
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
File: 2187C56A5A7A11F1B6CAB384BF833773.roa (raw, json)
Hash identifier: RS+RNVV2GI93FhZ2iO2YPawBc6o/YKECzxAvACZ+FpQ=
Subject key identifier: 94:D5:05:C1:15:E7:DC:97:39:32:31:19:FB:C5:EE:9A:EA:64:55:D3
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 9C
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
Signing time: Thu 28 May 2026 09:46:42 +0000
ROA not before: Thu 28 May 2026 09:46:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 400618
IP address blocks: 177.0.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 03:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: May 28 09:46:42 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a180f02-38a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:7b:7d:f6:0a:12:26:aa:52:69:f0:9f:a1:
fa:cc:b8:fe:0f:da:f3:24:3d:f9:d6:84:12:c3:91:
d5:1c:45:47:c8:58:79:54:d1:b2:ae:d8:90:3b:d1:
18:8b:87:b0:71:b7:5e:f7:45:ad:ee:59:d4:bc:fc:
89:28:79:2f:5e:e8:92:fe:d8:c2:48:ed:b3:f5:2f:
ca:29:0c:03:01:f5:9a:92:5a:a4:02:d3:c4:80:8f:
66:21:c5:59:fb:11:64:11:27:09:1a:69:52:81:a4:
c8:22:50:2d:71:14:9b:5e:08:6d:2a:6e:96:70:7a:
37:e1:9c:b8:9f:86:9e:06:64:6a:d5:26:07:d4:2e:
8b:d4:33:13:9e:1e:b1:db:0a:44:5b:e4:ef:5f:58:
00:80:86:fc:33:22:24:84:9d:37:82:ec:ec:77:e2:
c3:09:66:98:57:e6:d2:44:9c:d0:de:a9:ee:1a:36:
1a:50:08:ef:5d:d5:0d:28:a4:5a:92:ca:44:2f:cb:
56:98:6f:6d:e0:b7:b8:21:d2:a1:54:d8:a5:70:03:
67:06:b0:97:3c:09:d1:f0:40:1a:b6:c8:a9:6e:ae:
ac:4c:78:c9:e8:f9:32:c6:5a:3e:50:17:4b:81:f6:
5d:25:1c:2d:da:b2:4d:0f:9a:57:6b:f4:5d:51:4a:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D5:05:C1:15:E7:DC:97:39:32:31:19:FB:C5:EE:9A:EA:64:55:D3
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.0.134.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4f:25:87:e4:bc:57:ef:1a:b4:29:6e:7e:52:c5:3e:8f:f0:
aa:61:63:38:59:86:f1:63:e9:e3:11:83:74:f8:52:90:d2:02:
7f:62:85:96:90:58:33:42:d1:61:85:e3:1d:23:31:67:82:87:
1f:79:c0:46:5e:e4:e3:82:2e:2b:59:aa:55:94:4a:50:b0:df:
8b:06:5d:91:8b:03:cc:4b:65:a5:f7:32:b9:ad:f1:81:bb:9c:
14:6b:81:53:3f:e8:70:4c:e3:61:b9:a4:9d:a2:6c:69:e4:8c:
e6:77:28:c9:95:b2:65:2b:d2:7f:78:9a:5a:33:cd:7a:04:26:
5d:01:39:ca:5a:05:97:16:23:23:ba:13:d4:b7:53:93:7c:c7:
d8:00:b3:66:f3:d0:ab:af:f5:63:8c:f2:5d:28:20:22:89:8b:
bc:85:20:ab:4e:21:26:89:92:a0:bf:c3:ca:85:46:34:2a:df:
18:36:ef:c0:fb:84:65:08:d3:28:bf:3a:c4:c1:11:a4:c3:7b:
11:f3:6e:7b:dd:53:fc:92:28:29:d7:3b:b0:0a:64:c7:d1:0d:
73:d0:88:12:5c:ef:81:c7:14:d4:ec:ab:d0:53:4a:33:36:5d:
62:75:d5:f4:6b:0b:51:53:11:7b:d1:34:bf:b6:0a:e6:ea:fe:
48:b0:59:9d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF
NEVGMzJDNTIwHhcNMjYwNTI4MDk0NjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4MGYwMi0zOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05d7ffYKEiaqUmnwn6H6zLj+D9rzJD351oQSw5HVHEVHyFh5VNGyrtiQO9EY
i4ewcbde90Wt7lnUvPyJKHkvXuiS/tjCSO2z9S/KKQwDAfWaklqkAtPEgI9mIcVZ
+xFkEScJGmlSgaTIIlAtcRSbXghtKm6WcHo34Zy4n4aeBmRq1SYH1C6L1DMTnh6x
2wpEW+TvX1gAgIb8MyIkhJ03guzsd+LDCWaYV+bSRJzQ3qnuGjYaUAjvXdUNKKRa
kspEL8tWmG9t4Le4IdKhVNilcANnBrCXPAnR8EAatsipbq6sTHjJ6Pkyxlo+UBdL
gfZdJRwt2rJND5pXa/RdUUrglQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJTVBcEV
59yXOTIxGfvF7prqZFXTMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG
MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvMjE4N0M1NkE1
QTdBMTFGMUI2Q0FCMzg0QkY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAsQCGMA0GCSqGSIb3DQEBCwUAA4IBAQC+TyWH5LxX7xq0KW5+UsU+
j/CqYWM4WYbxY+njEYN0+FKQ0gJ/YoWWkFgzQtFhheMdIzFngocfecBGXuTjgi4r
WapVlEpQsN+LBl2RiwPMS2Wl9zK5rfGBu5wUa4FTP+hwTONhuaSdomxp5IzmdyjJ
lbJlK9J/eJpaM816BCZdATnKWgWXFiMjuhPUt1OTfMfYALNm89Crr/VjjPJdKCAi
iYu8hSCrTiEmiZKgv8PKhUY0Kt8YNu/A+4RlCNMovzrEwRGkw3sR82573VP8kigp
1zuwCmTH0Q1z0IgSXO+BxxTU7KvQU0ozNl1iddX0awtRUxF70TS/tgrm6v5IsFmd
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:23 2026 by rpki-client