
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
File: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: tl0KNP1Su++yA6xEIr/N3f0Jy1mW5EESSHa4SLNUiao=
Subject key identifier: 54:D2:27:A2:1E:D4:68:9C:65:9D:D4:D4:D4:48:E4:CA:2D:79:7D:59
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E5
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:14 +0000
ROA not before: Sun 30 Aug 2026 16:24:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138445
IP address blocks: 2402:9e80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10725 (0x29e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:14 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94592e-8e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:37:b6:af:96:e9:d4:b2:73:6d:21:bd:9c:
98:94:15:76:78:36:87:1d:fb:2c:c2:c2:be:75:cd:
3a:b2:f8:0b:ab:a5:a0:31:59:37:57:c0:b6:ef:28:
a7:c1:d5:8d:96:47:3b:35:ea:e5:06:f3:55:05:83:
3d:51:20:e7:bd:f9:6a:83:df:96:cd:0b:ee:77:92:
fb:07:ad:43:e1:df:44:35:6d:b3:04:d0:f6:57:5a:
bf:09:4e:9c:0a:52:92:69:61:37:d5:27:6c:d8:74:
51:8c:17:33:53:5a:aa:d3:12:fd:98:66:72:38:06:
94:45:bb:bd:ce:34:f6:60:1c:99:8d:32:76:01:96:
02:0c:c8:69:87:b6:4c:72:ec:6d:1b:57:b5:48:5c:
25:da:60:7a:f6:30:de:60:ad:d6:f3:ee:4d:70:b4:
55:03:00:20:ad:4e:4d:29:57:fd:74:26:bf:e0:b0:
50:00:e7:94:3c:fc:07:e1:6e:5f:54:6a:2a:94:94:
9b:b0:d8:e8:46:38:9d:5c:e0:a1:79:6c:73:e0:a2:
33:ae:7e:6e:43:17:09:ce:b1:ff:85:20:6e:eb:ee:
ca:9c:7a:e5:ed:1a:d3:de:10:f1:bc:51:42:ba:48:
82:a3:01:79:26:8d:29:aa:f1:fa:28:73:cd:2a:be:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:27:A2:1E:D4:68:9C:65:9D:D4:D4:D4:48:E4:CA:2D:79:7D:59
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:7::/48
Signature Algorithm: sha256WithRSAEncryption
c6:d9:77:ba:3f:0f:f4:75:96:f6:02:81:5a:6d:6d:19:a0:ef:
62:6d:9e:fe:0d:6d:fb:92:18:6d:6f:9f:22:ef:1b:b6:69:64:
8a:f7:0d:4b:52:19:c5:66:38:62:58:1d:6e:60:71:72:14:0c:
90:37:b8:9d:c1:23:eb:bc:16:73:ad:de:e7:99:2d:28:a2:4a:
52:d7:b6:d1:92:78:95:3b:8f:1e:82:12:83:e9:dc:8d:82:ba:
e8:ae:53:50:1d:0c:7e:3c:87:88:8f:26:a6:f9:2e:9a:1f:82:
0c:29:12:9c:fc:ed:d4:b2:fa:3e:29:f3:7e:e1:06:02:b1:be:
0e:0b:12:48:ff:bb:38:bd:bf:2e:44:6f:b9:22:c4:53:b8:bf:
37:7d:80:62:55:f1:b4:9f:19:24:0b:70:26:4d:a3:97:12:3a:
1c:62:e9:36:d7:fc:3d:5c:21:34:97:5e:6e:f2:55:60:94:cc:
bb:d7:b0:02:0d:3c:43:3e:87:2a:3e:5d:a8:63:0f:95:04:37:
7f:ec:f8:24:2a:b3:fc:2c:eb:dd:d2:27:a0:b4:56:b6:3d:ec:
a2:c2:5e:d8:78:85:6f:09:89:7c:9f:2a:f9:72:49:ef:6a:07:
ea:1d:8f:c5:38:f4:fc:4a:3b:3e:0f:af:47:c5:1c:e7:40:30:
51:6a:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:34:08 2026 by rpki-client