
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
File: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (raw, json)
Hash identifier: RJcxcgrePfSrofNeZo+AhNguJ30uWMSNYtFvqXYOuJM=
Subject key identifier: C9:4C:48:B7:66:55:64:DB:E8:04:C1:3F:E1:93:1C:78:57:E6:F9:D9
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 0187
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:13:59 +0000
ROA not before: Fri 07 Mar 2025 04:51:47 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152332
IP address blocks: 157.10.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: Mar 7 04:51:47 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a59b27-534a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:ac:d6:d9:66:98:ab:65:7f:46:c1:84:1c:
31:b0:41:81:d7:74:2e:ca:1d:78:ac:93:81:97:95:
b1:ff:36:94:f8:8c:76:1c:b1:92:9f:db:d8:2c:60:
ec:9d:4e:58:77:9d:a0:e8:6e:d6:d1:5b:e6:b9:24:
77:84:9c:ea:a6:46:d7:e3:4c:b9:40:e2:88:dd:b9:
1f:0b:6e:bb:d8:ac:a5:ea:6d:7c:9d:ff:c6:91:8a:
fc:aa:68:55:21:ab:81:29:ab:f5:1c:6e:07:c8:28:
c3:e8:bf:2a:f3:ae:46:49:26:34:ab:a3:0e:5d:2a:
0e:d4:9c:c5:c3:1a:11:a1:15:d6:ec:8f:8c:2c:08:
17:38:ea:2c:c8:48:d4:03:86:07:c5:37:ee:12:e1:
34:fc:1c:20:c8:be:12:26:72:88:24:93:1e:50:0c:
9d:9f:98:9f:f4:d4:20:f7:f6:69:54:89:a3:ca:a0:
a0:3a:77:79:2c:a5:2b:cf:92:fb:fe:e3:b5:9c:c8:
58:f1:92:03:19:66:59:87:3f:cb:e8:f4:95:25:04:
5d:f0:a3:ba:aa:d4:35:86:1c:a2:3b:44:3a:b7:16:
3f:a1:e8:fb:b6:b6:11:9b:2e:14:c8:e8:01:d8:b8:
61:d5:bf:05:e8:00:e3:b6:05:8d:1a:4a:5b:35:28:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:48:B7:66:55:64:DB:E8:04:C1:3F:E1:93:1C:78:57:E6:F9:D9
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:9d:b8:26:9e:b4:2a:97:01:82:3b:1a:18:19:53:a5:f0:24:
e5:b0:d6:ec:d1:34:8d:5a:7a:96:2b:fe:ac:69:ac:52:42:d0:
98:3f:0c:01:c1:93:e0:04:4a:2d:a2:b2:8c:c2:f5:a8:19:1b:
3d:cb:8c:6a:12:25:35:a1:79:0a:4e:09:f1:b1:92:c7:c1:05:
2b:e1:2f:70:af:e5:d1:67:b6:0c:b0:bd:85:e8:b4:87:f4:7d:
18:1c:f4:65:46:3c:5a:81:7a:68:b7:5e:3a:2a:1a:c5:77:68:
21:3f:5f:59:d0:29:21:f1:05:94:60:ad:2c:3e:0d:6a:7a:66:
7e:b8:3c:ed:0c:22:d1:c2:2b:6a:70:ef:d6:41:97:c0:19:67:
c8:3d:cc:a8:b9:44:30:e3:24:78:f4:14:79:eb:c9:75:aa:9c:
bd:d9:48:6b:74:51:b1:e5:96:8d:49:12:4d:88:8a:53:25:2a:
08:db:f7:bb:97:15:05:50:ec:b9:64:2c:5b:f6:79:44:92:42:
b2:76:f7:1d:4c:7f:44:cb:37:d1:67:e5:23:2c:ec:e1:32:85:
30:db:e5:96:b4:5f:00:ce:60:c6:e6:15:ae:99:84:8a:1e:9b:
b1:32:24:61:17:3a:ce:f7:5f:e4:36:15:a0:5c:0e:60:27:c1:
f6:32:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:23:13 2026 by rpki-client