
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa
File: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (raw, json)
Hash identifier: 72prmaxV5I+nRCKgiCmBCuBxHjAnd2zDB9Kx7IAuER8=
Subject key identifier: 42:82:F7:97:F6:FA:D8:B9:9C:D4:4C:58:96:2C:E2:FD:82:C2:CD:F0
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37E7
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:15:06 +0000
ROA not before: Thu 16 Apr 2026 15:15:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9541
IP address blocks: 59.103.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14311 (0x37e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fcfa-58c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:ee:b3:d4:49:06:b8:a9:da:0e:5a:bb:9d:
a1:d7:46:1d:2f:a1:59:e1:f3:d2:37:1b:29:1b:a7:
cf:5f:fd:a0:4a:44:af:1c:96:9d:7c:fa:c3:36:c0:
92:33:4a:05:1e:88:1f:ef:51:a3:31:74:86:e4:b5:
fb:bb:3c:ae:80:b9:b6:43:bb:8b:f1:83:b8:4d:5b:
54:83:65:af:21:61:c6:6a:38:88:96:7a:91:51:ae:
7d:c6:52:50:d2:d3:77:dc:b4:22:8f:2f:c6:cc:67:
da:59:6d:92:6c:e2:92:22:eb:4f:92:eb:e1:0e:28:
e1:f5:42:6a:0f:fe:08:99:ef:5d:6d:bd:24:39:e3:
a4:c0:11:32:4a:92:b7:91:6c:74:d2:d9:0d:6f:fe:
8c:54:06:e3:3f:73:35:df:f7:9b:83:64:b9:5c:10:
5f:67:61:72:e4:45:df:9f:72:6d:fa:a7:b5:37:9b:
f7:a1:47:f4:1f:41:9d:a5:f5:fe:38:f6:00:c1:2c:
4e:b0:15:a5:b7:89:9f:88:cc:eb:ec:dc:a3:97:f9:
d2:63:b7:53:cc:3f:92:fe:fd:91:5b:96:14:2f:18:
b0:85:3a:96:98:35:3e:de:dd:b3:a2:32:79:84:49:
25:4c:56:bc:30:16:82:0b:f8:c5:4f:a5:2d:5f:7b:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:F7:97:F6:FA:D8:B9:9C:D4:4C:58:96:2C:E2:FD:82:C2:CD:F0
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.103.96.0/19
Signature Algorithm: sha256WithRSAEncryption
69:0c:20:52:26:84:79:fd:41:91:f8:49:e2:c4:3d:50:ea:21:
76:b3:4c:2e:56:5c:9c:96:f5:c8:1a:7f:08:b3:c7:16:93:d8:
a8:8f:1b:3e:f5:22:cd:d4:d4:02:57:53:66:ef:24:97:54:91:
15:7b:1a:84:bb:49:6e:06:2e:d6:4a:76:26:2a:c2:a5:23:db:
e6:eb:d6:99:9a:be:99:15:63:51:14:68:bd:e4:ad:9b:c6:22:
b2:c1:15:a6:74:5e:1e:88:c6:d8:0a:f4:c3:26:25:c9:05:5f:
f0:cc:b3:29:a4:86:02:e1:b1:82:39:c2:55:b7:38:4a:b5:4b:
d8:ae:dc:be:90:71:aa:0f:4d:c7:44:2b:35:93:e7:b9:a6:0d:
28:ec:60:9b:25:9f:ea:06:9c:b8:11:ba:9d:5c:26:2c:4e:47:
17:34:4e:ce:2b:c3:29:72:0d:a7:15:80:53:95:62:2a:01:88:
59:c1:9a:5c:cf:61:3f:04:79:04:89:07:05:ad:9f:b3:77:6a:
fc:7d:90:40:61:2e:a6:04:28:ee:87:81:94:48:54:c0:c4:e6:
80:29:fb:a8:1b:f0:3b:5b:96:9c:b6:2b:2e:35:75:75:94:22:
37:f8:60:5f:8d:a6:b1:85:a9:1e:f8:bd:93:32:b5:ef:c5:c0:
16:94:b9:32
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICN+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB
NzYwQUVCNTQwHhcNMjYwNDE2MTUxNTA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUwZmNmYS01OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzfus9RJBrip2g5au52h10YdL6FZ4fPSNxspG6fPX/2gSkSvHJadfPrDNsCS
M0oFHogf71GjMXSG5LX7uzyugLm2Q7uL8YO4TVtUg2WvIWHGajiIlnqRUa59xlJQ
0tN33LQijy/GzGfaWW2SbOKSIutPkuvhDijh9UJqD/4Ime9dbb0kOeOkwBEySpK3
kWx00tkNb/6MVAbjP3M13/ebg2S5XBBfZ2Fy5EXfn3Jt+qe1N5v3oUf0H0GdpfX+
OPYAwSxOsBWlt4mfiMzr7Nyjl/nSY7dTzD+S/v2RW5YULxiwhTqWmDU+3t2zojJ5
hEklTFa8MBaCC/jFT6UtX3s7fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEKC95f2
+ti5nNRMWJYs4v2Cws3wMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE
OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvMzJDRjMyNkVD
QTJFMTFFQTgwMzA1RjBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFO2dgMA0GCSqGSIb3DQEBCwUAA4IBAQBpDCBSJoR5/UGR+EnixD1Q
6iF2s0wuVlyclvXIGn8Is8cWk9iojxs+9SLN1NQCV1Nm7ySXVJEVexqEu0luBi7W
SnYmKsKlI9vm69aZmr6ZFWNRFGi95K2bxiKywRWmdF4eiMbYCvTDJiXJBV/wzLMp
pIYC4bGCOcJVtzhKtUvYrty+kHGqD03HRCs1k+e5pg0o7GCbJZ/qBpy4EbqdXCYs
TkcXNE7OK8Mpcg2nFYBTlWIqAYhZwZpcz2E/BHkEiQcFrZ+zd2r8fZBAYS6mBCju
h4GUSFTAxOaAKfuoG/A7W5actisuNXV1lCI3+GBfjaaxhake+L2TMrXvxcAWlLky
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:36 2026 by rpki-client