
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa
File: FFF1E08E502E11F198DE5D87C9833773.roa (raw, json)
Hash identifier: epsRKPeN2DsUj5PvFuEX3GKPxB2TNVkVQCWsUlIKFIE=
Subject key identifier: 48:6F:4E:B6:95:A2:92:64:3A:BE:DD:72:86:B2:A6:1B:08:47:77:39
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 04
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa
Signing time: Fri 15 May 2026 07:23:42 +0000
ROA not before: Fri 15 May 2026 07:23:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154561
IP address blocks: 177.0.128.0/24 maxlen: 24
177.0.129.0/24 maxlen: 24
177.0.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: May 15 07:23:42 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a06c9fe-0efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:f0:cd:82:57:58:72:00:f2:df:2d:01:fb:
51:61:bf:63:69:cf:95:68:b1:34:09:3e:1c:23:ba:
20:44:3f:4d:77:97:92:4e:5f:b1:b4:c4:a3:62:8e:
bb:0f:21:4c:e0:d2:d9:27:87:48:ea:00:a9:86:b2:
e1:19:56:aa:e7:08:f5:69:a4:53:66:5f:6f:9f:13:
93:06:02:13:f1:87:b2:5d:0b:8a:65:77:71:a1:f1:
2c:9b:38:95:82:cd:da:d3:38:04:f3:d2:43:59:fa:
58:f8:c4:ef:86:00:62:66:f5:68:98:0b:ad:05:65:
18:af:1a:07:8f:97:ca:4a:6b:91:d0:83:45:3d:0d:
ab:9d:61:6a:07:29:2f:4e:87:9a:fb:df:e2:23:1f:
7d:05:a8:f6:46:1d:ab:da:b2:e5:72:da:0e:01:b0:
da:6d:ea:e9:06:61:93:f5:d9:ac:08:33:da:fe:bc:
95:62:26:57:a6:47:1d:1b:e0:fb:3b:9c:3c:d1:9e:
37:90:c3:9f:72:7e:27:40:2f:7b:04:e2:c8:5f:dd:
33:3d:4e:18:31:16:d6:a1:aa:d1:5e:1b:8e:0b:41:
a7:70:65:2e:a9:bb:39:d9:b0:6c:50:0a:5f:9c:58:
28:b6:3a:eb:23:a5:d7:84:13:07:b9:52:7a:ec:ab:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:4E:B6:95:A2:92:64:3A:BE:DD:72:86:B2:A6:1B:08:47:77:39
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.0.128.0-177.0.130.255
Signature Algorithm: sha256WithRSAEncryption
51:1e:0a:b7:c3:a3:84:e1:f8:cb:c9:d4:4c:19:05:b7:9a:b0:
db:5b:2d:c4:b9:ca:5f:46:c0:41:e6:c8:0e:13:d1:c6:31:81:
58:25:28:be:d6:3c:ee:b4:3b:a0:f4:dc:a9:49:fd:1a:8c:e9:
7b:4f:4b:c5:12:24:fa:ce:de:05:b6:51:f9:08:82:87:fe:a8:
4c:38:b9:d9:6a:99:c5:33:47:82:02:f5:b2:92:46:ec:1e:b5:
3a:8b:21:c3:13:60:1e:52:0d:d4:e2:d1:f1:2b:5f:29:fe:5f:
34:21:4d:c2:64:b9:52:96:a6:bd:9c:90:08:0e:8f:a2:61:10:
51:b2:a2:38:57:05:55:22:8b:35:d6:6c:68:66:28:d0:81:7b:
77:5e:85:b6:1b:5b:38:3c:69:34:a7:8a:be:41:c7:bf:27:12:
8d:c0:46:9c:73:5c:03:2e:0f:93:e7:c4:ff:0d:fc:d7:86:2b:
54:31:54:1d:37:80:2a:45:0c:fa:02:6c:58:62:9d:60:c5:b2:
29:3e:f7:ef:f6:58:a0:d3:ac:b1:57:1e:4d:6c:56:77:e1:2e:
7f:35:36:85:88:a7:cb:23:80:96:a1:79:6c:40:2c:d9:70:81:
1f:54:ed:c9:57:66:d2:db:46:4d:e4:7f:2b:13:13:0e:d0:ee:
54:77:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:37:06 2026 by rpki-client