
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
File: A24C1132558A11F1ABEF45E790833773.roa (raw, json)
Hash identifier: iMPXIo/WgXl9RrouR5+L70slM0LFwoHq21lTCbcQcD4=
Subject key identifier: BC:40:01:F8:A1:04:37:52:7C:C3:84:B6:33:4A:02:B9:C1:B9:6D:74
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: BE
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
Signing time: Tue 16 Jun 2026 04:29:56 +0000
ROA not before: Tue 16 Jun 2026 04:29:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 395886
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.2.184.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.3.88.0/21 maxlen: 24
177.5.48.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Jun 16 04:29:56 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a30d144-5be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:e3:d5:15:26:c7:5e:07:bd:bb:7d:f6:bc:
10:e3:78:34:43:36:d7:79:4d:35:bb:0e:a3:c0:4b:
e6:98:85:45:e0:ce:ea:f3:48:a5:26:85:05:b3:e7:
ba:00:2b:cc:e2:62:54:3c:eb:73:d9:1c:68:3f:f3:
59:17:1c:84:a5:97:f8:e4:09:66:13:d6:0a:5a:e7:
f3:6c:f3:97:66:94:58:07:d1:5f:ab:4f:f7:68:de:
7f:e3:cc:6d:e2:ea:c5:5e:27:65:b4:e9:16:5b:86:
30:0d:1f:52:ee:e8:e7:61:5d:67:bf:37:69:42:15:
87:f2:80:e8:da:5c:bf:d0:85:0c:be:16:6b:8c:72:
df:17:40:18:cd:cb:ef:ed:f5:08:28:b3:b9:a4:96:
1a:b1:a4:2f:b4:95:97:e8:18:e8:4c:0c:13:46:e1:
ce:76:53:cf:8d:89:9b:bc:29:d2:25:04:88:08:ad:
36:11:35:c1:28:7a:5c:d7:3b:b9:0c:d1:56:7b:25:
ec:3b:a2:ef:aa:a5:97:85:37:a6:03:88:0a:52:07:
a7:2b:99:c9:dc:2d:e0:1b:77:0a:55:99:de:e0:91:
23:c3:eb:de:52:7b:b6:6b:82:56:3a:50:5c:fb:ed:
c2:b0:ff:a1:19:4d:de:69:3d:13:96:00:4b:da:55:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:01:F8:A1:04:37:52:7C:C3:84:B6:33:4A:02:B9:C1:B9:6D:74
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A24C1132558A11F1ABEF45E790833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.5.48.0/20
177.7.128.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:2d:db:dc:7e:2d:e3:18:10:63:9a:aa:a4:25:b3:d1:60:28:
7b:d9:3e:eb:78:5f:82:99:d0:00:a3:a8:68:f9:c6:d1:eb:3c:
eb:1b:49:ac:0d:db:6d:59:7d:5c:01:8a:dd:95:ea:39:d4:cc:
f0:d8:a8:81:18:ba:d3:d9:c5:0d:51:66:44:71:b3:39:ac:52:
22:f0:ba:10:18:4c:1c:0e:7a:2a:02:ca:b3:e8:e6:e1:24:0e:
e1:cc:6d:92:48:68:b0:50:57:78:16:44:f8:e0:e6:61:be:07:
09:c8:f2:0d:85:6b:5a:37:26:3d:af:1b:99:bc:fb:df:d4:61:
4a:07:42:4c:a5:41:c0:24:05:a2:f2:5e:9e:e3:db:16:c5:d8:
af:02:c6:12:fe:4e:f2:71:43:34:af:c1:51:d1:d4:c7:da:f1:
5b:27:cd:30:3c:94:b3:8b:0c:d7:f1:6b:55:a9:fd:c6:70:d3:
7e:76:1e:a1:93:ec:bf:95:53:30:74:75:92:3d:55:26:7b:9f:
f8:68:97:4c:68:a6:bf:c9:dc:e4:0e:03:6d:18:c5:ed:b1:c1:
c9:95:da:03:ea:a7:2b:de:ac:58:69:e6:8e:00:02:b6:a9:e6:
5c:4b:bf:77:46:66:30:fa:5a:34:ba:4f:bc:86:63:76:8d:ac:
29:cc:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 20:00:32 2026 by rpki-client