
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
File: B872988654D711F1992D5F9296833773.roa (raw, json)
Hash identifier: 1dQZ3Uh0Vs/l+sJ0i7cz4cY/N1Qr7eVkCq5ahm6LLg8=
Subject key identifier: FF:F3:F3:09:A4:B1:5F:65:CA:49:F1:95:AF:F5:BD:0F:89:FC:05:AF
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01B4
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
Signing time: Tue 13 Oct 2026 03:52:00 +0000
ROA not before: Tue 13 Oct 2026 03:52:00 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 140042
IP address blocks: 177.0.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Oct 13 03:52:00 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acdaae0-57fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:6e:b7:8e:e8:f8:cf:0a:c5:ba:b2:d5:0f:
5b:f4:32:23:d3:e1:20:53:cf:60:c1:d8:99:f7:68:
02:0a:fb:cf:fd:97:d2:ce:df:aa:4c:20:18:15:f4:
46:6d:37:00:ba:5d:54:5c:38:ab:4c:b3:12:aa:59:
4e:3f:b2:05:2c:50:07:70:5a:1b:4a:bd:8f:e3:ad:
98:e3:84:2f:13:be:c4:64:03:c3:87:68:67:e5:32:
8c:93:60:a2:03:71:1c:b6:7f:88:4f:7e:5c:4a:d8:
cf:91:09:28:49:58:3f:aa:e7:79:9b:12:7d:2d:a5:
92:95:c5:52:c4:40:42:37:9c:7f:7e:82:7e:30:0e:
3a:ee:8e:34:55:f5:10:36:16:c4:04:52:3a:ca:e3:
df:26:25:57:2f:34:5b:8d:c1:68:86:8e:87:ab:f5:
3b:5d:9a:78:5f:18:81:03:01:88:59:3b:f3:cf:54:
9d:ef:1e:f0:02:a2:c6:0a:cc:2f:b1:c9:73:b2:b1:
1b:ca:37:6d:4e:f4:cd:ad:72:67:01:91:96:3c:d3:
37:74:09:12:0e:80:70:a6:32:53:c6:e9:cc:9f:2c:
3a:74:47:cb:b6:4a:5c:ad:ae:57:67:b5:94:38:1a:
6e:93:ed:11:14:64:2a:00:be:32:7e:2a:ad:93:b9:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:F3:09:A4:B1:5F:65:CA:49:F1:95:AF:F5:BD:0F:89:FC:05:AF
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.0.132.0/23
Signature Algorithm: sha256WithRSAEncryption
39:35:bd:a7:2d:da:e0:e5:c3:1c:ab:a6:85:2e:57:f7:a6:12:
f0:67:75:cb:f6:f7:ce:1e:dd:52:7c:19:d9:98:0b:8c:a8:e4:
16:94:ea:49:6e:f9:2a:1f:30:69:e2:99:42:5c:4a:75:31:8d:
a0:5d:d4:46:12:d8:0c:c9:55:40:71:21:dc:7f:59:22:b5:fb:
05:d2:86:3f:5b:36:01:9c:d2:33:9f:2d:8d:31:c8:8f:71:d3:
35:d7:eb:21:1a:df:6f:b2:22:17:a3:53:9f:b4:44:48:a7:49:
d3:0e:b5:3b:3f:00:0b:07:b1:17:c0:69:69:5b:b1:5a:6a:d9:
6d:9b:18:53:d0:46:3b:71:33:e9:09:13:f6:91:16:9e:a3:cd:
77:f8:fb:ec:2d:95:7c:32:6c:23:dc:7d:79:bf:1f:27:4b:d9:
47:c9:a3:e8:fb:6b:4c:7f:44:65:bc:1f:d9:7d:4a:7a:b8:3a:
a0:dc:8e:07:c1:60:71:2f:08:a8:a7:5e:0c:7b:34:bc:f5:a3:
36:69:b2:7b:db:a8:bc:b6:69:4d:ea:98:85:37:32:f0:c0:0d:
f5:be:c2:33:61:68:eb:df:99:6c:4d:0c:b2:da:d7:83:ac:65:
88:5f:ff:8f:b5:3b:89:5d:10:a9:25:16:00:7b:46:76:28:41:
c8:59:3e:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF
NEVGMzJDNTIwHhcNMjYxMDEzMDM1MjAwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkYWFlMC01N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZ1ut47o+M8Kxbqy1Q9b9DIj0+EgU89gwdiZ92gCCvvP/ZfSzt+qTCAYFfRG
bTcAul1UXDirTLMSqllOP7IFLFAHcFobSr2P462Y44QvE77EZAPDh2hn5TKMk2Ci
A3Ectn+IT35cStjPkQkoSVg/qud5mxJ9LaWSlcVSxEBCN5x/foJ+MA467o40VfUQ
NhbEBFI6yuPfJiVXLzRbjcFoho6Hq/U7XZp4XxiBAwGIWTvzz1Sd7x7wAqLGCswv
sclzsrEbyjdtTvTNrXJnAZGWPNM3dAkSDoBwpjJTxunMnyw6dEfLtkpcra5XZ7WU
OBpuk+0RFGQqAL4yfiqtk7kNxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP/z8wmk
sV9lyknxla/1vQ+J/AWvMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG
MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvQjg3Mjk4ODY1
NEQ3MTFGMTk5MkQ1RjkyOTY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBsQCEMA0GCSqGSIb3DQEBCwUAA4IBAQA5Nb2nLdrg5cMcq6aFLlf3
phLwZ3XL9vfOHt1SfBnZmAuMqOQWlOpJbvkqHzBp4plCXEp1MY2gXdRGEtgMyVVA
cSHcf1kitfsF0oY/WzYBnNIzny2NMciPcdM11+shGt9vsiIXo1OftERIp0nTDrU7
PwALB7EXwGlpW7FaatltmxhT0EY7cTPpCRP2kRaeo813+PvsLZV8Mmwj3H15vx8n
S9lHyaPo+2tMf0RlvB/ZfUp6uDqg3I4HwWBxLwiop14MezS89aM2abJ726i8tmlN
6piFNzLwwA31vsIzYWjr35lsTQyy2teDrGWIX/+PtTuJXRCpJRYAe0Z2KEHIWT4p
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:59 2026 by rpki-client