
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/B32C87E6D37711F1B170C695FE65CEF9.roa
File: B32C87E6D37711F1B170C695FE65CEF9.roa (raw, json)
Hash identifier: ivZQ/5oM9vazsWigpkAbUftu17ZpA6Iq8Inxi/GcLeA=
Subject key identifier: 2E:F9:D3:18:7A:33:1E:5A:A0:16:1D:DC:B1:47:21:6C:F5:84:81:E5
Certificate issuer: /CN=A9187BD8/serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481
Certificate serial: 0F
Authority key identifier: 9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/B32C87E6D37711F1B170C695FE65CEF9.roa
Signing time: Thu 29 Oct 2026 09:04:09 +0000
ROA not before: Thu 29 Oct 2026 09:04:09 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 141159
IP address blocks: 103.167.54.0/24 maxlen: 24
103.167.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl
rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 10:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BD8, serialNumber=9B38C6897BFF6EF1569D15B76DFC3F37DB60E481
Validity
Not Before: Oct 29 09:04:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ae30c08-2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:12:3e:4f:ec:16:20:52:48:b8:9e:44:ef:
87:dc:8f:16:02:9c:e6:c7:0f:57:82:f5:91:58:29:
55:a5:4a:0e:3b:14:b5:94:20:c7:de:e5:dc:46:d9:
36:f7:d1:8b:4e:05:4b:82:45:a1:44:0d:59:ac:2d:
52:78:4e:bd:b8:93:61:95:6a:55:84:0a:03:ef:2e:
1a:9d:cb:45:0a:ba:11:ed:97:d4:09:69:b8:6d:ad:
75:b9:76:5d:31:46:fc:a2:c3:9b:3c:54:22:20:8e:
b9:84:b1:53:2a:9d:67:19:2d:7f:e0:fb:97:3f:79:
f2:af:50:66:8b:81:e2:aa:65:1c:49:7e:43:fc:62:
33:15:de:62:04:a0:b3:29:af:5a:d8:91:6b:9d:55:
bc:4c:ac:2c:b8:ac:9b:05:d1:92:89:3a:57:fb:0f:
8d:46:dd:04:64:af:7d:3f:d2:13:a7:ee:e8:70:56:
b4:6a:87:9e:b7:d6:8d:15:96:51:cb:ab:d8:a1:8d:
c3:2a:61:ec:43:be:fa:93:7d:8e:ef:40:4e:c1:1d:
f2:b9:6f:5f:66:54:0b:90:99:d2:10:cc:81:f6:45:
44:b8:a6:64:a4:ff:a9:c8:48:ba:1d:d7:db:70:e1:
6d:28:81:36:8f:30:a7:dc:eb:cf:0f:5f:45:c2:f9:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:D3:18:7A:33:1E:5A:A0:16:1D:DC:B1:47:21:6C:F5:84:81:E5
X509v3 Authority Key Identifier:
keyid:9B:38:C6:89:7B:FF:6E:F1:56:9D:15:B7:6D:FC:3F:37:DB:60:E4:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/mzjGiXv_bvFWnRW3bfw_N9tg5IE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzjGiXv_bvFWnRW3bfw_N9tg5IE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BD8/EA0BF06CD2B411F1BCF4D1D0FF65CEF9/B32C87E6D37711F1B170C695FE65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.54.0/23
Signature Algorithm: sha256WithRSAEncryption
93:d2:28:49:e6:ff:23:83:f4:d4:ab:8b:5c:ec:9a:6a:e8:3b:
42:58:8d:ec:c2:a2:47:05:c0:2d:33:bb:c2:d6:a7:36:4f:7a:
68:ed:50:c2:e1:15:51:2c:f0:f4:b2:c2:f4:ab:5f:54:0c:7c:
90:8f:1d:d9:62:1a:09:34:61:79:4f:ef:9c:0a:5d:a5:74:6e:
be:0f:33:52:d9:56:ec:f3:a9:07:00:cf:ea:c6:7b:4f:c3:60:
fa:79:78:7e:fe:d7:e5:58:20:38:e9:cc:26:b9:31:64:76:e4:
92:7e:a9:d8:e1:d3:22:0a:8e:3e:0b:93:59:c1:e1:d3:ac:ba:
20:0c:16:9d:14:a8:53:85:f0:61:45:b5:0a:25:e1:55:9d:7c:
6f:40:b2:c7:89:76:5e:46:c8:98:a4:24:8b:9e:e9:8f:d1:e7:
52:85:0d:a6:04:97:cb:67:24:a3:69:74:1d:7e:88:7e:8c:a9:
e3:5a:4a:15:fc:eb:6c:b2:08:91:37:79:5c:06:37:a1:82:90:
76:ab:a2:26:0b:e5:10:4b:fb:7e:da:11:b0:b7:38:62:8c:62:
12:80:e0:67:95:33:22:1b:09:cc:3b:3a:0d:36:ec:ea:8b:6f:
18:6c:8e:23:ac:9f:5f:11:6c:b7:8d:1b:0d:d0:6d:5c:dc:44:
0e:bc:79:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:49 2026 by rpki-client