
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
File: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: 3Ej+mXqaY/2M6F5CX5yhdpGXz2I25XpC2KRcFavwka4=
Subject key identifier: AF:F4:59:9E:CB:1C:66:BE:A1:5C:5A:E4:E3:FA:B2:A7:16:A7:7B:C3
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E2
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:08 +0000
ROA not before: Sun 30 Aug 2026 16:24:08 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138333
IP address blocks: 2402:9e80:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10722 (0x29e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:08 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945928-21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:2b:01:d4:f9:6c:19:ed:17:de:3c:e0:ad:
a8:b2:6b:e5:6a:5f:90:1b:aa:46:e7:c5:12:17:70:
50:b0:50:29:50:91:87:7f:64:77:48:42:72:41:b9:
4e:75:09:b5:7f:7f:cf:af:32:60:44:73:f6:fd:0c:
91:eb:df:90:8f:64:59:91:4f:58:ad:b2:34:c8:4b:
b4:98:84:08:11:53:81:f2:4b:fe:f2:15:65:bd:c9:
60:bb:79:bb:6c:e8:e4:89:fc:ef:f1:c6:bb:27:0c:
d1:ed:e1:a7:fc:70:36:57:71:2a:1f:2a:a5:66:2e:
1c:cf:60:25:64:05:63:db:d1:4d:92:1e:f3:2e:28:
01:b5:aa:7b:8e:38:83:2b:2c:36:98:1f:52:65:bd:
fa:7e:35:25:36:38:ae:8c:e5:56:ef:3d:e1:0e:ad:
0d:44:c5:ba:d9:24:40:ac:5b:2b:c6:76:2d:bc:ee:
d1:a5:5a:97:2b:06:45:3f:ff:59:5e:c8:d0:87:2e:
c9:ca:b2:2f:c1:6d:48:3d:a1:a7:66:fa:1d:57:fd:
c9:e9:08:24:fa:8c:c0:db:7b:cc:8f:4f:91:d7:da:
28:ec:22:fa:bb:94:3a:b9:87:b9:c9:8f:1b:ab:e5:
01:a4:77:3f:8a:44:9a:42:1a:46:9a:b5:dc:0b:47:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:59:9E:CB:1C:66:BE:A1:5C:5A:E4:E3:FA:B2:A7:16:A7:7B:C3
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:30::/44
Signature Algorithm: sha256WithRSAEncryption
46:b7:54:08:d2:2c:38:e7:39:c4:62:83:84:f3:1e:3b:5a:74:
2f:d1:ae:43:b0:50:14:07:7e:ca:da:dc:4f:6d:d7:f8:d4:10:
be:9e:ef:a5:7d:a5:38:39:1f:f1:7d:a1:e4:83:05:50:e1:a4:
ef:e4:75:1c:95:61:b7:14:b4:22:b4:17:da:3d:39:61:74:3c:
2f:9d:bd:c2:7a:8b:ba:21:22:47:d9:a3:95:1a:3f:9b:7d:92:
e9:eb:ab:d3:53:4b:a4:40:08:d7:dd:ea:46:35:dd:2a:1d:b0:
5a:65:16:48:32:b4:65:e8:4f:72:f9:53:79:d6:5c:de:07:da:
a3:26:a5:6c:d1:db:68:c4:36:86:b8:3a:23:65:a8:c7:03:6f:
c9:51:7b:c5:07:cf:a3:f7:76:a6:f6:69:6b:e5:ca:78:75:49:
dd:8c:f2:e7:12:d5:30:16:8c:2a:33:f7:02:a4:cb:84:29:17:
5f:14:ea:61:48:db:8b:46:f3:3f:a3:9e:01:9a:1f:89:d2:f4:
3d:ff:53:32:8b:0d:a3:c0:cd:14:a7:8c:dd:4a:39:aa:1d:81:
9f:7a:7f:70:6c:db:74:26:17:8c:a0:35:be:40:ef:df:fa:f9:
9f:6c:d8:c1:72:8b:7a:73:75:1a:95:50:c4:c1:c6:15:57:17:
d0:02:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:24 2026 by rpki-client