
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa
File: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (raw, json)
Hash identifier: w14t0ZgvkmqPBwmiw//aiLUsh21WVJ/1hlAo42T5Txs=
Subject key identifier: B4:37:F2:C1:3A:34:6A:45:9F:17:80:CE:B7:F7:6B:59:FA:21:54:9C
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D1F
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa
Signing time: Fri 14 Aug 2026 19:38:40 +0000
ROA not before: Fri 14 Aug 2026 19:38:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 32787
IP address blocks: 183.177.40.0/24 maxlen: 24
183.177.41.0/24 maxlen: 24
183.177.42.0/24 maxlen: 24
183.177.43.0/24 maxlen: 24
183.177.44.0/24 maxlen: 24
183.177.45.0/24 maxlen: 24
183.177.46.0/24 maxlen: 24
183.177.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3359 (0xd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Aug 14 19:38:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f6ec0-d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:48:53:e3:ad:42:61:2e:1c:c8:3f:e8:b1:
69:69:e1:64:f6:6f:db:62:c5:b0:5b:b2:8e:95:36:
b9:fa:5b:dd:95:53:1b:ff:2f:0c:08:65:c1:92:e1:
d1:99:ef:af:dd:d7:9a:3c:35:a2:57:b3:14:94:6c:
3d:a5:a4:20:ac:96:ec:f1:02:87:25:96:cb:20:00:
73:97:8a:9d:87:c4:54:e4:e6:e0:d2:72:60:3f:84:
6c:a4:04:90:37:91:50:e2:33:fc:35:5c:87:e2:07:
6c:11:d2:79:9f:a1:e2:40:e8:c9:07:bb:dd:0e:e3:
32:06:a5:b7:08:28:11:a3:f2:62:04:e9:4d:3e:ba:
ac:30:4d:ce:57:ab:39:38:af:9d:05:ad:ec:4c:b8:
0e:90:19:b7:56:44:4d:d8:db:58:2f:d6:e7:aa:c3:
2c:f3:11:f2:04:93:41:45:1c:81:5d:32:3e:2a:b0:
c6:4b:ee:95:84:33:56:03:87:4e:c7:86:40:27:d4:
6f:0d:a1:c7:0b:02:ec:15:15:de:30:f2:0d:a6:8f:
f7:3e:76:ba:68:f7:4a:88:1b:f2:bd:37:61:b7:52:
29:aa:9a:15:8f:5a:41:75:66:ae:cd:e1:52:85:a3:
aa:8b:df:22:2c:e0:31:e5:0d:c4:a1:3c:ff:da:cf:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:37:F2:C1:3A:34:6A:45:9F:17:80:CE:B7:F7:6B:59:FA:21:54:9C
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
183.177.40.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:c9:a4:28:71:54:e4:47:35:38:72:bd:61:d3:13:be:70:2b:
da:d8:d5:45:06:0e:90:f2:73:a0:86:30:4b:2d:0e:3d:c2:fd:
3a:67:e7:e4:73:8e:fd:ed:9e:db:b1:56:16:d5:61:a6:96:9a:
7d:56:0b:f3:2a:71:38:d3:b9:4d:e1:8e:9e:5b:f7:bc:63:85:
21:a0:5d:92:45:4e:14:1b:e8:7d:ae:4b:91:91:08:93:e4:fd:
6e:a4:19:84:c2:79:56:7e:0b:05:61:88:2d:58:42:f5:41:cb:
c0:f1:f3:a3:55:3b:83:48:fd:b6:5d:f8:9f:28:47:de:08:1f:
45:71:b0:5e:06:61:f4:ee:ba:6e:0b:27:8e:ec:16:d2:5e:40:
ad:e7:44:98:ad:34:f8:01:4c:e1:ac:ba:a0:33:e1:57:0d:da:
3b:93:1a:d0:09:e9:5f:e4:b5:75:e9:8e:fc:e9:7f:c7:ff:ae:
e4:c8:28:af:7a:06:2c:c9:05:c1:88:0a:26:7b:77:5e:bc:7b:
3d:b0:37:5f:9e:bb:d4:46:7c:d7:20:18:8b:30:4a:a3:c6:c7:
8f:f2:ae:b9:0c:7a:d8:47:a2:bb:ad:e9:dc:52:87:91:9a:bd:
f9:ca:68:79:c7:a9:ad:68:3e:03:77:ce:5e:e1:95:32:4e:14:
7f:d9:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:36 2026 by rpki-client