
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
File: 32A734F4DB3411F095EFF1788DD3641D.roa (raw, json)
Hash identifier: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=
Subject key identifier: 73:69:DC:0C:06:0B:F2:EB:23:28:AD:37:97:E4:BA:FF:97:1A:FD:08
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 36
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
Signing time: Sun 01 Mar 2026 06:00:38 +0000
ROA not before: Wed 17 Dec 2025 10:36:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154435
IP address blocks: 144.79.158.0/24 maxlen: 24
144.79.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Dec 17 10:36:53 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d606-7ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:82:9c:4a:bd:90:f1:68:84:47:4b:71:b1:
91:a6:6b:64:94:9b:9c:79:37:2c:1a:70:f9:ed:2a:
07:e0:67:e9:9a:b1:50:36:23:87:cd:b3:c6:3d:5a:
39:b6:b1:ca:6b:27:4f:23:8a:07:51:a4:44:8e:b7:
33:76:89:e9:41:7d:5e:8d:45:05:2d:8e:34:d3:ca:
0a:fa:63:99:24:64:a9:4e:e4:38:d3:98:f0:70:41:
96:b2:40:0f:0b:da:52:c2:a2:06:c8:56:12:97:c3:
c6:b9:be:b5:ce:17:b8:e6:a6:3f:1c:fb:88:95:ec:
43:46:0b:fe:80:16:82:01:a6:08:b8:50:0f:95:0e:
1a:e4:f1:fd:63:72:97:60:7e:ec:b5:67:9e:f2:b1:
26:78:75:98:c7:7a:da:3c:79:e2:7c:fb:4b:94:e6:
c2:14:aa:cd:06:3e:34:ce:39:7c:84:2c:1f:48:47:
99:3a:fc:a9:2d:0b:81:b0:19:d7:65:32:f8:35:84:
69:17:a2:9a:88:f3:04:68:4e:50:43:d7:dc:06:7e:
fc:43:e9:46:c3:71:73:a1:d5:d4:59:e5:d6:4d:55:
5d:42:80:c3:d1:36:ca:6a:f7:d9:7a:2a:4f:2b:d8:
3b:cb:a8:6c:34:39:5d:a0:a1:34:05:75:dd:aa:b4:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:DC:0C:06:0B:F2:EB:23:28:AD:37:97:E4:BA:FF:97:1A:FD:08
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/32A734F4DB3411F095EFF1788DD3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:28:a1:ec:71:93:74:ed:9f:24:c0:08:39:f2:d3:70:f1:57:
1a:2b:15:18:1e:be:5f:bf:31:7e:2d:f3:76:fe:66:fb:83:77:
ff:0b:88:d6:6f:6e:4a:58:56:45:d1:4d:f2:b1:8a:a5:61:11:
b1:23:6e:c1:b5:d5:c2:32:b2:d7:13:03:59:2f:3b:bd:db:ca:
92:2e:e5:94:32:e5:85:7c:e4:d0:a8:23:af:47:4a:92:c6:35:
b8:2e:97:0e:87:f6:c8:c5:de:5d:63:82:e0:36:5f:32:7c:4c:
5d:27:3c:a1:4d:0d:06:ad:32:ab:55:a5:16:01:39:0e:5c:0c:
c4:56:f5:f5:76:44:5c:f0:b9:40:77:71:b6:84:6d:f9:1f:c4:
e5:21:81:3a:11:79:f1:91:c9:3f:7c:03:37:58:9c:8c:f8:ad:
c7:a4:3f:71:3d:3e:b6:2d:0f:ce:5b:26:bb:7a:2f:f0:c4:12:
f8:9a:71:da:89:7c:bd:f8:07:c9:e2:91:29:bd:a6:21:fe:28:
2d:cd:a5:00:93:ab:95:a8:8b:87:c2:34:41:74:54:f1:25:1c:
ec:7b:2f:f4:2b:ed:f6:6c:b2:03:56:3b:9d:be:a1:26:22:e9:
35:f6:dc:66:e3:38:1d:08:40:45:3b:c3:17:36:8d:3f:62:4e:
01:14:0f:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:13 2026 by rpki-client