
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
File: 3404E194C47711EB9BD0E327C4F9AE02.roa (raw, json)
Hash identifier: sPQBPOrok9/wSqeUbFCFCwhPAe/zCOJhXu6Gs7giSxo=
Subject key identifier: B3:D3:02:15:A4:37:2E:81:AA:3C:5D:2A:99:84:4E:62:93:EE:B7:FE
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A08
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:25:23 +0000
ROA not before: Sun 30 Aug 2026 16:25:23 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 6921
IP address blocks: 2402:e380:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10760 (0x2a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:25:23 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945973-6991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:04:fa:09:17:89:97:b7:7c:81:5c:13:38:
64:c8:d4:2a:d8:d9:54:bc:17:47:4a:85:18:8c:36:
c0:5f:a0:e8:21:e5:43:5c:09:62:26:d3:92:93:c9:
4a:62:c5:24:15:47:8c:62:4b:d7:0a:b0:56:04:b1:
34:0a:0e:83:8b:31:63:b8:eb:32:94:73:7a:c4:bb:
09:4e:cd:fd:e0:59:aa:5c:03:64:f7:2d:fa:cc:86:
5d:6e:fa:4d:38:83:a5:ab:8d:50:2e:c6:93:1d:d6:
bf:fd:cd:66:68:df:c7:f7:64:54:70:6a:e1:c8:32:
2c:65:b4:7d:50:06:8f:e2:99:c4:54:8f:b1:15:f6:
35:52:bf:70:77:e9:e2:e4:2e:74:a9:99:7b:59:e3:
98:aa:40:07:4a:0a:82:8a:98:bb:41:c3:ba:81:d9:
b4:45:c8:35:59:c7:18:74:1f:ee:56:4b:2a:a7:38:
37:04:df:21:a8:5b:b0:68:06:39:b9:3b:48:5a:e8:
85:e1:a4:22:d4:51:0d:dd:0c:95:fe:55:ef:f8:05:
62:24:0e:30:c1:f5:46:a7:5b:78:e6:7a:b0:89:e4:
42:3a:42:ee:15:11:e0:fa:40:e7:3d:da:68:a8:1f:
88:0d:14:87:ad:18:3b:a7:67:f5:08:31:5f:f0:7e:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:02:15:A4:37:2E:81:AA:3C:5D:2A:99:84:4E:62:93:EE:B7:FE
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:e380:e000::/35
Signature Algorithm: sha256WithRSAEncryption
62:73:ff:32:ad:0a:8f:ce:7f:ff:a4:ba:6a:5c:2b:af:ff:d8:
1c:11:0e:8b:c3:c0:48:dd:c5:cb:1c:0b:5c:3d:22:6d:a7:9c:
3d:56:d4:1b:99:53:25:4b:a7:46:c2:5a:b6:bf:b4:b4:b7:5a:
47:1b:ec:5e:19:91:4e:1f:26:2f:9b:ab:f2:23:db:0a:d6:ac:
1e:32:71:e0:b4:9f:26:21:36:fb:9d:41:cc:90:5a:76:48:59:
fb:a6:48:a5:c3:10:50:f9:ad:51:f0:a8:9e:ee:5d:72:32:53:
4a:3d:86:19:b1:2e:71:11:d8:b7:1c:d9:8b:0a:b6:3a:cd:8a:
30:37:15:66:13:4d:be:57:37:5a:ca:fe:26:90:05:4a:50:c0:
87:75:61:93:ef:86:2a:42:9a:a3:cc:1c:a4:2c:45:cb:e4:0a:
90:10:0c:0d:8a:46:f8:b8:25:d4:a0:31:07:f5:67:7d:d6:75:
ec:a8:af:0b:45:93:aa:f6:59:76:a4:15:cf:e5:36:33:0e:62:
43:91:94:4b:2c:de:23:ef:81:b4:78:ac:13:96:55:df:c5:56:
c3:79:44:97:aa:d1:f1:d8:a1:0f:37:26:55:b5:78:57:e2:7b:
35:8c:3f:96:3e:e4:e7:13:19:bf:5b:40:d9:89:e3:f5:95:4c:
1c:55:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:57:12 2026 by rpki-client