
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa
File: 9D232386DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=
Subject key identifier: 64:11:50:42:1E:9D:99:E3:DC:3B:3E:44:89:76:26:FB:0E:E8:DA:7F
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 35
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa
Signing time: Mon 02 Mar 2026 13:42:09 +0000
ROA not before: Tue 16 Dec 2025 08:38:37 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154434
IP address blocks: 144.79.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Dec 16 08:38:37 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a593b1-acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:8d:3e:cc:5e:a7:aa:29:74:34:af:ab:79:
19:02:f3:c7:9f:f7:7e:dc:09:cf:5c:04:e5:55:b4:
16:06:3e:95:3d:c1:96:49:4e:36:61:1f:df:4b:c1:
11:e2:de:37:58:d2:97:9e:52:8f:40:e2:74:16:28:
e9:aa:58:38:2b:70:be:b8:e6:d9:a1:f8:a4:d5:a8:
3f:df:d5:d8:ac:2a:5f:02:f0:b4:d4:78:ec:e9:71:
7e:c2:e0:6a:f7:fa:dd:c1:f0:8d:90:ee:58:25:d9:
44:e2:6d:b7:2e:93:c8:a6:15:f4:1e:01:f7:32:be:
d2:95:21:6f:76:ca:64:d7:6b:ae:cb:92:ee:65:19:
dc:6d:dd:e1:25:4c:fc:d3:d1:1d:6e:23:5c:d4:cf:
3b:b2:10:c0:74:f5:ec:d5:89:a3:22:92:9f:ed:de:
d7:de:d3:45:c3:72:c9:d9:16:4b:be:af:6e:db:9c:
30:61:26:33:f0:3a:55:58:df:16:c1:4e:bd:e4:f5:
60:b8:3b:68:73:0d:a0:f4:79:5c:d4:f6:74:a0:a2:
ba:12:e5:49:03:21:7c:57:f6:70:83:b3:1e:4b:93:
33:2e:8e:d0:26:27:1b:c3:29:02:d5:89:e3:e3:e9:
99:0c:a3:b3:28:e9:ed:b3:99:be:fe:a6:78:06:ad:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:11:50:42:1E:9D:99:E3:DC:3B:3E:44:89:76:26:FB:0E:E8:DA:7F
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:dc:d2:9f:75:99:14:13:d5:81:13:be:0e:32:c0:f8:1a:7a:
0a:b4:3a:41:42:37:dd:d5:5c:06:8a:fb:aa:4f:90:c4:5e:33:
26:63:10:e1:9e:c6:60:6f:d8:76:fa:52:eb:d7:ee:0a:48:6d:
49:f9:9a:8d:6b:94:ee:81:22:0b:74:ce:15:ec:7a:67:c1:27:
94:85:8e:0c:03:b4:07:86:bb:83:af:52:97:5f:95:38:90:5f:
2f:b7:64:2f:27:e5:85:9a:6a:35:59:a3:9d:e6:af:b8:05:21:
98:22:9d:7b:c7:cf:df:c7:c5:9d:b9:bd:0e:b5:33:bf:9a:23:
2c:3c:35:e6:92:77:a5:58:b7:47:ef:5e:ee:c0:ab:4a:bb:2a:
b5:af:e8:d3:a6:59:63:7c:09:fd:8c:06:6e:25:2a:07:cb:ad:
0c:69:4f:2f:41:b8:47:d9:50:dd:9c:4f:07:c4:0b:88:2c:9b:
98:29:ed:c7:b4:91:98:7c:7c:44:f2:68:b0:e3:47:44:67:06:
01:6f:85:5a:a7:4c:09:75:16:0a:22:1e:6f:f3:51:79:a3:2e:
d4:8c:20:ca:ca:08:a6:37:18:a7:3f:c7:01:e9:8b:51:98:4b:
37:d5:c5:06:a6:1b:52:07:16:a1:94:d3:9b:32:a5:09:8e:9f:
a0:de:b6:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:41 2026 by rpki-client