
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
File: 86ED876641FA11F1981D4479BF833773.roa (raw, json)
Hash identifier: wpEZ66kuoyr7SVEgrWcX1562rxR0piPy4GQLCmkL6TA=
Subject key identifier: 5A:EB:C3:F0:DF:D6:AD:40:59:90:2B:7A:CB:CB:E1:C5:49:2D:7A:5A
Certificate issuer: /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial: 36
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
Signing time: Mon 22 Jun 2026 11:37:49 +0000
ROA not before: Mon 22 Jun 2026 11:37:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9498
IP address blocks: 177.4.96.0/20 maxlen: 24
177.6.32.0/20 maxlen: 24
177.177.32.0/20 maxlen: 24
177.177.112.0/20 maxlen: 24
177.203.80.0/20 maxlen: 24
177.203.160.0/20 maxlen: 24
186.242.160.0/19 maxlen: 24
186.244.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Validity
Not Before: Jun 22 11:37:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a391e8d-0fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:b2:1c:66:e1:e5:11:af:ae:98:75:29:f7:
92:47:be:71:76:b2:a2:1d:1b:d1:ec:62:67:71:58:
d5:3a:36:b1:37:ac:d1:69:85:9e:d5:14:28:55:c2:
c2:4e:ad:94:d9:9e:22:1f:71:68:8b:3f:07:76:49:
b0:c0:14:d3:ce:28:cd:c6:f2:65:33:2f:05:24:4f:
f3:d5:7d:c9:6e:c0:fa:6c:51:a8:ae:a4:c5:09:e2:
dc:11:aa:fe:77:ce:8c:1f:12:bf:36:0c:36:19:59:
9c:16:8a:46:23:ed:34:f4:10:72:70:66:7f:d9:fd:
31:3d:b1:f6:e1:74:fa:37:44:c6:77:4b:7c:84:07:
75:db:88:1e:14:28:01:88:2a:32:35:97:73:fa:c8:
98:1e:5d:bb:70:9e:2d:2b:f3:6c:fc:02:09:1b:e2:
cd:4d:38:65:be:d3:9f:8d:b1:31:46:c4:bf:cc:19:
9a:68:ae:0b:58:1f:7c:8e:86:79:6b:f2:86:d4:1d:
f1:e7:18:53:65:65:ad:72:d3:4b:e1:45:08:94:cb:
85:4a:44:0e:18:02:a4:d4:1f:33:bc:0d:fe:00:e1:
c1:7a:52:e3:e2:ed:22:ff:3a:93:68:e4:09:42:91:
38:31:9c:84:23:93:04:dc:68:1a:92:fa:c5:03:50:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:C3:F0:DF:D6:AD:40:59:90:2B:7A:CB:CB:E1:C5:49:2D:7A:5A
X509v3 Authority Key Identifier:
keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.4.96.0/20
177.6.32.0/20
177.177.32.0/20
177.177.112.0/20
177.203.80.0/20
177.203.160.0/20
186.242.160.0/19
186.244.160.0/19
Signature Algorithm: sha256WithRSAEncryption
01:e3:7c:f3:90:a1:16:c3:e1:78:fd:f6:dd:06:d7:52:0e:59:
2f:3b:28:15:6a:a5:d3:eb:d9:51:25:83:e7:e7:26:27:5a:7d:
6a:d6:7b:c1:2d:5b:64:a0:4d:a4:00:a0:77:ed:69:87:b9:01:
41:2d:5b:43:36:7f:7d:43:72:6a:73:a4:97:5d:7d:e6:b7:9a:
3d:92:df:8b:0e:e9:66:e0:ba:35:df:9b:84:f9:2e:5c:93:08:
d4:d8:41:cd:80:41:ed:92:79:9b:48:4e:07:af:73:4d:95:3d:
3d:bf:e6:d3:98:ec:23:a2:c8:7e:1c:b5:fa:4d:0c:38:76:8e:
42:d6:86:c5:1b:95:be:68:2f:80:3f:f6:5a:66:3a:a7:93:a4:
f1:d2:50:26:5a:6b:15:1a:e8:0e:7b:ad:32:66:9f:d6:bb:13:
de:ac:d9:4a:94:63:2e:42:72:f6:ef:b4:49:f7:53:5e:6f:a9:
56:89:0c:d6:f3:0d:d9:ac:18:8c:f6:6f:8f:e5:d4:02:cd:39:
f2:77:52:29:37:35:16:b1:f2:cf:82:8f:30:85:df:51:7a:29:
ec:2a:6d:84:0f:52:40:01:d9:9b:d0:78:1d:53:6c:32:e5:11:
7f:d8:b5:3f:65:44:2e:2a:08:00:71:d6:bf:71:6c:9d:33:88:
ac:61:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:21 2026 by rpki-client