
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa
File: 0136F4540FE611EC8DD2020EC4F9AE02.roa (raw, json)
Hash identifier: dr9X+h/g1r0MU6qVa3rtYyuT3z7zjaxJmJjelvf5Q0I=
Subject key identifier: 6D:58:18:B9:8D:A6:02:A6:7C:34:4C:B7:42:BC:2C:6D:B4:96:49:93
Certificate issuer: /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
Certificate serial: 0896
Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa
Signing time: Thu 02 Jul 2026 21:22:01 +0000
ROA not before: Thu 02 Jul 2026 21:22:00 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 38298
IP address blocks: 202.144.176.0/21 maxlen: 21
202.144.176.0/24 maxlen: 24
202.144.177.0/24 maxlen: 24
202.144.178.0/24 maxlen: 24
202.144.179.0/24 maxlen: 24
202.144.180.0/24 maxlen: 24
202.144.181.0/24 maxlen: 24
202.144.182.0/24 maxlen: 24
202.144.183.0/24 maxlen: 24
2407:6c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl
rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CE77, serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9
Validity
Not Before: Jul 2 21:22:00 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a46d678-b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:60:78:75:c3:6f:be:90:db:17:9d:f3:90:
32:d8:5b:b2:b1:55:1b:dc:33:92:cf:bd:7e:4a:6c:
cb:82:0d:f2:54:54:a8:f2:ae:d3:eb:95:a8:ae:b6:
4c:e0:79:54:86:51:e0:8e:84:14:a5:f8:0a:a6:b2:
6c:42:c8:16:ee:ca:cb:66:67:91:a3:50:74:6d:23:
c0:68:02:f5:44:f2:97:ec:57:6b:e7:1b:17:e1:33:
f1:54:86:a8:b8:d7:79:77:18:a5:0d:0d:bf:a0:7d:
da:26:2d:55:c6:19:04:1b:3e:43:7f:06:e3:d8:ce:
ef:a8:3b:45:4c:27:79:bc:e9:d8:6f:49:05:5f:49:
fd:cf:9f:7a:38:02:4a:6b:b2:29:0e:d5:6f:5b:7f:
66:d9:48:0e:b2:e6:d2:bd:a0:fa:60:82:2d:4b:e6:
2f:af:94:a6:4e:65:f5:ef:a4:b0:c0:e8:3b:28:89:
89:06:bb:13:b7:ff:07:78:10:a5:2d:c1:89:7a:64:
02:ca:01:ab:8e:95:e3:cf:fa:c7:de:3d:66:0c:f3:
6e:31:67:6d:ab:17:b7:10:46:40:38:a7:77:9b:10:
d9:af:0a:77:74:da:34:ad:5d:20:a8:f8:33:32:63:
5b:72:c4:ef:0e:98:29:d0:69:f0:91:83:3d:69:d3:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:18:B9:8D:A6:02:A6:7C:34:4C:B7:42:BC:2C:6D:B4:96:49:93
X509v3 Authority Key Identifier:
keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.144.176.0/21
IPv6:
2407:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
98:2d:93:ad:b4:18:cc:15:02:43:70:cb:41:39:5c:90:59:dc:
b0:49:b9:2a:18:73:39:9a:af:bb:b6:32:0d:64:90:fb:8b:97:
6c:11:c0:dc:43:07:b0:35:19:e4:e7:10:e7:b4:00:de:61:17:
0b:f6:4f:0c:4f:2a:65:22:75:0b:bd:46:e7:3c:29:e1:30:f5:
2e:47:d0:7a:27:b5:e4:39:8d:48:3d:0b:48:0f:0c:f2:e5:48:
46:b0:48:11:d3:0e:7d:51:45:fd:81:73:e9:8c:ac:c9:f1:c3:
d6:5d:3b:dc:c3:42:4d:73:b6:83:ef:70:72:58:73:9d:43:fa:
56:c6:3d:95:41:b0:9d:45:fb:67:cd:b0:45:fe:90:35:d3:fc:
bb:27:ef:2d:13:80:ab:b3:62:ce:65:7f:99:e2:68:32:79:cc:
bf:58:8d:dc:d5:61:6e:62:9f:f5:55:50:9e:ce:d2:eb:bd:cd:
9f:6b:2a:d0:ba:89:c8:b8:99:04:2d:5f:f7:d1:6b:61:3c:ea:
be:39:c0:68:00:55:6c:26:48:a7:3b:18:ed:8d:b9:34:68:ab:
7b:39:93:5b:cc:b6:ef:37:d0:13:e4:25:e8:3b:c1:06:da:c8:
65:cf:9d:26:c0:7e:25:d5:8a:bc:74:8b:eb:9e:4d:a1:2e:cf:
f4:36:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:46 2026 by rpki-client