
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/A32543BA9BEB11F190BD09186411F970.roa
File: A32543BA9BEB11F190BD09186411F970.roa (raw, json)
Hash identifier: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=
Subject key identifier: 5E:E4:08:57:B7:59:B3:81:46:E8:D0:C6:FD:87:8E:E4:0F:B9:DC:D3
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 8D
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/A32543BA9BEB11F190BD09186411F970.roa
Signing time: Wed 19 Aug 2026 16:32:59 +0000
ROA not before: Wed 19 Aug 2026 16:32:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153432
IP address blocks: 144.79.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Aug 19 16:32:59 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a85daba-20c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:6e:e7:a8:01:a7:99:11:00:b6:c3:72:93:
e2:ec:76:47:d3:9c:df:9e:2d:03:f7:91:d9:a2:12:
68:34:82:7c:7a:e7:d2:ce:b1:54:ae:91:63:4d:01:
43:b5:b8:59:70:61:b0:1d:0a:9d:f0:3a:74:4a:d3:
d9:06:98:1c:eb:59:e5:49:ac:73:d7:d1:0e:c2:5c:
82:ad:ef:66:a2:f2:38:53:31:fc:ca:82:14:d6:09:
6f:22:82:43:59:a3:8e:40:f2:b1:e5:3e:2d:66:e9:
c5:90:6b:bc:ea:c6:8f:46:d3:ae:bb:db:d6:6f:12:
7c:c7:94:16:f2:9d:f0:d2:9c:40:b7:82:32:40:7d:
52:c9:c8:e7:d4:8a:72:35:e8:cf:3c:f0:12:a1:b5:
94:50:14:09:3b:ad:f6:d9:0c:11:59:e4:a6:e5:09:
f8:2d:19:cd:db:49:94:e1:b9:5c:54:6a:37:1f:49:
4b:95:f6:87:d1:f3:54:1d:a6:4a:92:33:18:a9:c5:
98:6c:04:23:73:9d:8e:cb:75:f2:55:43:95:14:5b:
45:ba:7d:22:66:7c:15:79:3f:47:77:7b:4b:8a:0e:
2a:dd:1d:2b:49:9f:35:72:0d:ab:7c:6b:d9:78:1a:
69:10:2a:4c:ea:1d:5c:be:a7:46:96:3c:98:3b:28:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:08:57:B7:59:B3:81:46:E8:D0:C6:FD:87:8E:E4:0F:B9:DC:D3
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/A32543BA9BEB11F190BD09186411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:82:e0:83:37:40:09:b2:bd:30:31:ba:7b:8f:5a:85:4e:b7:
80:ca:cb:b4:19:66:55:9e:bd:5c:00:ec:bb:ee:55:2b:95:54:
64:d5:41:70:97:b0:81:10:99:bf:03:61:96:80:84:90:65:ca:
5f:5f:1d:b1:f1:87:05:d9:e8:88:45:45:d7:eb:b2:b4:4a:f6:
20:b7:35:e2:4e:a0:33:41:ec:90:4c:aa:24:46:b0:e0:01:7f:
e9:ea:0d:61:0d:7b:5e:6f:d7:9a:91:0b:d8:e0:9d:96:8e:b5:
a6:90:6f:d0:2f:dd:92:19:62:ba:ba:78:59:10:40:08:05:49:
5c:5d:8d:bb:1b:32:99:4b:90:fa:b7:1d:f3:3a:73:6c:b2:fb:
d3:6e:85:cb:2f:9e:07:1a:56:7a:5d:fd:dd:06:8a:02:de:3c:
56:12:d4:1e:e5:4a:3e:07:ad:0e:71:ec:52:71:36:3c:64:15:
0e:99:57:92:5f:9f:21:d4:5f:2a:26:4a:8d:f5:cd:3b:76:29:
63:f3:de:8a:3a:9b:db:10:0e:d6:c2:b7:74:c9:63:0e:fe:c2:
ca:4d:a0:b2:a6:20:96:f8:16:84:f9:8f:bc:b5:95:20:45:b2:
f7:48:aa:05:aa:18:7c:50:df:b7:ad:6d:f7:ae:6a:3a:a0:fb:
9f:cb:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:44 2026 by rpki-client