
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/32A5FD8C036611F1A426A4772D3D8C67.roa
File: 32A5FD8C036611F1A426A4772D3D8C67.roa (raw, json)
Hash identifier: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=
Subject key identifier: 8E:74:00:80:3F:AF:58:04:1A:AA:D3:FC:03:06:C4:2A:2E:34:15:9E
Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial: 10
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/32A5FD8C036611F1A426A4772D3D8C67.roa
Signing time: Sun 01 Mar 2026 05:36:53 +0000
ROA not before: Fri 06 Feb 2026 14:14:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 56283
IP address blocks: 202.0.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Validity
Not Before: Feb 6 14:14:50 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3d075-b669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:4c:d8:4a:2a:71:04:29:fe:67:1e:39:b6:
4b:1f:ca:44:a4:8d:68:92:c8:85:0f:a1:f9:27:8d:
2a:e3:dc:e1:54:f0:cd:5a:65:13:dd:88:37:c3:24:
58:91:5e:f8:05:94:da:45:f4:e9:65:95:4b:f6:0a:
91:1c:45:1a:ff:c6:00:c3:a3:fa:81:e6:de:d7:44:
38:87:f5:d6:d4:11:40:07:03:b9:8f:23:c1:98:0a:
80:f5:f9:07:17:6c:27:35:4a:a4:50:b6:2c:9a:52:
6d:05:b5:46:c9:bd:2f:c8:0c:b7:5e:8b:81:f0:d2:
ea:3b:e5:0b:4b:64:ba:45:03:f7:77:44:86:be:26:
b1:b6:89:8e:0e:78:16:9b:ce:6c:98:ea:86:dc:ea:
13:50:b7:55:2b:04:e2:d7:05:95:9a:f9:66:f0:ce:
5d:03:cd:12:81:85:eb:18:5d:8f:54:b7:0f:8d:03:
c1:e1:fd:c5:58:31:2d:da:78:a6:8c:5f:a6:f1:2d:
5d:04:47:5d:49:16:9a:36:a7:53:7e:0b:ba:6c:9c:
08:fd:2a:f5:12:ed:d5:3a:40:28:17:b0:3e:47:13:
a5:18:2d:b3:42:b4:a9:9e:6e:52:7a:7f:55:27:f2:
c6:77:2a:1f:a2:c8:60:ee:c4:37:b2:cd:b8:48:f6:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:00:80:3F:AF:58:04:1A:AA:D3:FC:03:06:C4:2A:2E:34:15:9E
X509v3 Authority Key Identifier:
keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/32A5FD8C036611F1A426A4772D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.0.115.0/24
Signature Algorithm: sha256WithRSAEncryption
22:57:30:35:05:93:b4:0d:81:05:b2:39:2b:9f:e6:0a:20:02:
79:26:3d:e8:2b:ef:cd:3d:6c:a2:9f:78:b3:30:91:1a:a3:ed:
2c:8b:c8:bc:03:7c:0c:3b:68:60:0a:1b:76:75:f4:d2:85:7d:
e7:17:95:8f:c2:5e:7d:10:b9:4a:0c:8c:90:ac:10:93:03:87:
a1:01:9a:64:6f:0b:ef:8d:3a:a2:de:25:95:0f:76:84:cb:10:
5d:46:65:9f:33:cb:c9:d5:8d:ec:00:3e:77:90:6a:94:68:a3:
ca:46:41:8a:4b:0e:da:ab:32:74:20:ca:af:21:d9:b1:75:45:
21:15:63:2e:47:1a:1b:c8:56:f2:0c:4f:87:48:62:c3:5a:01:
ac:9f:7a:c0:bc:ee:a8:03:7c:13:2c:ba:f7:ec:b9:b7:7e:b8:
5d:31:80:4d:be:26:d0:33:c1:27:ed:3b:4f:10:94:ba:b0:f9:
3d:72:7c:58:12:ee:ff:37:e1:3a:ac:6f:a1:6a:6b:18:5d:52:
44:8f:e3:fe:ee:98:e5:fb:6b:a7:eb:04:22:cc:bb:27:26:02:
28:f3:c2:6d:fd:fa:6b:84:28:ad:2a:af:81:93:bd:73:97:91:
aa:13:52:84:86:d0:61:54:dc:de:19:14:5a:5a:0c:ca:ce:99:
6e:18:41:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:20 2026 by rpki-client