
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
File: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (raw, json)
Hash identifier: QXAEGZzwRw0h1gNPZ7PlUf/rgAFsJhEDsbChop9gPBY=
Subject key identifier: 6C:CC:28:27:CE:3D:CA:54:ED:79:0B:45:6C:7C:F5:79:03:BA:D9:AC
Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial: 01F5
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:02:09 +0000
ROA not before: Wed 03 Sep 2025 04:23:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10116
IP address blocks: 203.145.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Validity
Not Before: Sep 3 04:23:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a438d1-2713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:d8:de:d8:8c:58:5c:df:3a:8d:7a:4c:6f:
ab:74:00:eb:d7:6e:cf:7a:23:86:e1:cd:3e:7d:45:
b3:92:c6:72:c7:d6:0f:c6:e8:47:fd:d8:eb:b3:c9:
3a:f9:b2:a1:5c:cc:39:98:bf:f8:f8:21:b9:50:05:
34:4f:99:9a:8c:8a:5f:2a:b2:01:26:1a:f0:37:83:
80:41:31:01:71:f4:b3:e0:08:cd:ab:52:b2:8c:10:
5d:72:2c:56:5e:5d:63:e3:ba:36:96:8c:93:5f:0e:
f4:ec:1a:ad:d3:70:a8:bb:22:72:96:06:bb:e4:03:
50:e9:80:8c:13:85:98:ca:e5:5d:6b:4f:58:a0:23:
6f:20:0e:fd:70:6f:06:8b:28:a9:06:9a:e5:be:a5:
7e:e0:65:ee:e2:b5:7e:0e:87:57:e7:51:f8:9f:b9:
ab:d0:b9:6a:4c:aa:9f:e8:a7:78:51:39:fe:6a:c0:
d4:26:26:20:3a:0b:aa:7f:50:aa:c4:2a:a3:f3:88:
0f:0d:12:61:1b:cf:5f:b8:47:8a:bd:85:fc:5f:96:
ad:d5:b1:16:6a:8f:98:ad:9f:12:95:54:e6:ff:77:
88:ac:27:da:e8:32:a7:44:c1:b9:2f:e7:a2:4e:93:
0e:3e:5a:fb:38:db:eb:e0:ec:6c:dd:a7:8c:50:82:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CC:28:27:CE:3D:CA:54:ED:79:0B:45:6C:7C:F5:79:03:BA:D9:AC
X509v3 Authority Key Identifier:
keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.145.64.0/21
Signature Algorithm: sha256WithRSAEncryption
91:72:d6:d9:05:16:7f:71:31:d2:c8:f1:60:bd:36:bf:1d:0e:
79:09:6e:db:13:9d:d2:eb:ed:94:d1:64:14:2b:ea:f1:c0:c3:
e2:a4:03:79:c1:99:1d:bf:5e:12:3b:1f:5b:46:a1:0a:dd:a5:
30:4a:5b:10:a1:45:bb:8c:fe:64:a8:19:f7:f7:6c:4e:a7:91:
b5:86:b2:d5:78:dd:ab:29:8c:be:81:cd:ef:83:4f:ef:db:f3:
92:ac:5d:67:2c:5b:ef:8a:2e:b4:6d:7c:d0:de:49:ae:a4:99:
d9:d7:68:42:37:a2:c5:e5:c9:d9:f6:d4:ba:27:3c:01:a4:3e:
fd:9a:46:9a:1a:eb:23:77:54:85:31:ed:5e:f3:30:60:45:da:
d7:1e:76:6b:57:00:8c:23:91:d3:7a:4e:2d:97:f9:89:e0:16:
43:f4:82:5c:8f:45:62:18:a4:18:9b:cc:3b:be:8f:bf:a3:a3:
af:2d:7f:ea:6b:cf:6d:d3:ca:14:ca:ac:ab:5f:a4:51:31:ef:
c5:34:42:8a:ed:0f:73:c1:24:e7:87:a4:a5:4d:c7:a0:92:2d:
f3:d1:52:68:36:54:23:2a:e1:4e:0e:30:6c:f0:53:dc:29:86:
8a:0e:15:44:68:b2:d9:ee:57:4a:dd:de:df:28:af:b0:66:06:
56:57:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:34 2026 by rpki-client