
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
File: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (raw, json)
Hash identifier: 00zBsBKgY45h9leLMrh5bnhoj9xQVpyWuZdsxJiXRmQ=
Subject key identifier: 19:58:78:CB:8D:1A:C9:1E:07:37:4E:A1:C3:79:39:78:A8:34:AC:5A
Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial: 0E94
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:58:05 +0000
ROA not before: Thu 12 Feb 2026 18:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9216
IP address blocks: 122.144.32.0/19 maxlen: 24
202.154.192.0/19 maxlen: 24
203.135.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3732 (0xe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Validity
Not Before: Feb 12 18:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a4620d-c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:ad:ba:c5:51:6d:5c:72:00:75:12:19:d4:
44:8c:5f:ec:cb:5c:16:79:fc:e0:b6:80:7d:0e:41:
d6:d3:1c:54:d1:a2:ed:31:d6:f5:e7:0f:c9:62:14:
e7:d8:11:22:5f:00:c1:1f:05:f8:0b:35:36:cd:16:
dc:ee:bf:1a:c3:43:7d:b5:de:f2:7e:23:2a:4f:87:
59:17:2a:64:7f:75:66:23:09:90:79:e8:a3:18:e1:
da:66:83:f3:35:c6:78:40:a9:a1:ac:48:f9:25:2d:
09:c7:9a:8f:17:22:e1:76:8e:da:fa:80:c7:78:40:
50:9f:cf:aa:d8:31:c7:9c:f1:9a:5a:35:76:5f:3c:
6e:69:3f:19:a3:a2:75:41:96:33:02:93:f9:0a:4f:
e3:c6:d9:ff:53:ef:34:f6:35:54:ce:8a:b4:49:83:
b2:5f:4a:24:e2:3e:51:58:2f:77:ff:2e:1a:7a:48:
0b:02:de:1e:a6:80:2a:c2:fc:cd:95:e1:81:03:3f:
1e:ac:46:3b:b4:b4:3e:98:78:c1:0b:6a:cc:9a:32:
6e:b9:ad:c9:27:5a:87:30:da:54:2a:3e:67:53:29:
f0:c8:1c:f7:d7:7c:5e:32:f1:14:84:ec:e0:d7:7a:
3a:f8:d6:10:48:91:8b:c9:e2:9e:36:b5:ce:59:b6:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:78:CB:8D:1A:C9:1E:07:37:4E:A1:C3:79:39:78:A8:34:AC:5A
X509v3 Authority Key Identifier:
keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.144.32.0/19
202.154.192.0/19
203.135.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:70:1f:f4:f9:6b:ce:61:3f:ce:c7:4a:14:38:dc:4c:f8:d8:
27:15:5a:0c:42:cb:3c:ae:40:46:f3:ab:8b:d0:38:f2:ed:8b:
72:10:52:70:ac:df:eb:a4:17:54:cd:05:c4:c5:47:55:69:8e:
f5:6a:62:ab:d4:e2:a2:4e:72:36:97:45:8f:a3:85:50:d5:85:
66:f6:72:5a:e3:92:4f:aa:7f:f0:43:06:b9:4e:02:cf:06:17:
3e:ed:49:36:98:c3:59:a6:b5:4c:c9:5b:2c:af:1c:34:c0:a9:
b0:9f:58:b5:f6:4e:1f:be:5a:f8:78:a2:72:9a:51:17:32:52:
07:fe:15:40:21:c0:ad:ce:36:88:fc:5e:3c:6e:8b:fd:24:51:
6b:d6:18:27:46:ab:84:ea:b2:87:03:63:5a:9d:2a:fa:bd:7d:
9b:a5:6a:94:21:62:cd:d1:57:55:20:88:7f:6c:90:43:20:db:
83:ac:6f:d5:3b:82:4b:a3:e0:4b:31:1c:c5:ca:77:4d:3e:f2:
6a:24:11:cd:5a:06:77:bd:c6:e7:43:03:be:dc:5a:7a:b2:a2:
e7:a5:1a:f7:77:89:f3:c1:33:51:d0:c2:7a:fb:c2:c3:36:de:
86:8b:8e:ed:f3:16:62:7f:7b:32:f7:a2:b8:19:34:90:55:6a:
89:c1:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:10:18 2026 by rpki-client