
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
File: 2FB32D18656611F1BCA7175E9E47A888.roa (raw, json)
Hash identifier: khr1muT8Sl3LtUdR7jUBmmwhTuzQABOuoyvVgE3pJEg=
Subject key identifier: 42:0E:85:AE:EB:21:0D:9A:A9:0D:BF:5D:0D:A3:64:9C:E7:9B:03:93
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 09AA
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
Signing time: Sat 10 Oct 2026 22:44:21 +0000
ROA not before: Sat 10 Oct 2026 22:44:21 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2401:2c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 10 22:44:21 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acabfc5-310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:17:21:f0:01:44:4c:61:41:61:d1:b6:3d:
99:be:ec:a6:ce:8e:b9:53:9f:60:00:fb:a7:4d:a1:
07:12:d7:c6:0b:0a:0b:b3:fb:d5:5f:f6:c7:b0:bf:
74:f1:c4:60:b3:f2:7d:e1:92:80:79:09:e6:52:9f:
e7:f2:08:88:58:cb:7c:7c:32:1e:fd:17:1d:dc:a2:
9e:cf:29:dc:7d:d7:e6:5a:f4:ac:0d:a3:27:3b:cd:
e2:c7:c5:b6:15:2e:9c:ae:95:f3:fe:a3:08:25:a8:
5f:41:58:79:3f:9e:3a:95:87:d1:d6:51:aa:92:f8:
b1:b9:01:af:e6:91:c6:e3:a1:bc:06:24:6d:ec:c7:
55:ad:5e:bd:8c:ff:9f:91:a8:e4:9a:78:f0:37:7b:
76:3b:2f:a2:e5:26:a0:0b:a4:bd:70:df:36:bc:ea:
9b:9c:50:fe:91:e2:71:d3:69:28:f7:ff:b6:f9:1a:
09:5c:b8:b5:d5:a9:2d:d6:28:50:cd:47:aa:50:f7:
ab:5a:05:a4:2f:07:2c:7f:be:86:91:2d:63:2c:0d:
8a:ff:1e:f0:84:06:81:27:34:b6:b9:cc:5f:8a:3e:
51:46:6a:cd:34:12:17:4c:e2:dd:a3:6c:37:b1:78:
df:97:18:07:07:ee:25:cd:6f:dd:2c:b3:91:9b:2e:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:85:AE:EB:21:0D:9A:A9:0D:BF:5D:0D:A3:64:9C:E7:9B:03:93
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2FB32D18656611F1BCA7175E9E47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:2c80::/32
Signature Algorithm: sha256WithRSAEncryption
67:5b:07:2a:2c:b2:f7:80:e1:20:4a:88:4b:86:9b:c2:36:cb:
9a:98:a7:a9:5f:7c:9b:6b:8a:fc:52:d6:93:27:90:32:29:e8:
fd:03:ca:57:ab:44:30:b3:5b:44:b1:e1:3d:73:df:6b:e1:d3:
02:f0:c2:1f:77:da:1e:cd:ee:40:49:97:51:ed:3c:66:26:31:
dc:18:85:80:36:1f:32:89:b4:a9:91:b4:a2:a9:62:44:cf:4b:
36:dd:c3:c5:ac:57:1f:53:a5:19:37:2a:be:4d:fa:af:8f:9f:
f6:5b:76:fa:c6:7c:ea:f9:71:51:d8:f5:15:4c:1f:79:76:1e:
6a:75:fd:49:3d:0d:3c:56:b6:aa:82:4c:d4:81:5b:fe:83:0e:
6d:2b:b2:46:96:b2:7c:64:35:2b:65:43:46:83:bf:11:40:21:
c4:6f:bc:c1:92:07:9f:de:8a:43:61:81:d4:e3:22:0c:bd:d6:
68:bb:33:2f:99:de:d4:9e:e8:4d:37:fd:11:46:c0:fc:28:72:
94:e0:71:68:15:28:cf:06:0f:5a:81:65:a7:28:40:31:0c:4f:
9d:93:d4:ed:c5:06:77:23:38:65:5a:5a:f9:e8:93:a3:ee:75:
80:ab:88:78:98:e0:82:96:66:0c:a6:bf:0f:f3:d8:ed:7a:60:
d4:07:c8:7a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDIxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNhYmZjNS0zMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiCYXIfABRExhQWHRtj2Zvuymzo65U59gAPunTaEHEtfGCwoLs/vVX/bHsL90
8cRgs/J94ZKAeQnmUp/n8giIWMt8fDIe/Rcd3KKezyncfdfmWvSsDaMnO83ix8W2
FS6crpXz/qMIJahfQVh5P546lYfR1lGqkvixuQGv5pHG46G8BiRt7MdVrV69jP+f
kajkmnjwN3t2Oy+i5SagC6S9cN82vOqbnFD+keJx02ko9/+2+RoJXLi11akt1ihQ
zUeqUPerWgWkLwcsf76GkS1jLA2K/x7whAaBJzS2ucxfij5RRmrNNBIXTOLdo2w3
sXjflxgHB+4lzW/dLLORmy7iJwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFEIOha7r
IQ2aqQ2/XQ2jZJznmwOTMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMkZCMzJEMTg2
NTY2MTFGMUJDQTcxNzVFOUU0N0E4ODgucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAEsgDANBgkqhkiG9w0BAQsFAAOCAQEAZ1sHKiyy94DhIEqIS4ab
wjbLmpinqV98m2uK/FLWkyeQMino/QPKV6tEMLNbRLHhPXPfa+HTAvDCH3faHs3u
QEmXUe08ZiYx3BiFgDYfMom0qZG0oqliRM9LNt3DxaxXH1OlGTcqvk36r4+f9lt2
+sZ86vlxUdj1FUwfeXYeanX9ST0NPFa2qoJM1IFb/oMObSuyRpayfGQ1K2VDRoO/
EUAhxG+8wZIHn96KQ2GB1OMiDL3WaLszL5ne1J7oTTf9EUbA/ChylOBxaBUozwYP
WoFlpyhAMQxPnZPU7cUGdyM4ZVpa+eiTo+51gKuIeJjggpZmDKa/D/PY7Xpg1AfI
eg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:27:15 2026 by rpki-client