
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05FFB28C541011F1884CD63093833773.roa
File: 05FFB28C541011F1884CD63093833773.roa (raw, json)
Hash identifier: nZNbTG9D57VNDEfS92o6SlQ1C8tNAf0Dyyn1HciDklo=
Subject key identifier: 62:B1:6B:C0:EF:5F:51:4C:BF:EB:5C:0F:6E:7D:FA:0A:C2:21:14:3D
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 61
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05FFB28C541011F1884CD63093833773.roa
Signing time: Thu 21 May 2026 07:38:54 +0000
ROA not before: Thu 21 May 2026 07:38:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 40115
IP address blocks: 177.2.16.0/21 maxlen: 24
177.2.24.0/21 maxlen: 24
177.2.176.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.4.0.0/20 maxlen: 24
177.4.32.0/20 maxlen: 24
177.5.48.0/20 maxlen: 24
177.5.64.0/20 maxlen: 24
177.5.112.0/20 maxlen: 24
177.5.176.0/20 maxlen: 24
177.6.176.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
179.236.96.0/21 maxlen: 24
191.223.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: May 21 07:38:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a0eb68e-818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:08:86:3c:55:6b:8d:e6:7b:9e:cc:f4:09:
49:90:e6:7b:d6:ed:3d:72:cc:4d:63:51:c0:63:cb:
c1:59:b5:fa:eb:14:04:0f:4e:83:0e:b7:8f:b1:12:
b0:da:75:be:4a:0d:26:a2:b9:37:34:5c:1c:86:e9:
24:62:3d:88:8f:a8:92:d0:e7:c7:9e:5b:8c:98:e2:
53:95:3a:6d:02:38:1c:db:79:93:08:1f:05:b2:74:
d0:5d:62:99:e9:ab:eb:86:fa:26:7a:9a:d9:8a:ac:
7a:90:5d:b0:55:d4:88:3e:06:a6:56:75:1b:26:11:
7b:6b:3a:59:f7:d6:83:db:ce:41:44:05:79:e8:a1:
c5:fa:4f:87:33:9c:6a:fe:e8:85:f3:96:78:1d:42:
5b:16:49:99:1c:29:10:10:d4:06:8a:a3:5a:65:e7:
3c:eb:c3:9f:0a:80:7b:92:98:bf:08:03:f6:c3:12:
e9:a9:94:cf:cd:b3:ab:96:52:ba:7b:c6:67:4c:f4:
b0:80:86:ae:eb:95:8b:4c:74:91:a7:b7:2a:62:ec:
f6:fa:ca:67:33:6b:8a:32:8d:90:9d:c8:b4:d5:e9:
69:53:78:ab:c0:24:f7:30:71:b5:9f:33:ef:2c:fb:
2d:5b:f2:6f:9e:0a:77:2b:89:c3:3a:24:76:78:72:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:6B:C0:EF:5F:51:4C:BF:EB:5C:0F:6E:7D:FA:0A:C2:21:14:3D
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05FFB28C541011F1884CD63093833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/21
177.3.32.0/20
177.3.80.0/21
177.4.0.0/20
177.4.32.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
179.236.96.0/21
191.223.32.0/20
Signature Algorithm: sha256WithRSAEncryption
02:1b:89:5a:54:7f:a8:fa:fd:db:4b:61:71:1e:15:97:d2:b9:
bb:64:25:3d:7c:65:d3:91:28:56:0e:63:2d:a6:7c:98:09:6f:
b6:a2:fe:e1:5d:e3:32:14:4e:d6:db:31:94:9f:88:1a:8e:03:
b7:e2:28:d4:df:63:46:af:dc:24:f4:ad:18:5b:e2:7e:b9:80:
09:da:7c:b4:32:93:18:fb:a5:b0:ec:d3:2f:58:d6:47:de:84:
34:35:ea:93:c3:f9:f0:b2:e3:77:e2:e7:b5:42:c2:e5:fb:a1:
4b:11:4e:da:9b:38:a5:2c:3d:65:46:fa:46:a4:72:26:cb:78:
65:b1:a0:f7:82:5a:e3:b3:0c:8a:3e:a5:fb:60:5f:38:3e:80:
81:2a:98:49:c4:b4:2a:9d:c4:cc:e0:9d:52:49:1e:76:9e:8f:
2f:27:53:33:d3:4f:ec:0c:21:f2:49:f0:5c:10:72:51:09:66:
2d:51:49:57:24:18:15:c3:d2:2e:fc:08:49:5b:88:e7:29:0c:
b0:46:99:ce:dc:58:1a:52:1c:d7:ee:d8:a8:a6:b1:b8:5f:13:
aa:25:b4:f8:35:d5:06:2f:c5:e1:8f:3e:dc:4a:4a:d0:d3:2b:
0d:7b:a4:5f:9b:a2:6f:7b:ca:3e:c9:e8:78:b5:ca:f0:2f:ed:
d5:d8:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:52:58 2026 by rpki-client