
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
File: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (raw, json)
Hash identifier: 6/hpOniUWZ3kaCUO3scuJGL4ThJjABMLCMX3Elyy0Vo=
Subject key identifier: FE:DF:CA:14:F5:6A:D9:E9:D6:93:B5:8C:08:4C:CA:50:AF:36:DA:C7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0AAB
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
Signing time: Sat 02 May 2026 16:20:53 +0000
ROA not before: Sat 02 May 2026 16:20:53 +0000
ROA not after: Wed 02 Sep 2026 00:00:00 +0000
asID: 45558
IP address blocks: 45.41.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: May 2 16:20:53 2026 GMT
Not After : Sep 2 00:00:00 2026 GMT
Subject: CN=69f62465-a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:cb:07:20:e1:99:a8:f7:10:20:6e:81:24:
e8:b6:51:6d:a5:33:0b:83:df:16:82:bf:52:0a:b2:
dc:6f:71:c9:7d:b8:c5:20:d1:82:dc:e0:5c:bd:7b:
19:7b:8c:af:c9:47:d9:73:c9:b4:aa:1e:fe:4b:e2:
fb:8a:66:5d:0f:16:69:bd:bf:aa:58:9a:63:95:09:
38:5b:18:bc:0d:f3:68:16:8b:06:14:61:29:3f:60:
c9:02:6a:72:cb:38:c7:d9:e2:bd:6a:05:c5:0e:c4:
cf:ed:c9:df:4f:c3:32:92:30:f5:aa:49:85:ed:28:
ad:35:63:2b:bd:b9:a3:47:03:a5:81:0a:95:3f:37:
65:29:19:93:bf:1c:4b:df:00:2f:a6:0d:c1:b1:cf:
24:cd:2c:2f:91:82:0f:f6:7f:cc:8c:ed:aa:58:a9:
9e:35:18:69:e0:0a:26:52:64:99:4f:2f:8c:a9:b0:
51:39:30:86:23:1f:85:68:d0:57:aa:33:af:9f:4a:
97:a2:e9:f5:9c:56:43:f8:be:85:88:9c:be:d6:f6:
23:b7:b0:ae:c3:1d:b1:f5:30:d0:80:7e:5f:29:65:
9f:35:82:1f:6a:da:f3:13:2f:39:11:1f:5f:83:4c:
63:88:65:71:a9:7a:29:9e:89:a7:78:1b:49:bc:99:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:CA:14:F5:6A:D9:E9:D6:93:B5:8C:08:4C:CA:50:AF:36:DA:C7
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.41.96.0/22
Signature Algorithm: sha256WithRSAEncryption
74:fe:59:8f:15:05:21:44:18:6c:75:c9:75:a6:d7:69:07:0d:
b7:fd:35:d1:7b:b6:d4:2a:85:52:6b:74:49:62:91:5f:c8:33:
ea:47:e1:5f:11:50:db:2c:f2:23:05:84:c3:c3:fa:58:ff:eb:
29:e2:76:43:73:5e:ea:67:f2:52:80:93:1e:69:0d:34:a2:e2:
61:5d:b5:c6:a8:78:c4:d4:cb:8f:9f:e3:4e:99:e5:d4:d7:7c:
93:6a:a7:9b:96:48:e3:a3:1a:c8:1a:5b:7b:74:5e:a1:27:dd:
80:bd:4e:84:71:f0:a8:15:4f:a1:48:49:d7:30:6f:12:e6:c4:
20:eb:89:49:6b:43:2b:25:fa:5d:d4:17:2d:1e:76:cd:2c:31:
7e:d3:b6:46:7c:3a:0e:97:65:c5:b5:7c:c4:a8:08:4f:e8:07:
1e:dc:24:06:32:4b:c1:9e:5b:54:2f:33:90:73:f7:03:9c:4d:
22:43:ce:69:47:b8:56:b9:44:0a:bd:4c:f1:ef:a2:49:b3:2b:
ad:53:fa:44:60:a7:76:24:f4:02:ba:14:a4:ba:bb:8b:71:13:
fe:b0:d1:17:ef:3a:ed:25:ed:43:5e:8b:1b:3a:0a:73:4a:20:
1c:41:53:b3:28:3f:a8:89:5e:6e:5e:91:fc:d0:dc:b0:fd:dd:
ca:d8:76:4a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx
MzE3NEJGQTcwHhcNMjYwNTAyMTYyMDUzWhcNMjYwOTAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjQ2NS1hOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4IPLByDhmaj3ECBugSTotlFtpTMLg98Wgr9SCrLcb3HJfbjFINGC3OBcvXsZ
e4yvyUfZc8m0qh7+S+L7imZdDxZpvb+qWJpjlQk4Wxi8DfNoFosGFGEpP2DJAmpy
yzjH2eK9agXFDsTP7cnfT8MykjD1qkmF7SitNWMrvbmjRwOlgQqVPzdlKRmTvxxL
3wAvpg3Bsc8kzSwvkYIP9n/MjO2qWKmeNRhp4AomUmSZTy+MqbBROTCGIx+FaNBX
qjOvn0qXoun1nFZD+L6FiJy+1vYjt7Cuwx2x9TDQgH5fKWWfNYIfatrzEy85ER9f
g0xjiGVxqXopnomneBtJvJmRawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP7fyhT1
atnp1pO1jAhMylCvNtrHMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF
RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFFQUEvMDc3RkNEQjQ3RUQyMTFFQTlFQjhENTc5QzRGOUFFMDIvQzMyRTA1RUVB
MTAwMTFFQUE5QzcxRDNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLSlgMA0GCSqGSIb3DQEBCwUAA4IBAQB0/lmPFQUhRBhsdcl1ptdp
Bw23/TXRe7bUKoVSa3RJYpFfyDPqR+FfEVDbLPIjBYTDw/pY/+sp4nZDc17qZ/JS
gJMeaQ00ouJhXbXGqHjE1MuPn+NOmeXU13yTaqeblkjjoxrIGlt7dF6hJ92AvU6E
cfCoFU+hSEnXMG8S5sQg64lJa0MrJfpd1BctHnbNLDF+07ZGfDoOl2XFtXzEqAhP
6Ace3CQGMkvBnltULzOQc/cDnE0iQ85pR7hWuUQKvUzx76JJsyutU/pEYKd2JPQC
uhSkuruLcRP+sNEX7zrtJe1DXosbOgpzSiAcQVOzKD+oiV5uXpH80Nyw/d3K2HZK
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:34 2026 by rpki-client