
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
File: 2F36F25EFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: N2n7O7lYsffKJwnYVJA9z3QDAVAgYmQzuDh7h3gOwG8=
Subject key identifier: BA:BA:13:97:57:29:02:35:94:E6:92:33:B8:51:EE:74:6C:AF:73:B7
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2949
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:38 +0000
ROA not before: Sat 26 Jul 2025 15:53:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138358
IP address blocks: 2402:9e80:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10569 (0x2949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ef2-12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:b9:b8:76:3d:be:09:d3:a2:11:d0:2f:16:
04:74:32:fd:95:be:b1:df:c9:14:37:98:48:74:fc:
12:89:df:bf:b9:7e:2b:b7:de:22:8c:07:c0:58:8e:
ed:09:02:6f:a0:e8:de:fc:73:06:65:70:09:c4:c1:
10:7e:13:30:80:bc:6e:5f:11:98:84:d7:46:ef:c2:
c4:19:97:39:a8:55:17:3a:c4:72:c5:84:a7:b1:87:
39:6d:5d:da:5e:0f:11:fb:c7:33:20:04:9d:39:80:
7f:3c:21:05:f9:3d:81:5c:ec:d4:e6:71:5a:0b:bf:
58:6e:3e:3e:7f:29:6b:97:30:b1:be:e5:4e:fe:29:
00:18:c5:de:11:9c:03:94:22:29:14:21:4b:cb:3d:
1d:64:fb:d4:59:42:a3:7b:c4:48:00:36:68:f9:d2:
ad:1f:35:80:40:44:87:1b:f7:7e:60:fd:80:53:31:
f5:47:ae:ce:9d:d7:c7:c4:d3:a1:3f:ba:94:17:a4:
cc:6a:43:b9:62:f6:9c:cb:cc:ce:a9:8b:e8:2f:a3:
4b:15:95:bd:0a:36:6f:b3:63:08:57:62:f4:da:b3:
7f:b1:46:c4:fa:d3:18:4b:4b:a3:45:3b:58:9d:ef:
e4:3a:b2:ea:50:27:50:a4:24:88:8a:9a:66:5f:bb:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:13:97:57:29:02:35:94:E6:92:33:B8:51:EE:74:6C:AF:73:B7
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:28::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b0:11:5b:c7:83:58:59:ad:3b:46:98:4d:10:77:49:ab:2f:
64:be:6d:4f:d6:d6:10:ee:ca:39:e3:08:46:af:76:0f:d7:e8:
19:18:eb:52:70:3d:92:a1:87:ca:79:bb:e5:02:90:b0:a2:41:
18:c9:6b:62:3c:1c:34:02:5b:8c:09:7f:34:60:98:ba:ed:cc:
31:29:de:e5:69:80:2b:6a:cf:d6:e4:75:9a:17:a6:c4:ee:af:
42:5d:ae:af:4d:c8:fb:30:0a:9f:07:1e:b6:07:42:3c:bd:aa:
19:b9:d0:4d:1f:fb:64:03:9b:99:d2:23:fb:7d:90:1d:42:79:
57:95:bb:61:32:0f:ba:40:a1:7c:5e:cb:e4:d4:d6:95:89:d5:
67:43:cf:28:c9:46:9c:fe:51:a8:7c:c1:0b:a5:0c:45:48:af:
10:67:c1:05:17:36:4c:28:71:bf:e5:1f:07:86:bf:69:74:4e:
1f:47:00:e9:b7:28:42:11:09:93:4f:13:07:b4:e2:70:d8:1d:
41:3a:4a:49:19:a5:26:ad:18:4e:11:2c:b2:55:44:a0:7f:65:
3b:d5:39:ec:d8:a3:32:bd:da:86:6b:8f:ba:84:ad:89:4d:b2:
aa:62:7d:fd:b0:11:f5:74:c2:01:01:6f:d3:41:59:bb:8a:cc:
93:b5:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:43:59 2026 by rpki-client