
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
File: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (raw, json)
Hash identifier: yu+q3f/RarO60hYfGM/lYcRRiKIl/UB8fwUek+JSESk=
Subject key identifier: 60:21:82:02:DC:6C:39:34:67:D9:CD:DA:7A:01:41:B8:60:76:1F:8A
Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial: 0198
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
Signing time: Fri 27 Mar 2026 04:38:47 +0000
ROA not before: Fri 27 Mar 2026 04:38:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152332
IP address blocks: 157.10.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Validity
Not Before: Mar 27 04:38:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69c609d6-04ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:9f:38:f8:cc:f3:88:0b:e1:70:93:0e:09:
7a:6c:1d:00:92:b4:11:07:36:1d:69:98:10:5d:b4:
b4:f6:53:3e:44:24:44:ca:bd:a6:01:85:fe:ff:df:
20:ba:f0:9b:39:2e:5d:f6:6b:3d:fc:59:d2:ce:5f:
67:57:fc:db:a0:de:32:30:22:74:66:74:98:ea:61:
e6:b8:04:8a:7d:15:d2:72:29:98:ab:3c:94:9d:a1:
a9:db:18:5b:8b:75:8e:b6:b1:d7:7c:28:59:f8:3d:
80:78:8c:16:8b:ed:c1:3d:6d:c4:d1:cc:47:2d:58:
9c:76:d3:27:56:ba:00:81:08:ae:26:c7:0f:78:4c:
00:79:ef:22:b6:8a:e1:85:28:af:d1:00:2d:e3:04:
7a:d1:d4:41:bf:35:48:3f:6b:24:2c:d9:65:de:67:
ef:e2:ee:0c:3b:03:2c:b9:bc:a4:08:ee:4d:ab:93:
13:30:db:ca:86:47:bd:08:67:e6:75:22:36:d5:79:
bf:53:1b:d4:4f:d0:b7:c8:d6:a4:33:15:fc:e9:95:
21:80:b5:f2:58:23:86:f6:57:59:b2:c5:58:da:5d:
47:b6:a6:6a:e8:c2:9f:d0:e1:9c:9b:5c:49:57:78:
65:8d:22:84:8c:d9:6e:41:1d:fe:e6:c8:ab:54:cd:
f6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:82:02:DC:6C:39:34:67:D9:CD:DA:7A:01:41:B8:60:76:1F:8A
X509v3 Authority Key Identifier:
keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.214.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:6b:e6:74:7f:ee:cd:b5:90:9d:33:86:69:23:f7:b8:15:dd:
3f:e5:a9:cc:f2:35:f9:3c:0c:c9:93:45:a8:7b:1d:68:1e:e9:
46:e8:f0:e0:60:7d:2a:4c:2c:42:b4:43:2b:49:b4:7b:d1:b2:
41:d7:33:74:78:bf:f6:91:1c:cb:8e:e2:82:39:0c:ce:fe:bd:
c3:80:ac:92:96:0b:79:6e:28:11:c4:97:57:f5:25:2a:eb:0a:
9d:ac:da:15:83:64:16:e7:e4:2f:1b:3a:c5:56:2d:a8:73:fe:
af:49:40:a5:7f:37:5e:9a:18:c3:ad:ce:d9:ae:58:b4:37:f1:
aa:e2:d8:f1:8a:6e:b3:7b:e6:69:a2:3e:5d:39:8c:86:2a:fe:
06:07:20:c0:42:df:45:d9:62:81:10:8e:26:98:0b:3e:57:7c:
d4:36:40:79:4a:db:ff:2b:fb:94:4c:c3:6f:70:5e:97:9b:30:
ed:bd:78:3f:06:97:fa:a1:0d:8b:9e:0c:6c:45:ea:2c:79:cc:
59:ce:5b:27:64:84:f1:9c:41:e3:08:bc:5e:af:7c:d2:ba:c7:
70:6c:6e:94:d9:79:e3:52:28:84:08:ae:5a:95:9b:61:d1:81:
5f:7e:b4:66:cd:d8:4a:9e:52:b2:91:87:92:fe:2b:4e:be:04:
b4:c2:f0:d4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx
Mjc3Q0IyRjMwHhcNMjYwMzI3MDQzODQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM2MDlkNi0wNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZSfOPjM84gL4XCTDgl6bB0AkrQRBzYdaZgQXbS09lM+RCREyr2mAYX+/98g
uvCbOS5d9ms9/FnSzl9nV/zboN4yMCJ0ZnSY6mHmuASKfRXScimYqzyUnaGp2xhb
i3WOtrHXfChZ+D2AeIwWi+3BPW3E0cxHLVicdtMnVroAgQiuJscPeEwAee8itorh
hSiv0QAt4wR60dRBvzVIP2skLNll3mfv4u4MOwMsubykCO5Nq5MTMNvKhke9CGfm
dSI21Xm/UxvUT9C3yNakMxX86ZUhgLXyWCOG9ldZssVY2l1HtqZq6MKf0OGcm1xJ
V3hljSKEjNluQR3+5sirVM32jQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGAhggLc
bDk0Z9nN2noBQbhgdh+KMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF
NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkJBODIvRjI2MDE0RThDRTVBMTFFRThDM0JEMDNBQzRGOUFFMDIvMzJGOEEzQ0NF
QjMzMTFFRUEyREY4QzdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQrWMA0GCSqGSIb3DQEBCwUAA4IBAQBaa+Z0f+7NtZCdM4ZpI/e4
Fd0/5anM8jX5PAzJk0Woex1oHulG6PDgYH0qTCxCtEMrSbR70bJB1zN0eL/2kRzL
juKCOQzO/r3DgKySlgt5bigRxJdX9SUq6wqdrNoVg2QW5+QvGzrFVi2oc/6vSUCl
fzdemhjDrc7Zrli0N/Gq4tjxim6ze+Zpoj5dOYyGKv4GByDAQt9F2WKBEI4mmAs+
V3zUNkB5Stv/K/uUTMNvcF6XmzDtvXg/Bpf6oQ2LngxsReosecxZzlsnZITxnEHj
CLxer3zSusdwbG6U2XnjUiiECK5alZth0YFffrRmzdhKnlKykYeS/itOvgS0wvDU
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:00:14 2026 by rpki-client