
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7D87C6D27A5D11F1BFFF0B408BA30FBC.roa
File: 7D87C6D27A5D11F1BFFF0B408BA30FBC.roa (raw, json)
Hash identifier: WCcCmFJ6FbD4OVJip/MhRbsSKPAWesj5hg1l1QNqkJk=
Subject key identifier: 11:20:76:3B:8F:AD:5E:E7:B1:99:E5:C8:F3:AD:33:B8:AB:7F:B0:AA
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 0112
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7D87C6D27A5D11F1BFFF0B408BA30FBC.roa
Signing time: Tue 07 Jul 2026 23:43:18 +0000
ROA not before: Tue 07 Jul 2026 23:43:18 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 395886
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.2.184.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.3.88.0/21 maxlen: 24
177.4.80.0/20 maxlen: 24
177.5.48.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
177.201.224.0/20 maxlen: 24
187.53.192.0/20 maxlen: 20
187.54.48.0/21 maxlen: 21
200.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 23:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Jul 7 23:43:18 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a4d8f16-f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:db:8c:60:11:34:54:d5:f6:8f:20:ed:74:
cb:e8:b1:4a:c2:5c:d4:7e:8a:4c:c4:77:61:62:32:
5c:7a:21:64:fe:0c:a4:6d:19:75:f5:17:fc:14:e7:
2e:05:05:15:04:1b:2c:d4:4a:00:7a:d5:b4:85:6d:
b8:0a:e8:4b:8c:02:84:83:6d:b8:99:a3:35:33:50:
96:c9:22:85:97:ea:e1:20:49:83:a7:de:cc:0d:1f:
ec:18:28:b0:74:a5:8e:54:ca:34:81:c3:45:5b:4a:
70:6d:cb:8f:24:21:76:f5:8d:70:cf:e2:07:5f:6a:
db:e8:88:66:1f:2e:42:35:ad:a8:5e:4d:b6:74:53:
65:1b:e7:98:95:de:2d:29:a0:4e:fd:6a:fe:25:0a:
b9:9c:17:a7:d1:d2:a9:46:3e:d8:42:79:13:8e:d5:
92:7e:1d:aa:21:5a:54:58:e4:0f:f4:e3:48:c0:11:
58:ad:9a:de:ad:b2:54:86:05:16:53:a4:16:3c:f2:
19:be:62:19:3f:1d:34:12:96:76:4e:b7:f1:b2:d2:
ab:5a:a7:7e:f7:53:af:db:1f:05:7e:41:4c:f8:02:
58:61:72:63:9e:ee:52:30:2a:59:05:e2:8b:97:8c:
0d:40:c5:e2:3d:fd:ee:b0:45:45:2e:cd:54:3f:1b:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:76:3B:8F:AD:5E:E7:B1:99:E5:C8:F3:AD:33:B8:AB:7F:B0:AA
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7D87C6D27A5D11F1BFFF0B408BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.80.0/20
177.5.48.0/20
177.7.128.0/20
177.201.224.0/20
187.53.192.0/20
187.54.48.0/21
200.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
00:bf:4f:4b:32:86:06:a1:ff:21:05:27:37:7a:25:09:b0:c7:
05:25:1c:dc:27:12:a4:f4:67:be:ae:e0:b5:1f:52:5a:5b:54:
bf:44:0a:ed:f7:ea:1d:a4:e4:7e:55:2c:b2:02:21:70:1c:d1:
b0:b4:37:48:cb:70:01:f1:d9:a2:db:e9:da:d2:e4:e3:0b:d5:
89:12:be:2b:42:13:e5:c1:18:0a:2e:8a:0c:e4:05:a6:86:7c:
4f:c5:18:53:7d:11:b9:8c:2a:8c:51:6d:c0:fe:37:fd:b4:55:
f6:d2:17:8c:17:4d:02:42:21:37:d4:00:ea:93:22:bc:75:52:
0c:c5:f6:cb:d6:fd:ea:5f:10:07:b5:4a:20:57:68:21:f2:dd:
f5:c6:ce:45:4f:65:8c:e5:3d:56:71:e5:85:4d:5e:7d:8b:45:
36:4f:f6:b2:2f:09:0a:ce:f6:46:a1:91:8b:ba:aa:e5:78:e0:
ab:50:fa:76:0c:67:53:9a:e0:7e:9e:a4:42:6d:31:5c:ea:43:
d8:c9:6c:23:fc:94:23:2a:cf:70:89:98:ec:2b:ce:42:75:1c:
dc:79:94:76:09:fd:b1:cd:e0:32:39:ad:b7:5a:87:9e:65:a9:
5d:84:e2:2c:05:f1:a8:05:a5:26:79:3b:8d:6e:26:ab:55:33:
22:1b:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:55:56 2026 by rpki-client