
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/326E1852D80B11EC874C9083C4F9AE02.roa
File: 326E1852D80B11EC874C9083C4F9AE02.roa (raw, json)
Hash identifier: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=
Subject key identifier: 2F:A5:DA:F1:DA:AC:D8:05:A2:94:93:6D:EC:D0:43:98:24:30:D0:BD
Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Certificate serial: 1ACE
Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/326E1852D80B11EC874C9083C4F9AE02.roa
Signing time: Fri 10 Apr 2026 16:20:03 +0000
ROA not before: Fri 10 Apr 2026 16:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 103.229.176.0/24 maxlen: 24
103.229.177.0/24 maxlen: 24
103.229.178.0/24 maxlen: 24
103.229.179.0/24 maxlen: 24
2401:3f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6862 (0x1ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Validity
Not Before: Apr 10 16:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d92333-65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:63:9f:20:cb:e4:48:a3:78:02:94:23:56:
ee:60:18:07:1c:f3:92:20:47:9b:0b:2a:1c:0f:6c:
44:57:97:da:77:9e:50:cc:b4:1e:ce:09:46:4d:11:
8f:f8:c1:6e:d1:3d:55:9f:30:f9:a5:5e:22:f8:9f:
cf:c8:76:2f:c3:67:28:63:0f:13:82:90:26:02:84:
ee:53:65:cf:23:22:6f:bb:1d:cc:87:dd:e9:99:a4:
21:82:f9:b0:ca:ed:8b:86:5b:89:f9:c5:b5:8f:83:
4e:c4:3b:0f:c5:64:8c:85:80:e9:8f:3c:e4:5a:65:
6a:7b:20:6d:aa:e8:d7:4f:07:89:10:1e:b7:87:40:
a9:7a:1d:29:9f:d5:c7:d9:ce:8f:b7:74:8b:3e:47:
44:c8:42:0b:5f:73:ac:97:a1:6c:8b:0a:d2:33:5e:
71:21:09:c4:37:05:c7:00:6f:bc:86:cb:e4:4f:a3:
cb:58:9c:d3:1b:df:69:65:37:df:56:be:94:01:e1:
35:ee:6d:d6:4a:db:40:37:55:a9:5f:b7:5b:8e:0a:
92:e9:47:98:0a:55:03:3a:f8:4e:b4:7f:77:06:d0:
f9:1c:09:e1:3d:a8:5c:f3:c6:a0:25:92:42:6b:29:
8d:7e:01:02:9f:da:c8:f7:d7:20:04:18:3e:8d:7b:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:DA:F1:DA:AC:D8:05:A2:94:93:6D:EC:D0:43:98:24:30:D0:BD
X509v3 Authority Key Identifier:
keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/326E1852D80B11EC874C9083C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.176.0/22
IPv6:
2401:3f60::/32
Signature Algorithm: sha256WithRSAEncryption
81:04:bc:68:e5:2e:92:0f:87:f2:91:38:36:e5:5e:36:77:53:
09:cd:4c:b4:c9:e4:54:bb:f2:78:0d:4e:ec:1d:dc:96:91:72:
67:cd:35:a3:04:2c:4e:c1:08:da:7b:da:b8:36:6f:93:a6:8e:
21:d0:56:eb:69:fe:65:32:0f:fd:46:ee:2c:a1:bc:f5:d9:c1:
da:b3:6e:39:e0:6d:32:94:ec:e8:44:9e:30:f5:e1:72:56:bb:
70:85:2c:50:81:05:e0:2a:27:95:ff:79:90:34:c7:3d:66:f1:
95:e5:ae:05:13:1e:4e:d1:03:3c:6d:b7:2f:26:d0:81:ac:04:
f2:df:ab:fa:2a:37:a4:db:84:a5:5d:6d:f7:33:ae:6f:b9:b5:
34:ba:8f:dc:5f:bd:be:2e:af:20:75:e9:58:39:18:d0:37:4c:
78:e5:8f:24:02:29:da:49:6b:27:bf:e0:5b:f7:de:f3:a3:80:
05:17:d7:31:8f:dd:63:56:f2:89:31:5a:d3:da:bb:5e:ac:c1:
7c:52:7b:f9:6f:67:15:89:32:c4:36:5f:80:ff:3c:20:93:d9:
79:2e:f1:31:e0:1d:7b:e1:cb:af:ec:19:1b:99:e2:bc:fc:0b:
61:db:9f:41:29:f3:5a:28:9b:54:a9:2e:96:ad:15:8e:7b:87:
8b:0f:63:f8
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICGs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3
QjFBNTNENTkwHhcNMjYwNDEwMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5MjMzMy02NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEVjnyDL5EijeAKUI1buYBgHHPOSIEebCyocD2xEV5fad55QzLQezglGTRGP
+MFu0T1VnzD5pV4i+J/PyHYvw2coYw8TgpAmAoTuU2XPIyJvux3Mh93pmaQhgvmw
yu2LhluJ+cW1j4NOxDsPxWSMhYDpjzzkWmVqeyBtqujXTweJEB63h0Cpeh0pn9XH
2c6Pt3SLPkdEyEILX3Osl6FsiwrSM15xIQnENwXHAG+8hsvkT6PLWJzTG99pZTff
Vr6UAeE17m3WSttAN1WpX7dbjgqS6UeYClUDOvhOtH93BtD5HAnhPahc88agJZJC
aymNfgECn9rI99cgBBg+jXvnGQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFC+l2vHa
rNgFopSTbezQQ5gkMNC9MB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG
RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkwMzIvNDVGQ0Y1RTA0RkVBMTFFNzk3MTBERTNFQzRGOUFFMDIvMzI2RTE4NTJE
ODBCMTFFQzg3NEM5MDgzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ+WwMA0EAgACMAcDBQAkAT9gMA0GCSqGSIb3DQEBCwUAA4IBAQCB
BLxo5S6SD4fykTg25V42d1MJzUy0yeRUu/J4DU7sHdyWkXJnzTWjBCxOwQjae9q4
Nm+Tpo4h0Fbraf5lMg/9Ru4sobz12cHas2454G0ylOzoRJ4w9eFyVrtwhSxQgQXg
KieV/3mQNMc9ZvGV5a4FEx5O0QM8bbcvJtCBrATy36v6Kjek24SlXW33M65vubU0
uo/cX72+Lq8gdelYORjQN0x45Y8kAinaSWsnv+Bb997zo4AFF9cxj91jVvKJMVrT
2rterMF8Unv5b2cViTLENl+A/zwgk9l5LvEx4B174cuv7BkbmeK8/Ath259BKfNa
KJtUqS6WrRWOe4eLD2P4
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:23 2026 by rpki-client