
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0BC913B281E111F185BF86D772A30FBC.roa
File: 0BC913B281E111F185BF86D772A30FBC.roa (raw, json)
Hash identifier: 8LRMIG9FOeE73QQylOEmiu2if7Id3ghQKqRc4l14mRs=
Subject key identifier: 6E:B2:BE:F9:18:E4:6F:7F:6F:11:7A:89:A3:DC:F2:DE:E7:CE:CE:35
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 014E
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0BC913B281E111F185BF86D772A30FBC.roa
Signing time: Fri 17 Jul 2026 13:11:39 +0000
ROA not before: Fri 17 Jul 2026 13:11:39 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140227
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.2.184.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.3.88.0/21 maxlen: 24
177.4.0.0/20 maxlen: 24
177.4.32.0/20 maxlen: 24
177.4.80.0/20 maxlen: 24
177.5.48.0/20 maxlen: 24
177.5.64.0/20 maxlen: 24
177.5.112.0/20 maxlen: 24
177.5.176.0/20 maxlen: 24
177.6.176.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
177.201.224.0/20 maxlen: 24
179.236.96.0/21 maxlen: 24
179.236.104.0/21 maxlen: 24
187.53.192.0/20 maxlen: 20
191.223.32.0/20 maxlen: 24
200.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Jul 17 13:11:39 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a5a2a0b-01f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:ed:2f:c7:09:b8:27:9f:c3:21:e7:39:58:
08:78:bd:b6:a9:02:61:55:d0:fa:28:81:94:b0:38:
05:ab:fe:eb:3e:b1:72:ab:bb:92:f3:47:83:bf:f1:
88:d3:5d:30:11:15:82:36:10:ce:6d:fc:90:bd:8b:
d3:42:3b:48:ac:e2:0b:64:ae:33:34:15:03:8b:63:
fb:32:d1:d5:dc:4f:b0:35:0d:ed:58:a2:07:87:9d:
ef:49:cc:f3:c7:ff:05:64:34:07:bb:9e:2e:81:e7:
dc:db:d5:eb:33:f3:f1:19:78:3b:65:a4:5a:92:a3:
70:24:3e:b0:dd:b1:c0:8e:bb:47:38:86:93:e5:42:
0e:b0:62:60:0f:18:44:0b:8d:49:2f:4d:a1:05:ce:
e7:5b:64:e1:5b:9d:10:0a:33:b4:3d:7d:3d:9d:28:
41:52:92:93:a3:6f:80:aa:9e:03:e2:8a:42:3f:ca:
d7:4f:5f:29:24:0b:b2:78:ca:0f:41:26:eb:0b:8a:
fe:20:4b:86:a7:e3:ed:a6:68:6a:27:d1:5d:7d:d3:
bc:fc:49:d1:66:ed:69:90:ea:a0:3a:f2:14:af:9c:
9b:e0:49:5e:54:ea:a0:00:9d:c2:8c:70:3f:2c:4b:
74:8a:96:10:05:1a:b9:1c:37:93:f1:a8:b6:9e:d6:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:BE:F9:18:E4:6F:7F:6F:11:7A:89:A3:DC:F2:DE:E7:CE:CE:35
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0BC913B281E111F185BF86D772A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
177.201.224.0/20
179.236.96.0/20
187.53.192.0/20
191.223.32.0/20
200.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:41:42:4e:fe:c1:f5:1f:4a:05:f9:25:ee:51:28:9d:7f:3d:
2d:03:20:65:4a:84:be:01:bf:ea:be:d0:19:ea:b6:c8:3e:4c:
71:71:cc:28:c0:80:39:03:71:a2:b7:7c:6e:db:bd:d8:4e:8b:
2d:6a:d9:dc:52:5b:b9:41:09:20:38:d2:14:c6:9c:68:21:e7:
07:be:9a:ca:1d:3c:d4:f2:4d:8a:21:27:49:5c:b0:65:73:34:
e2:90:f0:2a:2e:b0:5e:30:7a:2e:de:35:49:ca:be:f5:20:9f:
d8:1b:cb:ec:57:48:de:1f:d7:d1:18:e7:cf:14:61:3b:02:fe:
e2:03:1e:77:3a:8a:ee:18:22:9d:91:1a:58:ef:25:0f:6e:d5:
56:d5:05:d1:9d:58:67:cb:bd:ae:6b:99:90:c7:eb:f9:57:ef:
31:11:d7:a5:9b:60:e5:77:2d:5d:f7:5a:eb:0b:5f:fd:e8:1d:
78:f9:ba:2e:d3:db:02:61:9c:ee:e3:52:c6:6f:cf:55:05:3d:
71:f7:9f:42:96:c8:35:21:9e:dc:1a:b6:c3:5d:b0:25:6f:89:
37:12:0b:37:42:b6:9d:39:a8:ef:bb:f7:8a:1b:69:25:fd:88:
d7:ba:c5:28:6b:82:4c:4a:ef:23:7c:96:0e:38:02:75:4d:ba:
f9:68:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client