c:ad:f0:7b:64:f4:ba:37:
95:78:65:d0:39:8d:38:3b:d6:ea:63:9c:0e:e6:28:6c:73:25:
cc:fa:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:48 2026 by rpki-client