
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
File: A24C1132558A11F1ABEF45E790833773.roa (raw, json)
Hash identifier: IzCa8R7iHMbzQ81n4oqAVNgWkbvl4evaWF1MBbUcdzU=
Subject key identifier: A3:B4:03:7F:2C:DF:5E:85:0D:29:41:45:BC:8E:AE:C5:60:8A:BA:FE
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 72
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
Signing time: Fri 22 May 2026 03:05:49 +0000
ROA not before: Fri 22 May 2026 03:05:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 395886
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.5.48.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: May 22 03:05:49 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a0fc80d-6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:45:60:db:5a:42:9c:9a:8d:8a:6b:f8:e3:
65:7d:dc:01:47:2e:18:53:cd:0a:1c:23:a1:a2:72:
e7:b4:fe:8c:b3:f7:04:86:69:a2:48:e4:fc:59:94:
f2:ce:eb:54:d4:80:9a:8c:73:4c:da:be:ee:b2:0f:
4d:89:1b:33:42:3a:d4:d0:7e:3a:7c:3c:97:a8:3c:
a8:2d:35:f0:a6:a4:de:64:1e:1d:1d:99:75:f8:f4:
4b:fc:03:2f:ea:39:83:21:c2:40:de:eb:bf:46:33:
3a:08:5b:57:e7:a3:a0:3b:fb:4b:15:71:99:e3:f4:
b4:7f:fe:f3:61:73:b8:61:ac:10:96:06:95:df:dc:
6d:df:31:15:28:c0:96:12:d2:c8:6a:58:e8:1f:a8:
d2:ac:ae:82:d8:92:23:fb:54:88:d7:02:5e:90:01:
39:2d:92:0e:ca:d0:5c:d6:79:d6:05:ca:60:98:70:
be:4a:34:b4:3c:7a:43:45:91:41:28:a4:17:76:df:
c2:b0:d5:aa:50:cc:b3:a4:16:b6:11:15:fc:26:de:
c6:79:d5:36:e6:69:2c:d5:d7:13:1e:6e:28:81:f5:
2e:01:27:20:26:5b:0a:da:a9:96:23:e4:db:30:c1:
dc:bd:40:7f:fc:91:79:fa:c2:83:8a:5e:f6:29:ed:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:03:7F:2C:DF:5E:85:0D:29:41:45:BC:8E:AE:C5:60:8A:BA:FE
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/21
177.3.32.0/20
177.3.80.0/21
177.5.48.0/20
177.7.128.0/20
Signature Algorithm: sha256WithRSAEncryption
98:7c:3a:5c:41:60:b3:10:5a:f9:e8:3a:79:be:cd:c3:65:fd:
a6:77:b2:7c:9d:a0:27:1b:b8:0b:dc:b0:d1:bb:e1:20:59:2d:
0d:ef:e0:49:55:c5:c6:c6:26:8a:65:d7:2c:5e:58:2e:03:bb:
a4:48:62:df:ba:bc:b2:3c:ad:7d:71:8e:74:fd:d7:8f:7f:22:
0c:8e:89:44:1f:52:16:82:25:d7:62:f2:d5:85:39:1a:cf:bb:
cf:58:58:2a:26:d6:8f:39:22:ad:f3:75:7e:a8:58:d5:37:8a:
36:e4:75:90:35:44:48:2c:70:64:c0:5a:36:dd:f6:c8:31:9b:
e2:1c:70:69:6c:a1:96:ed:0f:5c:0e:bf:09:06:85:15:1f:b6:
a5:9d:1b:8d:15:6f:16:8e:07:3c:73:34:3f:da:46:1b:2e:10:
69:df:ec:d7:5a:38:84:0c:53:82:e0:48:72:fd:fb:43:56:97:
26:ca:6c:2e:8e:2a:8b:d0:9f:42:50:cd:37:c9:a6:6f:9e:22:
97:59:21:10:7c:98:aa:33:9e:07:79:4a:e5:34:c0:e7:e3:5d:
a6:13:15:f1:1d:25:45:c5:7b:66:b6:6b:4b:cd:ff:3e:bf:f7:
a5:e4:2d:6b:57:b0:07:ea:00:2b:04:20:d4:6b:43:34:5e:41:
fb:03:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:40 2026 by rpki-client