
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
File: B872988654D711F1992D5F9296833773.roa (raw, json)
Hash identifier: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=
Subject key identifier: 16:60:68:C1:23:27:6F:50:36:41:74:20:76:AD:D0:69:93:76:37:D7
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 20
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
Signing time: Thu 21 May 2026 05:41:32 +0000
ROA not before: Thu 21 May 2026 05:41:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140042
IP address blocks: 177.0.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: May 21 05:41:32 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a0e9b0b-8d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:9e:f7:4a:f1:0d:61:a1:77:e4:5b:cc:65:
d5:92:88:d2:6e:27:27:cf:bd:b0:d4:81:3b:e4:f7:
08:e8:47:f6:df:47:f7:81:b8:21:03:39:4f:4e:6d:
07:6b:aa:46:fb:5a:e1:04:87:9d:97:bd:e2:8e:6f:
e8:96:67:82:f2:81:77:ce:31:d2:0b:c3:ca:87:7c:
8b:01:d9:34:4d:c0:60:32:70:0c:ae:bf:1f:7f:16:
f6:7f:67:91:65:7e:8d:ac:a5:9f:9f:10:ef:dd:53:
bc:a4:52:46:e7:ee:bc:ca:c5:b5:d0:f2:76:da:aa:
53:20:74:b2:fd:53:cb:20:47:22:f5:64:3d:89:a6:
76:2a:1e:53:c5:e7:7e:26:1d:cd:53:7c:de:ba:35:
00:9c:46:26:59:ee:a6:6f:08:62:e3:24:72:63:a4:
e9:61:69:7f:22:be:15:17:49:4f:87:67:d8:0b:d0:
28:92:15:88:c9:cc:d4:bc:db:5a:50:c3:36:1a:8b:
39:65:4c:af:74:91:c6:1f:89:af:6c:aa:0e:94:c6:
69:e0:a3:5b:a2:ff:28:6f:c7:a0:8d:38:cf:7f:dd:
94:19:27:26:5b:7a:c2:df:90:17:99:3c:11:45:e6:
8d:e4:43:9e:fb:32:2e:7b:cf:22:03:b2:63:f7:81:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:68:C1:23:27:6F:50:36:41:74:20:76:AD:D0:69:93:76:37:D7
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.0.132.0/23
Signature Algorithm: sha256WithRSAEncryption
63:ae:0b:1a:c8:45:1f:48:28:a3:1d:8d:ed:36:ed:01:ed:20:
45:5e:24:63:05:b9:8c:b4:f6:4c:65:06:3f:9b:0a:64:49:b5:
db:4b:76:3f:69:5d:28:b8:0e:32:6f:87:7e:20:31:4b:27:3c:
01:58:86:0e:7a:7d:05:e3:95:8c:a8:7f:f6:f9:e0:43:48:82:
4e:5f:9d:4a:b9:24:84:4d:9b:60:c2:e3:26:56:1e:7d:1a:f4:
44:74:65:38:06:82:ab:21:8a:99:50:ca:33:ca:45:1b:5f:06:
05:ce:c5:20:b1:86:1a:e3:8e:f6:00:0b:55:a6:33:fe:d3:a8:
ff:e9:7a:d5:e4:9a:c3:ce:2b:f2:b4:b5:8d:96:75:c1:06:e4:
1a:ce:f0:7a:bf:3c:05:99:5d:d7:9e:4f:01:f0:70:91:58:5c:
aa:96:05:a0:0a:ab:c7:16:66:70:46:a8:94:95:ce:12:f2:18:
3a:70:6f:9d:ab:61:0e:74:ef:89:32:3c:4e:76:06:0b:a6:92:
82:6b:49:8d:88:50:56:38:4e:81:fd:65:f2:3c:ce:5e:03:cf:
29:cd:32:ef:7a:6a:61:bc:5b:66:4e:c4:1a:1b:35:56:ed:47:
0d:90:3c:5d:30:bf:74:57:e0:6a:f7:75:bf:4c:0c:8a:bf:e8:
0c:6b:c6:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 12:52:57 2026 by rpki-client