
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
File: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (raw, json)
Hash identifier: SAwQN6ifIP2cPppQSUtY0XXCxLxp5svKdCHYpGA7rek=
Subject key identifier: 80:22:D3:B5:2C:D7:6C:05:55:E0:22:F9:B6:E2:FF:81:A0:AB:DB:EC
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E0
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:05 +0000
ROA not before: Sun 30 Aug 2026 16:24:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137219
IP address blocks: 2402:9e80:24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10720 (0x29e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:05 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945924-73d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:fe:de:8e:a0:02:3f:f8:5e:9f:73:32:7d:
4b:af:5a:8b:d9:37:9d:cc:3e:07:0a:ea:5d:26:a4:
31:fa:30:71:c4:a4:f9:77:cb:f5:5a:d0:5c:d1:80:
4d:81:29:23:24:56:78:c3:18:e2:26:51:16:b9:a1:
ea:c4:db:35:78:b3:87:b3:84:e1:6f:f8:3e:39:be:
f8:07:be:bc:d9:e6:18:29:fd:6f:60:f4:31:34:72:
1b:10:f0:d6:09:99:8b:e8:7f:cd:36:46:33:94:34:
38:b7:60:2c:50:3e:2a:d8:5f:fc:b8:76:9f:f3:ac:
88:22:5f:82:67:ce:e8:62:74:29:3b:fc:4d:bf:e7:
47:b9:6c:13:93:de:6c:83:bf:c2:2c:7c:fb:2e:fe:
1a:71:f2:41:23:1a:4c:44:e5:c5:3e:6b:14:db:71:
ea:b1:c1:39:80:88:a2:ab:fa:d5:05:74:87:96:46:
2a:6e:59:1f:b6:f3:ed:b0:36:08:28:71:af:2f:44:
ab:24:62:9c:d0:c2:ce:76:61:7e:12:38:bb:25:d6:
4b:dc:f1:84:1f:ed:ab:0b:10:a0:5c:89:44:ab:6b:
fd:5c:41:7b:24:b6:12:c9:09:c9:69:ac:4e:de:15:
df:67:5b:31:79:69:4b:9c:e7:66:ca:59:2b:df:0b:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:22:D3:B5:2C:D7:6C:05:55:E0:22:F9:B6:E2:FF:81:A0:AB:DB:EC
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:24::/48
Signature Algorithm: sha256WithRSAEncryption
3a:6f:76:7e:c7:d7:42:03:df:de:db:40:f4:30:25:dd:8d:ba:
8e:54:26:bc:65:fe:3b:8e:c0:f4:4c:fc:7f:96:de:e7:4f:f0:
2d:9d:03:5b:28:43:b1:8c:8e:6e:6e:46:16:2e:31:cd:17:21:
f3:61:53:90:f0:c1:df:c1:fb:a3:2b:b7:9b:4b:b1:84:9e:14:
28:4f:7f:08:4a:c9:b5:91:f4:39:cf:a7:1c:a0:01:c2:b5:47:
ae:6f:e3:9b:29:11:0c:8a:27:87:d1:23:f6:b9:cf:f3:60:b7:
b5:fe:7a:fe:32:65:b7:b7:c3:d8:b3:85:77:74:5d:1c:71:c8:
55:ad:23:6a:0e:64:c4:fc:05:66:0c:7d:3e:6b:09:72:c2:0b:
1e:8f:dc:79:1e:62:5f:4c:9b:c6:86:f7:16:87:da:f6:f1:60:
ae:70:1d:97:e0:48:3b:b2:da:31:f4:15:d4:53:73:af:1d:37:
22:27:47:a8:7d:7e:4b:b5:d0:05:6b:14:a1:75:ec:a6:42:d9:
9b:a3:1c:c0:99:96:0d:68:eb:4a:c3:fb:f0:37:61:75:08:05:
0e:ba:23:bb:3e:bd:f7:66:2d:86:c8:84:f5:06:65:40:ba:1b:
f9:1b:31:9b:b3:95:0b:d1:b3:50:04:9f:9f:5e:db:82:84:26:
b5:7e:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:02 2026 by rpki-client