
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
File: 0732C4DC090B11F1B0A6391E363D8C67.roa (raw, json)
Hash identifier: J561xmVSlPQuiaRbnBKYde82eZlXfxPuqU5+nzE9q2M=
Subject key identifier: 54:1D:75:51:2D:14:74:1D:6D:ED:25:EE:25:0A:4B:75:EA:77:02:6E
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 0591
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
Signing time: Sun 16 Aug 2026 20:41:17 +0000
ROA not before: Sun 16 Aug 2026 20:41:17 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 14593
IP address blocks: 65.181.0.0/19 maxlen: 24
168.140.240.0/20 maxlen: 24
206.83.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Aug 16 20:41:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a82206d-8c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:5b:8f:c7:7d:78:41:e6:f6:81:cd:fb:9f:
6f:cd:4f:f2:4f:35:ce:30:98:25:34:c1:54:58:c9:
6c:c5:7b:27:8a:33:bb:e6:f9:19:83:39:b6:1c:8b:
72:d5:7f:32:10:3b:79:1c:1a:38:b5:a9:db:bb:52:
ad:fb:53:7f:2a:88:27:df:01:2d:a0:5d:3b:e7:38:
ae:5f:7d:cd:55:29:99:07:31:21:81:31:86:38:8f:
db:51:27:20:42:f5:2d:09:0a:df:e6:97:10:1d:0a:
a7:48:51:25:e9:95:b1:62:73:ae:93:94:a3:3e:cc:
ed:c8:f9:c0:6a:35:61:ab:c7:15:2e:a9:48:a9:17:
24:d3:21:2e:49:fa:e4:bb:21:15:dc:91:84:19:8c:
9f:cd:b4:ae:9e:12:d1:66:8a:9d:06:fc:bd:ce:87:
8a:5d:6c:93:5a:2b:2f:cd:da:b9:43:b7:ef:b8:17:
a8:c8:7c:02:e6:83:fe:c5:01:a8:5a:9c:2f:6e:80:
3e:c8:fc:19:3a:ba:fd:37:3c:35:08:e1:6f:16:9f:
54:7d:c9:50:84:94:a8:d7:0c:d3:37:6b:7b:cb:9d:
c8:26:40:41:b1:fa:a2:43:4c:a0:74:da:3d:2f:72:
e2:50:48:8a:70:f5:90:4e:10:de:5f:57:92:f8:7f:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:75:51:2D:14:74:1D:6D:ED:25:EE:25:0A:4B:75:EA:77:02:6E
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
65.181.0.0/19
168.140.240.0/20
206.83.96.0/19
Signature Algorithm: sha256WithRSAEncryption
27:ff:9a:06:ab:c2:e3:4f:a5:2f:ac:1d:34:f7:b6:56:3a:2c:
11:1c:bd:67:e6:66:a1:bf:0e:1a:bc:dd:b0:0c:b4:82:68:14:
cd:a5:57:4a:f1:39:9a:97:a5:19:a8:3d:c5:9c:eb:15:d6:b6:
73:25:4f:f6:24:5c:c3:b0:cf:b9:1e:ab:2d:e5:ea:2d:80:80:
a1:ba:f3:2e:ce:ea:5d:9b:aa:59:da:99:d4:b4:71:53:50:69:
ea:b9:f3:7c:4f:75:09:53:77:a1:93:cf:12:d5:d7:b7:4e:fe:
5e:50:a5:c5:1c:d4:05:1f:b1:62:0b:1e:9e:53:37:52:e9:a5:
e8:e9:72:2d:3e:73:d3:a5:df:08:6a:65:3d:03:4e:b2:6a:d1:
aa:69:86:b0:ca:4e:e1:5d:b4:0d:99:4e:59:5b:7d:ab:34:ae:
95:a1:64:43:a0:ab:2b:2a:ef:15:34:f0:f5:9b:3f:4b:39:82:
d1:40:31:51:2a:ec:2e:fc:c3:8e:17:0d:5a:0e:6d:21:b7:06:
95:d3:0b:05:bc:cf:9b:b2:a0:38:61:4f:ab:6b:13:00:fd:f5:
78:81:62:71:95:66:ae:0b:29:f0:04:3b:71:6a:a3:f2:ef:73:
74:40:b2:3d:58:59:ef:50:8e:fb:f0:59:c8:ec:9f:e8:8b:a9:
06:04:5c:25
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3
RkVEQzAzOUEwHhcNMjYwODE2MjA0MTE3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTgyMjA2ZC04YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu75bj8d9eEHm9oHN+59vzU/yTzXOMJglNMFUWMlsxXsnijO75vkZgzm2HIty
1X8yEDt5HBo4tanbu1Kt+1N/Kogn3wEtoF075ziuX33NVSmZBzEhgTGGOI/bUScg
QvUtCQrf5pcQHQqnSFEl6ZWxYnOuk5SjPsztyPnAajVhq8cVLqlIqRck0yEuSfrk
uyEV3JGEGYyfzbSunhLRZoqdBvy9zoeKXWyTWisvzdq5Q7fvuBeoyHwC5oP+xQGo
WpwvboA+yPwZOrr9Nzw1COFvFp9UfclQhJSo1wzTN2t7y53IJkBBsfqiQ0ygdNo9
L3LiUEiKcPWQThDeX1eS+H/ePQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFQddVEt
FHQdbe0l7iUKS3XqdwJuMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3
RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU4REYvODY3MzYwODA0N0ZFMTFFQzlDREY0QjBBQzRGOUFFMDIvMDczMkM0REMw
OTBCMTFGMUIwQTYzOTFFMzYzRDhDNjcucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQFQbUAAwQEqIzwAwQFzlNgMA0GCSqGSIb3DQEBCwUAA4IBAQAn/5oG
q8LjT6UvrB0097ZWOiwRHL1n5mahvw4avN2wDLSCaBTNpVdK8Tmal6UZqD3FnOsV
1rZzJU/2JFzDsM+5Hqst5eotgIChuvMuzupdm6pZ2pnUtHFTUGnqufN8T3UJU3eh
k88S1de3Tv5eUKXFHNQFH7FiCx6eUzdS6aXo6XItPnPTpd8IamU9A06yatGqaYaw
yk7hXbQNmU5ZW32rNK6VoWRDoKsrKu8VNPD1mz9LOYLRQDFRKuwu/MOOFw1aDm0h
twaV0wsFvM+bsqA4YU+raxMA/fV4gWJxlWauCynwBDtxaqPy73N0QLI9WFnvUI77
8FnI7J/oi6kGBFwl
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:39 2026 by rpki-client