
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
File: 2187C56A5A7A11F1B6CAB384BF833773.roa (raw, json)
Hash identifier: COEPfzwvooDKFUGxePYYeQuUy0B1h4MXBdmkdQT6f4o=
Subject key identifier: F3:4D:58:3B:BF:44:FF:ED:A9:A3:78:5F:EB:5D:0A:4C:61:8B:F4:C2
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: A7
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
Signing time: Tue 09 Jun 2026 07:43:57 +0000
ROA not before: Tue 09 Jun 2026 07:43:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 400618
IP address blocks: 177.0.134.0/24 maxlen: 24
177.0.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Jun 9 07:43:57 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a27c43d-5e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:c1:1d:6a:34:ac:06:32:32:62:3c:e4:c7:
14:08:00:e9:a2:93:68:0d:42:b6:67:a4:f6:56:12:
01:be:b7:d0:83:a6:1e:b5:d8:bb:ae:50:5a:97:a6:
5d:c5:68:56:95:13:28:dc:12:63:8c:15:5a:1d:a7:
ce:c0:b1:bf:31:89:01:a9:e1:a5:93:00:16:d8:10:
a1:8e:e2:b2:b6:b9:d3:7c:91:18:e4:f0:6c:aa:58:
ac:4e:74:5d:bd:f0:43:6d:5a:c4:76:dc:83:b8:28:
8c:ef:4b:15:f9:8e:86:bb:48:f2:4c:9b:f7:c3:01:
7e:17:ce:e6:0e:69:a9:ea:52:ef:bd:36:7a:c5:b7:
78:8e:a7:a5:bf:5a:c2:0b:c0:72:25:4d:a2:da:ad:
0b:15:ac:54:61:84:45:d8:6d:e2:f7:aa:70:7f:4c:
ee:bf:52:4c:a2:73:c2:7e:e1:01:8d:cf:b3:07:66:
16:94:4b:79:e0:4b:fd:0e:b3:1b:d4:28:e3:12:ec:
65:68:3b:85:6e:cf:93:f7:f6:5c:bb:ba:9b:c6:87:
bb:81:28:32:fc:00:c4:62:4d:46:5b:ec:17:b2:c5:
64:d1:bd:e1:a9:db:91:f4:de:7f:09:5b:bd:b8:49:
0d:ea:d6:7b:ce:0c:7d:2e:83:d2:7d:cf:96:38:a6:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:58:3B:BF:44:FF:ED:A9:A3:78:5F:EB:5D:0A:4C:61:8B:F4:C2
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.0.134.0/24
177.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
36:20:88:12:ce:29:37:59:ba:21:8d:b6:25:c5:1f:bc:6a:76:
19:0e:4c:d7:31:d1:09:27:da:77:e2:e6:41:f4:e4:98:94:b6:
dd:7f:e1:2a:ea:39:86:10:8e:e9:c6:c2:65:83:a5:4b:cd:58:
26:38:2f:80:a1:94:cc:b8:23:27:cb:f4:c4:2b:c7:2c:81:d3:
60:ca:36:04:40:b8:77:47:aa:e1:58:7d:52:9b:4b:e6:17:19:
49:4a:6b:43:30:98:61:3a:9e:da:36:9e:f6:ff:74:ba:9f:89:
7e:9d:0f:77:7d:6b:ff:d1:0f:fc:dd:e5:2c:f3:e6:1b:ef:97:
86:29:6b:74:da:d5:d6:1e:b4:44:ea:26:2a:f6:47:9d:07:5f:
31:a7:1c:aa:ab:ec:61:ef:92:0f:53:0e:39:6d:a6:f1:0d:7a:
fb:8d:b2:b7:3d:1a:d0:bf:df:33:67:fc:94:da:86:57:72:3f:
2b:06:bf:91:c7:26:1c:51:c4:e9:85:a2:0e:86:39:b5:7f:88:
8d:a5:b2:00:1e:66:d5:58:cf:99:04:ad:c1:db:d5:82:17:35:
7c:58:c0:a7:27:1f:bb:9b:ae:2e:6b:01:8a:69:c4:05:c6:10:
e4:b3:87:3a:17:90:3b:23:cb:64:26:af:cb:bf:58:5b:ce:95:
10:f9:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:52 2026 by rpki-client