
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa
File: 3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: mcvo84dPzNcDdATJl+JG3/Lc6qM0MMPRnFjpUt3IkpE=
Subject key identifier: C7:83:86:28:27:F1:E0:F5:2C:6D:FD:06:43:45:8A:06:81:00:4A:CD
Certificate issuer: /CN=A91E4ACE0000/serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA
Certificate serial: 665F161EEE347335ADF5D21C501918E819A4F080
Authority key identifier: 70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa
Signing time: Sat 14 Nov 2026 08:13:17 +0000
ROA not before: Sat 14 Nov 2026 08:08:17 +0000
ROA not after: Sat 13 Nov 2027 08:13:17 +0000
asID: 218780
IP address blocks: 103.232.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl
rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 08:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5f:16:1e:ee:34:73:35:ad:f5:d2:1c:50:19:18:e8:19:a4:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4ACE0000, serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA
Validity
Not Before: Nov 14 08:08:17 2026 GMT
Not After : Nov 13 08:13:17 2027 GMT
Subject: CN=C783862827F1E0F52C6DFD0643458A0681004ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:02:28:26:f2:ac:da:56:8f:da:fc:bf:c8:
a6:68:37:c3:0a:c6:2d:ac:a2:70:7b:a1:39:a9:28:
5e:6e:01:e8:fd:a6:48:f0:57:c6:09:8d:89:c2:a9:
5f:9f:5a:14:88:a1:4d:e5:9c:7e:1c:41:2a:9a:ac:
43:1b:cf:a5:11:4c:59:55:1f:c9:5f:cc:4d:ef:58:
4d:08:cc:2f:93:fb:10:00:77:82:d0:09:27:24:b2:
1c:d1:51:23:83:4f:87:d6:9b:50:7a:4f:05:24:31:
0d:bb:7c:eb:53:2c:d1:37:97:dd:d2:bc:9f:04:1b:
fb:a1:3f:55:29:d3:e9:97:a9:ef:7a:c6:00:92:09:
0c:55:1a:a6:3e:4f:f6:37:a7:a8:54:0b:a3:76:65:
fa:8c:0a:fe:1b:2d:09:0f:33:ef:b4:99:9b:6f:3a:
bc:df:11:9f:0f:cf:ba:99:3f:e6:cc:3d:f1:8a:d1:
f3:bb:b8:f0:b6:c3:34:ce:b4:2e:12:2e:93:87:2d:
1a:21:f9:ee:1c:e4:93:63:bc:1c:df:b4:54:22:1b:
99:53:2b:80:24:d8:87:40:47:97:bf:57:69:87:0f:
62:99:6b:31:13:91:e6:7f:09:bc:3e:01:f9:49:8b:
d7:2d:ee:8d:d9:3b:40:05:4e:28:08:66:ba:6a:85:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:86:28:27:F1:E0:F5:2C:6D:FD:06:43:45:8A:06:81:00:4A:CD
X509v3 Authority Key Identifier:
keyid:70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.232.36.0/24
Signature Algorithm: sha256WithRSAEncryption
30:72:a9:e9:9f:3e:c6:ed:81:e8:5c:f4:a8:9a:62:5c:2c:83:
0d:84:20:92:3c:70:98:b4:60:f8:5c:04:67:4c:e3:4c:51:d3:
8a:f8:2e:91:6b:25:24:ed:9c:2a:8d:f3:ae:53:a1:6c:71:99:
36:95:da:ee:43:57:66:ac:31:1b:2b:2b:8d:e4:27:ae:93:04:
9f:f7:00:7f:22:05:51:12:5f:eb:fb:e7:ec:04:e0:d2:a9:32:
3f:60:77:81:75:13:18:55:34:d2:91:89:34:19:75:36:77:dd:
f2:df:8f:21:29:97:dc:c9:a9:88:7a:f0:92:17:a1:ce:61:eb:
4d:b3:25:19:fb:4e:11:9e:45:47:c5:fd:4c:e1:91:57:62:ba:
1d:e1:4e:93:a3:8c:a5:87:28:65:f6:97:c7:f1:91:3a:1f:43:
17:7e:83:33:c2:92:da:5d:a3:04:7b:26:c0:0c:81:bc:88:2f:
ff:9e:bb:d3:59:dd:c1:f8:82:e2:fd:fc:35:6b:12:81:4c:1e:
54:c2:e3:18:7c:e9:37:7c:35:9d:72:00:de:5e:5e:28:6a:f9:
c7:48:4e:59:e7:80:95:9b:be:12:70:07:b5:6a:f3:e4:71:67:
44:41:ad:0a:a8:31:ec:0a:ff:63:19:74:6f:b2:80:34:9b:f7:
03:b5:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:33:59 2026 by rpki-client