
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
File: 89C7E3A255B211F1AB301B6C9D833773.roa (raw, json)
Hash identifier: FlK2ErebuPoLlXe8uyCOVyBbtVz4jA09/E7vFyIyM3E=
Subject key identifier: F5:66:F7:0A:93:0A:F9:91:27:6E:ED:3A:C2:84:88:60:20:8C:29:2A
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01B8
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
Signing time: Tue 13 Oct 2026 03:52:12 +0000
ROA not before: Tue 13 Oct 2026 03:52:12 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 18186
IP address blocks: 177.4.0.0/20 maxlen: 24
177.4.32.0/20 maxlen: 24
177.4.80.0/20 maxlen: 24
177.5.64.0/20 maxlen: 24
177.5.112.0/20 maxlen: 24
177.5.176.0/20 maxlen: 24
177.6.176.0/20 maxlen: 24
177.201.224.0/20 maxlen: 24
179.236.96.0/21 maxlen: 24
179.236.104.0/21 maxlen: 24
191.223.32.0/20 maxlen: 24
200.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Oct 13 03:52:12 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acdaaec-5077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:4d:b9:85:cd:39:e7:2f:22:43:ec:20:76:
14:b0:e3:e5:6f:6e:21:76:56:f7:2d:f7:20:5e:18:
b2:cb:31:2a:ac:48:fd:08:5b:8a:f4:f6:4f:c1:af:
66:c8:c2:0f:9d:ac:58:b4:f4:f0:ef:9b:5f:1a:5d:
01:b7:6a:48:fe:8f:a3:61:24:dd:25:8f:56:09:59:
0e:b0:57:b6:21:a2:53:af:fd:63:20:fb:94:d5:14:
94:db:ba:85:a3:06:7b:0e:05:f5:f2:74:ab:92:5c:
e8:79:9c:6c:42:0b:b3:c4:5a:35:65:46:9b:50:4d:
7e:78:b4:a4:a6:55:db:58:22:e1:cb:8f:08:f5:55:
1e:12:4f:96:08:46:f3:5a:1b:f9:6e:e3:13:fd:2c:
a9:88:bf:f3:09:62:0f:9d:5e:e4:bf:9b:1b:fd:90:
09:72:2b:2c:1d:54:d0:f2:49:7e:31:9a:bb:96:8b:
ff:67:82:e2:83:c6:25:e9:7b:52:fc:93:10:06:39:
07:72:67:37:2a:90:4b:d9:16:29:04:41:36:00:68:
36:48:f0:65:72:50:c2:d2:6e:d6:c7:15:63:68:b2:
62:64:60:4b:1f:3a:f2:e9:24:39:32:56:54:26:82:
39:ac:2d:1a:1a:f8:b3:6f:9c:c4:ef:47:6f:0f:72:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:F7:0A:93:0A:F9:91:27:6E:ED:3A:C2:84:88:60:20:8C:29:2A
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.64.0/20
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.201.224.0/20
179.236.96.0/20
191.223.32.0/20
200.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
02:74:1c:08:ee:51:69:d1:30:fc:97:12:be:08:a2:99:74:4c:
0a:a0:7c:d5:0e:c9:42:c7:07:9e:3c:f8:4c:d4:58:9b:22:6a:
53:07:c9:c8:5b:1a:80:bf:1a:15:91:6c:fb:0a:be:31:f0:00:
e7:9e:05:0a:2a:5b:32:15:e2:53:7b:4a:c7:6b:53:d7:cd:5e:
03:02:79:1f:e0:63:aa:2b:34:73:8c:17:02:68:89:75:84:25:
c6:72:a9:c4:1a:36:fa:1e:e5:d7:4d:17:82:3e:f4:60:49:67:
7b:89:c5:9d:c7:2e:fc:80:59:e2:9b:21:a1:bb:76:b0:a5:9d:
37:78:e2:c9:06:f0:27:29:7c:42:09:1a:25:45:10:d6:c8:fe:
83:98:41:34:73:c4:e4:2e:c2:83:46:39:4f:f0:ed:b1:20:25:
49:87:ce:00:dd:5d:cc:a3:e8:62:ee:73:26:a7:41:df:0d:26:
10:75:de:94:d3:08:cc:62:1d:8c:d9:04:23:1a:2d:0d:14:79:
06:46:59:f3:b5:e5:a8:aa:90:86:eb:26:ad:13:c9:10:fb:18:
86:a8:44:f4:da:25:be:eb:6d:51:57:a7:97:2b:84:ac:b6:eb:
01:3e:e1:97:c9:89:09:e7:d9:46:c8:92:52:b4:83:8d:94:59:
1d:0d:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:53:18 2026 by rpki-client