
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
File: 32E51F32BFD511F0A2819A6CC4F9AE02.roa (raw, json)
Hash identifier: FI9i77MOaa5+RZbDCesgWm0RBIw/4AOlGtMcREAAc8A=
Subject key identifier: 27:CA:A3:98:71:AB:4E:F9:6E:DD:89:EA:47:1E:CE:B8:BA:45:3C:F6
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A47
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:22:01 +0000
ROA not before: Fri 16 Jan 2026 16:13:05 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134659
IP address blocks: 103.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14919 (0x3a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:05 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4adf9-82f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:01:d7:e4:8f:ac:bf:c7:01:a5:7a:99:33:
54:14:d7:74:e6:0e:3a:e8:9a:02:33:f0:c7:1a:79:
90:5a:df:46:3b:1a:ac:85:b6:b9:33:72:55:0f:e1:
b7:2f:ca:98:12:c3:05:c3:f5:b7:62:07:74:3a:9e:
b4:65:ef:d5:0a:c1:ae:72:94:ad:fa:f5:6b:59:19:
df:19:d2:30:db:4e:29:48:9b:49:08:4b:b7:b3:1e:
3d:31:17:cf:29:f6:c7:64:36:e9:f3:0d:09:ea:63:
56:15:c2:ed:9b:68:71:c6:5a:04:ea:04:46:e2:48:
31:51:5d:7b:c6:e5:4d:d7:5c:de:6a:8d:17:56:72:
03:4d:bf:4e:e9:48:98:58:64:5a:ab:21:83:a8:33:
b9:48:df:93:fb:6e:1d:be:62:76:27:e9:f0:1e:61:
cb:55:7e:59:a4:12:3e:2e:9f:56:a9:18:7f:34:ae:
48:6f:60:e7:33:60:68:65:d1:e3:0e:95:c4:7a:b7:
78:08:fd:fa:32:ca:82:57:4f:fa:42:78:39:9a:3b:
47:b6:0d:29:5d:6c:8d:25:79:8d:b7:f1:72:f4:e2:
1e:b0:e7:bc:c6:02:47:9b:f6:1f:de:f4:92:d8:d4:
f8:1a:16:e8:fb:7c:f2:a4:42:18:80:9e:ce:ce:4f:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:A3:98:71:AB:4E:F9:6E:DD:89:EA:47:1E:CE:B8:BA:45:3C:F6
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6e:de:20:cb:c8:6e:63:85:4c:b4:da:b3:a2:47:15:c2:5a:
42:77:0e:b3:11:19:c6:0a:ed:38:fb:71:21:8e:b5:d9:ed:b3:
ee:af:d4:5f:a5:ae:57:13:18:3c:df:44:ff:9b:09:2e:94:f8:
e2:58:3b:3e:b8:10:90:95:f7:e8:e2:b5:7d:cb:02:1e:3c:56:
58:b4:be:1e:af:97:e1:bc:d6:1e:29:70:60:17:91:dc:b0:0c:
7e:3d:1b:e2:da:5f:44:d7:13:f1:23:01:7e:a3:fd:89:f1:dc:
dc:7b:57:b7:a2:62:75:47:09:55:48:d1:fa:b6:6e:10:4d:55:
da:4c:d2:b0:26:a1:cd:e1:85:c7:d7:66:75:e4:f0:74:e4:a1:
45:37:ca:bf:65:ed:41:e0:ca:d8:c4:49:3e:fd:3e:03:03:d8:
28:ab:38:f0:4f:28:4c:d1:c6:bc:3b:66:b3:82:3e:ad:4c:0b:
c4:b4:59:84:25:25:3b:f1:ce:6d:54:29:31:4f:ae:c1:c1:43:
f5:89:3c:e9:55:0c:12:28:50:8d:7e:31:40:36:87:cd:2b:ad:
20:4c:d9:3c:60:41:2b:35:d9:76:15:cd:3f:eb:9e:f4:26:02:
6e:70:e4:7e:12:fd:7a:00:55:bc:ab:5e:05:fb:52:43:74:44:
37:1c:08:91
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWRmOS04MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgQB1+SPrL/HAaV6mTNUFNd05g466JoCM/DHGnmQWt9GOxqshba5M3JVD+G3
L8qYEsMFw/W3Ygd0Op60Ze/VCsGucpSt+vVrWRnfGdIw204pSJtJCEu3sx49MRfP
KfbHZDbp8w0J6mNWFcLtm2hxxloE6gRG4kgxUV17xuVN11zeao0XVnIDTb9O6UiY
WGRaqyGDqDO5SN+T+24dvmJ2J+nwHmHLVX5ZpBI+Lp9WqRh/NK5Ib2DnM2BoZdHj
DpXEerd4CP36MsqCV0/6Qng5mjtHtg0pXWyNJXmNt/Fy9OIesOe8xgJHm/Yf3vSS
2NT4Ghbo+3zypEIYgJ7Ozk930QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCfKo5hx
q075bt2J6kcezri6RTz2MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMzJFNTFGMzJC
RkQ1MTFGMEEyODE5QTZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ9EHMA0GCSqGSIb3DQEBCwUAA4IBAQCLbt4gy8huY4VMtNqzokcV
wlpCdw6zERnGCu04+3EhjrXZ7bPur9Rfpa5XExg830T/mwkulPjiWDs+uBCQlffo
4rV9ywIePFZYtL4er5fhvNYeKXBgF5HcsAx+PRvi2l9E1xPxIwF+o/2J8dzce1e3
omJ1RwlVSNH6tm4QTVXaTNKwJqHN4YXH12Z15PB05KFFN8q/Ze1B4MrYxEk+/T4D
A9goqzjwTyhM0ca8O2azgj6tTAvEtFmEJSU78c5tVCkxT67BwUP1iTzpVQwSKFCN
fjFANofNK60gTNk8YEErNdl2Fc0/6570JgJucOR+Ev16AFW8q14F+1JDdEQ3HAiR
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:29:53 2026 by rpki-client