
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa
File: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (raw, json)
Hash identifier: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=
Subject key identifier: 3A:F7:D9:F3:40:DC:EF:4C:66:6A:03:CA:C4:DB:B9:A4:3A:BA:DC:71
Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial: 0B31
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa
Signing time: Mon 22 Jun 2026 20:22:42 +0000
ROA not before: Mon 22 Jun 2026 20:22:41 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 14618
IP address blocks: 58.181.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Validity
Not Before: Jun 22 20:22:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a399991-d864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:9b:d5:c5:5e:19:78:36:2b:86:ea:72:f0:
55:4b:8a:21:0c:ac:96:da:52:c4:86:d2:6a:6d:48:
30:63:e3:bb:8f:63:04:fd:8e:3e:9f:ba:53:4e:26:
e7:6c:17:56:c8:e4:54:68:21:ba:1d:95:9e:dc:3d:
51:ad:07:95:7a:86:f5:e2:d4:6f:f4:7d:f2:4e:3e:
d5:1e:1c:2c:ad:6d:8b:e2:0b:6a:93:a4:d6:d7:3f:
91:7e:67:e8:90:96:8e:03:bc:5f:fe:f5:5e:12:d4:
aa:46:a2:08:bb:c7:65:25:b9:dc:48:99:82:b9:89:
21:cd:9d:e3:57:bb:b0:b5:b9:27:71:83:9e:94:c9:
da:d7:99:c0:b8:c3:ed:8a:97:14:67:c5:59:cd:42:
51:bc:8c:5d:83:4c:2d:63:7a:12:28:da:47:ec:e5:
2b:27:09:cf:67:91:cc:fd:e6:27:ab:70:bc:02:3e:
3b:cf:8a:4b:7f:ba:4a:1f:ec:fd:bd:40:04:5c:58:
41:50:9a:dd:fd:f4:51:65:58:2c:ae:36:f4:c4:c6:
a8:da:66:08:b5:5d:8a:94:29:09:bd:37:03:bc:aa:
1e:85:6f:20:c6:f2:07:69:37:9c:02:fd:28:a8:f1:
4a:78:2c:22:dc:1c:b3:e5:a2:32:29:a1:58:76:41:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:D9:F3:40:DC:EF:4C:66:6A:03:CA:C4:DB:B9:A4:3A:BA:DC:71
X509v3 Authority Key Identifier:
keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.181.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:53:af:17:7d:d5:30:56:6b:77:a0:a4:9b:b7:42:01:1a:5e:
3f:4c:93:d3:da:98:6c:75:f2:d9:ef:00:8d:50:56:f0:bd:50:
7e:b2:6d:bb:27:18:8e:15:98:73:cd:e2:1c:e7:6b:53:68:fe:
35:79:a9:75:f7:e4:38:02:c3:40:89:e4:ce:75:87:64:ae:3d:
f8:a7:a6:f5:ed:46:94:69:47:11:eb:52:4b:2f:8d:5d:a1:07:
3e:55:01:12:ee:dc:29:0d:6d:bb:b5:31:fc:64:e4:24:06:3c:
9c:7f:fa:97:af:2c:05:87:53:e5:0b:4d:2e:1f:ba:5d:bb:8f:
cd:a0:6c:2c:0f:e4:39:e2:2f:65:55:d5:77:33:76:79:e4:f2:
0e:9e:14:39:a1:4c:81:4e:68:38:8c:fe:cc:b9:d7:70:d2:f5:
94:34:6e:41:45:d9:9b:8d:3a:df:ce:56:81:2e:88:63:be:30:
4e:9a:be:db:0c:ce:a3:c9:52:e3:5b:da:0c:0f:c1:53:7d:5c:
c2:2d:57:d9:af:95:4a:5d:f7:bc:70:91:aa:dd:16:71:25:66:
25:02:a0:5d:bb:8c:5a:4b:24:81:70:41:38:ea:88:29:2a:07:
20:26:30:1f:dc:4e:ac:bc:23:f2:8d:16:dc:cf:e3:a0:66:41:
7f:8e:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:15:58 2026 by rpki-client