
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/32BE7D842F2C11F18141A2BDA4833773.roa
File: 32BE7D842F2C11F18141A2BDA4833773.roa (raw, json)
Hash identifier: gWophYTgpDz5CpRcrdMiyVhJRPw2gvb2kob0bfrvmwk=
Subject key identifier: FE:8E:4F:ED:0E:44:66:2A:18:39:26:5B:13:CC:99:09:99:27:97:47
Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial: 0762
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/32BE7D842F2C11F18141A2BDA4833773.roa
Signing time: Fri 03 Apr 2026 07:10:30 +0000
ROA not before: Fri 03 Apr 2026 07:10:30 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141689
IP address blocks: 2001:df5:dc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Validity
Not Before: Apr 3 07:10:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69cf67e6-5d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:54:eb:aa:bc:29:b3:61:89:32:83:c9:7a:
58:32:f6:78:e0:28:1d:a5:40:0e:5e:56:0c:9d:a1:
de:0a:3f:90:fd:14:be:36:5f:dc:5b:81:05:03:a9:
bd:47:24:dd:de:f4:4f:89:95:43:0b:84:da:3b:d1:
f6:4d:3e:19:ae:6a:b1:44:9f:3b:74:39:5c:e2:35:
dd:a5:da:17:d9:be:32:94:8a:66:03:b3:55:ad:f4:
0f:30:74:8d:ca:86:59:0f:af:16:a7:4e:55:ee:34:
3f:8a:4a:5d:3a:8f:81:11:75:a0:84:3d:53:73:92:
6d:01:d4:0a:86:6e:a4:c8:fe:d9:b4:19:a6:a7:cd:
45:87:19:a0:22:03:1c:e4:1b:cc:f6:ee:55:3e:bf:
47:19:fb:c3:5b:34:bd:ed:a6:8d:f1:56:3b:41:fb:
e5:eb:69:39:20:9d:ba:91:94:d5:09:17:a2:b4:5f:
44:0b:c1:28:eb:93:a7:44:27:8f:12:d1:dc:51:33:
5b:dd:85:56:3c:ce:32:fa:93:bd:5b:3c:11:8d:65:
4a:2c:83:79:d6:0b:c5:cb:e3:76:86:b1:9e:5e:f3:
d6:1d:73:be:85:fe:ac:21:77:0d:ab:1a:cb:8d:d2:
6c:aa:2d:6f:97:07:01:3a:e0:69:6b:52:39:8c:1c:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:4F:ED:0E:44:66:2A:18:39:26:5B:13:CC:99:09:99:27:97:47
X509v3 Authority Key Identifier:
keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/32BE7D842F2C11F18141A2BDA4833773.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:dc80::/48
Signature Algorithm: sha256WithRSAEncryption
6a:8b:0a:cb:df:90:9a:27:91:53:61:60:23:51:46:fc:fc:3d:
ae:a0:f6:45:b1:17:49:1d:70:d1:28:5c:d4:05:97:6a:7e:7c:
8f:d1:93:dc:03:3c:16:f1:55:72:fe:4b:37:31:64:9f:6b:8d:
a3:60:c5:af:40:fc:90:a2:5c:35:6a:7b:2d:79:3d:15:fc:a6:
d3:e2:dd:98:3c:8d:a1:84:2e:dd:9b:af:b1:84:a0:ed:09:93:
95:0b:c2:39:8d:6d:91:32:3d:52:08:f5:86:c5:03:17:ad:2b:
93:ef:b8:56:42:db:1e:7a:02:ed:8b:4d:c8:15:56:a7:3b:58:
ca:0c:d4:10:30:fa:d0:5b:33:12:a9:90:65:ec:97:96:60:1e:
64:2c:51:4c:9b:41:c8:bf:35:8b:99:ab:5a:36:0f:17:30:22:
5a:88:40:f0:b4:e2:9c:9e:c5:e9:1e:41:b9:20:67:86:c8:0f:
e1:5b:4e:3b:01:45:ba:e0:c0:75:3c:30:53:79:83:b9:91:06:
6a:d8:40:2c:4b:5d:e7:f1:4c:fc:34:ad:fb:8e:a2:2e:6c:ee:
50:24:f9:e5:4e:c8:82:85:01:b8:5a:cc:01:e2:48:14:37:c6:
e0:e1:c0:55:72:fb:24:6a:61:0e:ec:d2:27:39:0c:ba:72:3f:
86:bb:42:6e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC
QUNBQzQ4NTYwHhcNMjYwNDAzMDcxMDMwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNjdlNi01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6d9U66q8KbNhiTKDyXpYMvZ44CgdpUAOXlYMnaHeCj+Q/RS+Nl/cW4EFA6m9
RyTd3vRPiZVDC4TaO9H2TT4ZrmqxRJ87dDlc4jXdpdoX2b4ylIpmA7NVrfQPMHSN
yoZZD68Wp05V7jQ/ikpdOo+BEXWghD1Tc5JtAdQKhm6kyP7ZtBmmp81FhxmgIgMc
5BvM9u5VPr9HGfvDWzS97aaN8VY7Qfvl62k5IJ26kZTVCReitF9EC8Eo65OnRCeP
EtHcUTNb3YVWPM4y+pO9WzwRjWVKLIN51gvFy+N2hrGeXvPWHXO+hf6sIXcNqxrL
jdJsqi1vlwcBOuBpa1I5jBwqiwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFP6OT+0O
RGYqGDkmWxPMmQmZJ5dHMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0
NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkRCODAvQkU5RjYxQTA2NDUzMTFFQkFGNzc0RDMyQzRGOUFFMDIvMzJCRTdEODQy
RjJDMTFGMTgxNDFBMkJEQTQ4MzM3NzMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9dyAMA0GCSqGSIb3DQEBCwUAA4IBAQBqiwrL35CaJ5FTYWAj
UUb8/D2uoPZFsRdJHXDRKFzUBZdqfnyP0ZPcAzwW8VVy/ks3MWSfa42jYMWvQPyQ
olw1ansteT0V/KbT4t2YPI2hhC7dm6+xhKDtCZOVC8I5jW2RMj1SCPWGxQMXrSuT
77hWQtseegLti03IFVanO1jKDNQQMPrQWzMSqZBl7JeWYB5kLFFMm0HIvzWLmata
Ng8XMCJaiEDwtOKcnsXpHkG5IGeGyA/hW047AUW64MB1PDBTeYO5kQZq2EAsS13n
8Uz8NK37jqIubO5QJPnlTsiChQG4WswB4kgUN8bg4cBVcvskamEO7NInOQy6cj+G
u0Ju
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:04:17 2026 by rpki-client