
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/C32D1F4A13A011F09B8EF66AC4F9AE02.roa
File: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (raw, json)
Hash identifier: YKeKH2q636l3KSJMk82cm/+9dzWTPFS/wE3lhbjl9yE=
Subject key identifier: F7:79:33:9A:BF:82:CC:24:D0:28:6F:21:E1:44:A7:66:BD:87:3D:3C
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0578
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/C32D1F4A13A011F09B8EF66AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:51:43 +0000
ROA not before: Sat 11 Oct 2025 01:56:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 26042
IP address blocks: 103.120.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Oct 11 01:56:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47caf-ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:69:8c:2f:f0:de:c0:69:2b:6e:98:a4:5c:
87:84:f9:ef:3e:b1:71:b8:68:7c:d0:cc:74:3f:ca:
48:a0:0a:ed:79:69:2a:ee:5b:24:71:89:82:dc:86:
97:ff:6d:b1:50:6d:10:d2:a8:3b:dc:f6:d2:e0:bc:
e5:f5:d7:3a:3a:5c:43:33:fd:08:8a:95:2c:f5:e0:
0c:3d:aa:5a:13:1d:e7:35:04:21:a3:29:39:fd:19:
52:31:eb:7a:ec:73:43:f1:8e:81:b4:fc:67:45:c1:
95:5b:85:5d:0f:a2:e7:46:e8:c5:5e:3b:b2:63:9c:
88:d2:4e:94:16:84:83:3a:12:f8:72:fd:be:f3:77:
bd:af:cd:c1:33:9b:30:e5:a0:9c:75:71:58:09:de:
b7:0a:71:78:08:6e:15:6c:a2:08:84:6d:8b:ca:6a:
e7:4d:91:5f:45:4c:2c:42:8f:10:53:39:84:2a:a0:
b2:80:c9:71:93:a8:22:9a:6d:96:5e:68:f4:5c:10:
af:a9:d1:53:d1:e3:95:97:e8:1c:94:a9:65:df:e1:
f2:35:b3:ec:c3:ae:6b:f6:ef:0e:a5:1b:00:53:e8:
c0:37:65:11:84:e5:74:43:6b:f8:c5:c2:06:fb:19:
93:91:0b:5e:56:d7:5e:01:fe:63:e3:c5:30:8e:51:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:33:9A:BF:82:CC:24:D0:28:6F:21:E1:44:A7:66:BD:87:3D:3C
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/C32D1F4A13A011F09B8EF66AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:60:a6:d8:0d:10:d9:78:42:51:30:79:8e:ed:c0:aa:1d:a0:
94:34:23:2b:84:1e:81:16:0f:b0:b4:c9:fc:f1:31:33:e3:fc:
12:90:d7:51:a4:7d:39:eb:f8:e6:a1:36:5e:36:2a:3d:e9:56:
66:56:51:e6:90:c7:a1:73:6f:e8:ce:1e:70:c0:15:92:af:ca:
07:e0:1f:2e:05:96:92:32:ea:da:d1:8d:82:5b:53:a6:51:ad:
ac:e9:3f:ab:0c:c0:dc:0f:ac:fc:7d:8f:3c:c3:ac:83:60:64:
66:e4:61:d0:27:59:dc:25:f2:67:ed:da:fb:13:e7:ef:2e:42:
10:86:c1:9f:70:8c:a3:e8:00:0a:7c:2d:01:0f:3b:8b:59:23:
bf:5b:c1:fc:7f:af:aa:21:22:a3:2a:65:1a:73:fa:24:a3:f6:
ca:d5:b4:e0:d5:53:2c:0b:8c:45:b1:fa:68:b4:92:ec:49:fe:
54:fe:3e:8b:18:92:57:5d:ef:aa:5d:b1:f2:08:03:96:1f:8a:
46:01:76:e9:3c:8e:3e:cd:c1:b6:7f:39:a1:31:84:aa:31:af:
8d:c8:c3:a1:93:0d:41:64:ee:cd:e2:69:9d:3f:9f:f6:20:f3:
99:d5:14:4f:85:ae:73:c0:74:38:2c:d6:b2:ca:6f:b6:2a:4c:
b7:9e:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:02 2026 by rpki-client