
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
File: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (raw, json)
Hash identifier: dah2Cea2tuQk/wAC5Faewwhbx/+g3WCkUUqQeC2jTUM=
Subject key identifier: 0A:29:48:83:10:CD:FD:A8:AF:E7:2C:14:86:73:03:24:ED:35:BD:B7
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2946
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:35 +0000
ROA not before: Sat 26 Jul 2025 15:53:41 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137219
IP address blocks: 2402:9e80:24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10566 (0x2946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48eef-42d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:7e:1e:b2:80:2c:aa:63:78:12:31:52:25:
20:a9:63:77:99:8a:cc:4b:cc:18:37:d3:78:34:c7:
ea:22:2a:7c:a5:2b:4a:2a:d6:d9:5b:92:ca:71:9c:
c7:46:3f:53:46:16:e6:10:4f:90:74:4b:47:0c:22:
f8:c3:5f:37:8c:98:a5:13:43:d2:68:69:7a:13:f4:
4e:dd:19:0f:bb:71:b6:2d:52:1d:d1:1c:4e:08:20:
81:6a:f8:01:e9:44:fc:53:0b:6d:60:e3:77:50:00:
03:f8:a7:e2:7c:39:81:a5:0d:f8:6a:8e:c0:1a:4b:
64:a4:1b:37:c5:ad:6e:4a:73:aa:e9:d0:9c:12:ba:
dc:17:37:e4:0e:59:55:fd:9c:5e:9b:cd:b4:47:08:
a9:5d:81:b2:98:24:3d:34:67:5a:ab:b1:0c:f5:1d:
80:f3:b0:41:e4:36:28:23:b7:f0:2e:1f:70:f3:74:
2b:12:61:8a:07:d6:f0:2e:2d:d3:a5:a8:c8:ce:15:
bc:83:4e:ed:fc:ce:12:ec:6f:ff:7f:73:6d:f4:28:
9d:d2:1d:ec:35:5a:d4:2c:e9:af:e5:a2:7d:2c:14:
4b:b4:fc:e7:ad:8a:d0:5a:f6:14:09:e9:89:d6:16:
8e:08:42:25:dc:6d:32:61:09:c9:25:dd:2a:4b:30:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:48:83:10:CD:FD:A8:AF:E7:2C:14:86:73:03:24:ED:35:BD:B7
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:24::/48
Signature Algorithm: sha256WithRSAEncryption
d4:a6:91:a3:72:ab:2c:62:4b:8f:f4:43:8b:45:19:34:45:7a:
5f:cb:13:a1:ef:59:98:13:7f:10:b2:8e:6b:00:8a:97:7d:d9:
c6:f9:55:78:4d:b7:07:3b:22:63:e4:a2:8c:dc:57:b8:f9:e4:
05:6a:7b:f5:89:36:fe:02:e0:88:cf:a0:4c:71:e9:3a:fe:e6:
fd:4f:98:a0:f7:e0:fb:28:f7:ee:c7:39:3a:dd:a1:ca:9e:1c:
da:79:f5:33:20:e5:2c:a9:3e:7d:66:14:d7:13:61:df:7d:18:
4a:49:36:cb:1b:0a:b2:a2:78:d2:be:ef:89:98:a3:b8:21:8f:
a5:b9:37:90:ab:a6:3e:9a:05:e1:34:fa:84:75:26:49:b1:ac:
e7:23:6b:87:81:dc:80:13:19:f5:67:c2:07:da:c4:06:72:9e:
9d:71:2e:bf:44:b7:34:36:08:45:be:6f:5a:24:54:53:62:6e:
72:b2:06:b8:32:43:06:9c:dd:ab:e6:f7:87:6c:a1:73:88:37:
dc:ae:58:cc:5a:d6:d1:a1:be:03:3c:f7:1b:9d:da:f6:73:05:
84:4c:17:4a:bf:57:4a:58:75:b6:bf:4b:ee:f7:cd:f4:2a:55:
a8:1a:ec:1b:28:e8:78:0e:00:c5:3d:46:5f:e9:8f:57:04:69:
a8:62:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:44:56 2026 by rpki-client