
$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa
File: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (raw, json)
Hash identifier: dxzq0VMZkiHTUy7wFisGlDEOiXs1C7Sc/wLnWHN/fu0=
Subject key identifier: B7:6E:95:48:9B:63:85:B4:82:77:35:47:80:54:1D:1F:2F:D0:CB:25
Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Certificate serial: 0166
Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:06:26 +0000
ROA not before: Fri 09 May 2025 05:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55482
IP address blocks: 203.32.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Validity
Not Before: May 9 05:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5a772-8a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:20:6b:ea:18:e4:ba:58:d7:f4:44:e0:82:
5e:31:96:24:8d:9c:5d:88:84:82:2f:03:8f:90:db:
97:09:60:2e:1b:a4:88:88:73:b9:b5:35:20:36:c5:
31:9b:a6:09:d0:9e:87:74:e7:15:22:89:ed:cf:e8:
a1:01:47:da:fc:bf:44:f8:c5:cc:b3:2f:57:53:9b:
30:3a:0b:0a:3e:0d:d0:3c:03:09:c4:6e:ca:4f:0a:
f6:a6:41:3b:dd:3c:c4:64:b5:33:21:61:18:19:31:
8a:2e:f7:57:3e:41:55:c8:a4:56:e5:55:fb:e4:74:
ac:70:f3:7c:6b:3f:fc:ac:23:74:df:ce:e1:d9:96:
a0:5e:72:2e:d0:cd:ae:b7:2f:af:70:e5:39:e9:cf:
3d:a8:20:36:91:ee:12:1e:95:eb:9d:60:3c:9e:30:
92:78:99:b0:65:ce:83:bb:f9:83:87:18:a8:8a:14:
90:eb:d2:e4:79:aa:37:7d:7d:15:c8:06:f1:86:6a:
cb:ab:87:b8:d8:39:d4:10:c7:50:65:88:b0:3d:6c:
b5:a4:54:92:47:f5:bd:9b:f5:ed:db:92:74:92:e3:
8e:08:32:f7:e2:0c:1d:a7:c7:4c:cd:72:b6:60:58:
9b:88:2b:5a:1c:ea:39:8f:f0:d6:32:f3:9d:ab:b4:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:95:48:9B:63:85:B4:82:77:35:47:80:54:1D:1F:2F:D0:CB:25
X509v3 Authority Key Identifier:
keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.86.0/23
Signature Algorithm: sha256WithRSAEncryption
71:21:3a:86:8a:43:73:1b:1f:2b:e2:ea:c8:ec:ba:25:f3:e5:
ec:92:76:25:d3:02:a9:7d:6e:d3:cd:96:16:eb:32:9c:8f:7c:
3b:96:cc:6b:f3:f7:b2:60:e6:64:4f:55:2e:da:2d:8c:84:22:
13:21:88:79:e8:69:0a:ee:ed:eb:ad:c9:a4:ff:c5:f2:9f:42:
a7:24:68:a9:57:62:8e:c3:d2:58:e0:9b:76:1f:69:ad:1b:9c:
d9:e7:0d:8e:56:6b:1c:dd:cc:8e:43:9a:b1:e0:ef:85:68:40:
e8:bb:c1:49:ac:2b:f3:50:4f:ee:c0:6f:ed:1b:db:19:dd:71:
34:5f:66:8b:0e:99:86:2b:bf:16:75:fe:cd:21:c0:b5:6d:c7:
67:dd:2c:8d:74:83:c1:ed:3a:b1:05:a2:b4:ad:30:99:c4:c9:
17:04:dc:53:33:01:4d:a3:0e:cd:30:c6:7c:2f:1e:be:89:02:
6f:58:96:a7:9d:dc:26:26:d4:0a:7a:95:25:72:82:98:38:2e:
ad:d2:9d:c1:b5:53:06:9b:93:21:74:6d:74:3a:ab:f9:9f:f2:
fc:0d:8f:07:6d:6b:00:f1:39:5e:08:09:2f:90:84:a0:ae:b1:
34:d2:3d:55:ac:8f:99:3a:2b:43:7b:e8:b2:31:d7:84:99:22:
e2:f6:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:51 2026 by rpki-client