
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa
File: 32751AAE67B811F0962F0730C4F9AE02.roa (raw, json)
Hash identifier: 5GgOEVTUj+luRWBl8T2htbl23XYiADuNdZgfk2fUYTQ=
Subject key identifier: 2E:D4:E6:32:17:45:3F:6B:B1:B5:C1:B8:36:22:13:FF:0A:1E:03:14
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 09BB
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:06:32 +0000
ROA not before: Wed 23 Jul 2025 11:28:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134734
IP address blocks: 114.129.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Validity
Not Before: Jul 23 11:28:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48e38-e62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:23:ea:b3:4a:64:72:74:64:4d:49:8c:d5:
2c:d9:36:51:f0:6c:80:16:92:ee:f1:13:54:a2:ac:
82:ac:7a:3b:85:e2:4d:4c:8d:e6:fb:8d:7a:08:75:
01:4c:b1:f1:2b:44:3a:b3:52:e3:13:a8:32:3a:4f:
9e:e4:e2:66:e6:34:6d:e6:8b:5b:21:7d:12:9b:4f:
f3:0f:12:96:ab:6b:83:a8:bd:16:f8:1c:23:b6:76:
53:e8:81:18:8d:d3:e3:c0:6f:95:77:c9:a4:79:25:
29:54:a7:30:dc:e9:30:09:b7:93:f0:de:b1:78:01:
13:14:97:88:49:39:b8:c1:ef:dc:30:37:b0:bb:d1:
ed:57:53:92:5e:f4:24:b1:32:81:90:40:ec:ac:de:
25:40:70:83:70:9f:0f:14:98:fa:84:82:a3:9b:5e:
a1:5f:cc:65:9d:35:4e:39:9a:1c:15:51:ff:d3:f8:
51:05:e1:4d:90:d3:6f:39:0e:9d:f4:9f:17:67:f0:
90:f9:c9:58:01:be:11:03:8e:84:dd:2e:d8:92:4b:
73:1e:ee:d1:87:4b:b4:49:6b:cb:1e:de:65:02:a2:
6c:63:95:e0:55:2b:c0:40:32:af:34:23:1d:b1:81:
cf:af:fe:2d:ed:f5:f0:15:17:2e:04:b2:f1:aa:ca:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:E6:32:17:45:3F:6B:B1:B5:C1:B8:36:22:13:FF:0A:1E:03:14
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.129.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:86:2b:7b:02:16:68:e3:da:3e:36:be:43:7c:7f:ce:ad:ad:
22:77:f5:9c:2b:f8:8f:a0:4f:6d:7a:fe:61:52:28:ad:03:8f:
2e:e2:de:65:60:fe:a1:63:4f:ef:2f:99:37:3c:4d:32:11:77:
2e:3c:3f:ac:87:b8:fb:8b:5b:aa:55:bc:c2:2c:e4:30:c5:fb:
fc:a2:0c:ca:8b:7b:8b:ce:ef:19:41:3c:10:17:9b:1d:48:49:
02:ec:1b:39:08:1e:d9:39:f4:fb:15:a0:d7:e7:02:5f:78:21:
f7:c0:2a:85:b4:82:c7:63:3e:d3:d9:16:da:18:02:ed:cb:c1:
c7:16:de:76:01:a6:51:fa:56:c6:87:5c:6f:3a:56:38:c1:12:
5b:9d:75:d3:d7:3c:29:1e:cc:98:55:0e:44:bd:df:34:cb:00:
67:a9:ef:da:12:b5:da:2c:51:7f:44:cd:ea:ec:80:e6:1b:69:
b0:69:61:16:6f:10:9b:2c:76:c1:b4:d3:99:75:3c:ab:37:36:
38:52:42:37:68:ae:2c:b6:e5:7a:a7:ae:8f:02:ff:e0:cc:9b:
f2:b2:bf:f6:52:66:3f:93:1d:74:4e:be:5d:ce:2f:49:62:e8:
06:7d:6d:94:ae:53:53:8e:88:98:27:7c:87:f7:45:96:11:5d:
bf:da:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:15 2026 by rpki-client