
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
File: 2F36F25EFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: XkbLBe2JoQh84/sylt8P3WiiOltOSat5zXpdi0M1TAQ=
Subject key identifier: 68:2A:14:C8:7C:0F:78:A0:84:19:6E:CB:F9:6C:7A:59:7B:70:F9:D4
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E3
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:11 +0000
ROA not before: Sun 30 Aug 2026 16:24:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138358
IP address blocks: 2402:9e80:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10723 (0x29e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:11 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94592b-68a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:2c:7e:31:8d:61:e1:1c:29:d2:f6:11:0f:
92:06:b8:b6:5a:1e:88:f0:33:05:5b:65:b3:a2:e1:
59:75:79:44:b0:2f:7d:82:16:64:ca:01:23:b0:db:
b9:2c:2a:8f:4a:b2:f6:19:56:ef:ef:35:b9:88:4d:
4b:41:9c:d8:7c:99:71:a5:60:c9:7f:84:59:d3:f1:
65:ad:5c:b7:f7:24:cb:33:c5:8c:2d:53:68:2b:5d:
af:fe:ce:b5:93:43:be:a6:61:df:79:e0:93:19:cc:
35:60:d3:e7:28:4f:1b:30:2c:78:0f:da:35:28:d4:
62:c8:cc:12:be:70:60:d4:91:31:27:c8:c1:e9:ea:
11:c1:26:a4:a7:6e:da:0d:31:2a:cd:35:07:bf:d5:
dd:74:45:dc:cd:8a:b2:b3:56:3d:95:30:ee:b4:44:
c0:11:65:24:21:8e:5b:da:2a:ce:18:a0:0f:8a:3d:
86:8d:b2:58:2c:44:2d:94:42:df:18:a2:89:9a:c6:
1f:e8:06:2d:e2:57:eb:8d:f4:8f:0e:6d:83:fb:d4:
8f:72:55:55:d4:85:10:ac:af:8e:96:c8:ec:5f:f2:
81:b0:bf:eb:6b:fe:02:1b:8d:44:17:00:2b:5f:30:
45:53:82:97:4b:76:cc:d1:52:35:7a:c1:8d:66:ec:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:14:C8:7C:0F:78:A0:84:19:6E:CB:F9:6C:7A:59:7B:70:F9:D4
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:28::/48
Signature Algorithm: sha256WithRSAEncryption
d2:80:a8:73:02:e1:2d:35:34:6d:84:f7:3d:d4:9f:cb:20:11:
20:a9:d7:42:43:a3:5f:d6:c2:82:cf:15:1a:56:e4:94:41:84:
10:f5:34:f5:d6:44:19:cf:cc:eb:6f:d1:77:ee:e1:79:87:f8:
1c:85:d1:93:eb:31:9f:78:17:cc:ba:36:75:07:d8:d6:23:4c:
9b:ce:17:56:57:02:36:7b:f1:66:96:4b:c0:d7:5b:71:44:7b:
9c:7a:ce:04:3c:59:ee:e9:8d:c7:69:c8:01:1f:79:ba:c2:c5:
7e:cf:b8:23:c2:5f:5f:03:86:7b:18:d5:96:a6:d7:13:ac:1f:
07:9d:82:64:ed:5d:2f:bc:2b:fc:21:54:6d:c7:77:56:f5:e2:
22:67:2e:5a:7c:cb:59:12:b2:8b:f5:96:63:bf:3a:6d:f4:17:
01:79:6b:42:c2:f9:45:2c:52:2f:0d:51:0b:09:36:f7:a6:23:
41:25:73:ab:ac:f3:74:78:42:7f:46:fe:42:cf:f5:63:78:1d:
84:b5:0a:cc:20:4c:33:79:3b:aa:73:98:75:b8:80:c2:38:b2:
f6:b4:61:92:c4:69:f8:e4:0a:b2:06:ec:c8:b0:e9:4a:8b:9b:
44:ef:71:8d:58:04:cc:39:ad:53:f4:c4:a9:f4:55:ad:8c:a4:
26:62:99:e5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNDExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTkyYi02OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcYsfjGNYeEcKdL2EQ+SBri2Wh6I8DMFW2WzouFZdXlEsC99ghZkygEjsNu5
LCqPSrL2GVbv7zW5iE1LQZzYfJlxpWDJf4RZ0/FlrVy39yTLM8WMLVNoK12v/s61
k0O+pmHfeeCTGcw1YNPnKE8bMCx4D9o1KNRiyMwSvnBg1JExJ8jB6eoRwSakp27a
DTEqzTUHv9XddEXczYqys1Y9lTDutETAEWUkIY5b2irOGKAPij2GjbJYLEQtlELf
GKKJmsYf6AYt4lfrjfSPDm2D+9SPclVV1IUQrK+OlsjsX/KBsL/ra/4CG41EFwAr
XzBFU4KXS3bM0VI1esGNZuxwSQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFGgqFMh8
D3ighBluy/lsell7cPnUMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkYzNkYyNUVG
RUM5MTFFODhFNzg5OTNBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAKegAAoMA0GCSqGSIb3DQEBCwUAA4IBAQDSgKhzAuEtNTRthPc9
1J/LIBEgqddCQ6Nf1sKCzxUaVuSUQYQQ9TT11kQZz8zrb9F37uF5h/gchdGT6zGf
eBfMujZ1B9jWI0ybzhdWVwI2e/FmlkvA11txRHuces4EPFnu6Y3HacgBH3m6wsV+
z7gjwl9fA4Z7GNWWptcTrB8HnYJk7V0vvCv8IVRtx3dW9eIiZy5afMtZErKL9ZZj
vzpt9BcBeWtCwvlFLFIvDVELCTb3piNBJXOrrPN0eEJ/Rv5Cz/VjeB2EtQrMIEwz
eTuqc5h1uIDCOLL2tGGSxGn45AqyBuzIsOlKi5tE73GNWATMOa1T9MSp9FWtjKQm
Ypnl
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:57 2026 by rpki-client