
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/32E806F8878111EF9723F25DC4F9AE02.roa
File: 32E806F8878111EF9723F25DC4F9AE02.roa (raw, json)
Hash identifier: 098M3+B8DvGi6B5GSbiGZgVhsNi595tFhog+h0pHCM8=
Subject key identifier: 94:AB:2A:A1:79:65:CC:6B:5D:3D:36:67:54:48:9F:E5:9E:17:86:BE
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 07EC
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/32E806F8878111EF9723F25DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:25:16 +0000
ROA not before: Wed 27 Aug 2025 00:04:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24344
IP address blocks: 110.164.248.0/23 maxlen: 23
110.164.248.0/24 maxlen: 24
110.164.249.0/24 maxlen: 24
2403:6200:7501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 27 00:04:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4aebc-0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:8a:5f:f7:d8:62:9c:35:f1:36:bb:58:87:
ee:00:a1:03:ae:6b:9a:d9:84:e8:17:31:62:67:4e:
6f:e8:f6:21:e4:57:0d:eb:ad:b3:90:d4:42:7b:00:
d8:69:eb:b9:80:e7:dd:a5:88:28:36:a1:84:12:49:
ca:0a:57:39:a4:75:83:01:b4:33:b1:90:ff:0b:f7:
d3:a3:c1:30:ef:0b:2e:96:40:9a:76:4b:84:da:21:
ec:e6:9a:1a:a5:98:43:bb:f7:12:10:47:65:8d:dc:
02:6e:71:86:1b:49:ab:88:3c:55:5b:f9:f7:05:1e:
a1:06:8d:d5:d7:38:22:ec:b4:b1:81:86:53:0f:a2:
4d:0a:6c:f2:78:5f:96:85:6a:f5:4e:01:30:c6:a0:
07:20:72:d0:bb:8d:f6:d7:15:51:92:12:ec:1b:cc:
6a:1f:c6:60:28:05:32:ed:a3:c8:ef:fd:af:1c:e8:
74:f1:75:db:9d:05:46:51:8b:70:cb:8a:8a:d1:13:
2c:34:20:c4:5b:13:88:75:ee:26:47:6b:c9:fb:01:
f8:8b:c5:33:19:67:3c:99:a3:b7:b0:70:9a:a4:99:
c5:38:64:b6:5c:d6:c7:29:19:fa:10:d9:22:c3:ff:
c2:f5:b6:d1:ed:9a:8e:12:9f:4d:b8:fe:3b:bf:52:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:2A:A1:79:65:CC:6B:5D:3D:36:67:54:48:9F:E5:9E:17:86:BE
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/32E806F8878111EF9723F25DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.248.0/23
IPv6:
2403:6200:7501::/48
Signature Algorithm: sha256WithRSAEncryption
49:34:7b:a7:6f:db:f0:5b:a1:85:34:f4:31:e5:7e:0d:5f:77:
98:a7:8d:99:1c:62:2a:0b:ee:14:36:97:b3:ce:e4:7f:79:83:
43:55:b3:93:64:e8:b9:8e:e9:49:48:aa:6a:17:4c:66:a0:7d:
11:2b:2c:db:86:ed:4c:d7:40:88:ba:7e:f8:2e:3e:9d:af:95:
b5:ee:67:4d:29:79:2c:e2:96:74:9a:62:a4:3a:49:6e:ea:a9:
ec:8e:36:56:44:00:af:01:d6:2d:0c:67:1b:2f:ed:b5:bb:bf:
1a:ae:58:92:29:32:77:e0:c3:99:bc:1e:9f:59:8b:7e:64:07:
4f:ac:8d:59:bf:7d:0a:57:58:15:98:f5:0d:a9:2c:12:f4:00:
9a:f2:3c:09:99:94:94:d4:89:8b:5e:80:27:77:b4:6b:ca:fe:
8b:c8:e2:0b:70:b3:51:2b:f9:92:b3:88:6b:77:64:07:4b:ff:
a6:82:c2:4b:67:fe:68:52:e4:5a:75:3b:a2:6f:de:f4:16:bf:
19:1b:78:f5:0f:38:14:3d:32:e9:3d:89:f3:3c:9d:a9:0c:12:
aa:cb:8a:51:e6:ec:ec:71:4e:f9:cb:c8:c3:48:96:e7:1d:bd:
90:58:01:bc:44:76:41:9b:84:60:53:1e:6b:75:4c:9d:39:8f:
06:53:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:15 2026 by rpki-client