
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
File: 34D73F3E230C11EB825ED82EC4F9AE02.roa (raw, json)
Hash identifier: 5CayqKEw2CPj9gjaPQ4SRK9xFKxvt5Z2eNJxYdp5toc=
Subject key identifier: AA:A0:63:54:9F:C2:95:AE:D2:1A:D8:0C:0C:9C:8C:53:56:FF:E1:FE
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29F2
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:41 +0000
ROA not before: Sun 30 Aug 2026 16:24:41 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141380
IP address blocks: 2402:9e80:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10738 (0x29f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:41 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945949-dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:83:33:e3:5f:8a:81:88:7f:43:78:48:64:
8f:0d:69:98:b7:a5:17:f4:bc:0c:38:56:40:c5:79:
71:20:33:e0:53:c2:c0:f1:da:d5:8d:5e:cd:28:2c:
bd:ea:51:1f:a3:6b:4e:9f:41:10:3b:36:0b:30:1b:
37:36:7f:04:b3:ff:8b:54:29:f8:42:b3:ac:52:81:
5f:99:f7:2e:c4:8d:7c:a1:c5:ed:65:15:96:1a:7a:
70:5e:12:a7:6c:86:a6:b8:45:f5:de:7e:60:ca:ee:
d9:af:d7:1a:d2:0a:e2:ca:ab:02:6b:59:3c:7e:1a:
88:63:af:14:01:83:27:fc:24:c0:fd:9b:08:f8:03:
35:48:4e:34:c8:76:b8:84:91:48:6e:6e:b2:89:23:
aa:e0:97:7c:bd:ff:6f:5f:df:b5:4f:28:57:ff:db:
e9:07:5c:84:ef:c0:37:18:38:d4:30:ee:9f:85:ec:
f0:16:3c:45:4f:15:64:fa:71:41:4c:a6:02:20:82:
12:85:7c:a3:5f:ef:7b:75:b4:65:7e:63:63:bc:3e:
9d:bc:1f:04:f2:f5:ae:7f:fc:db:9a:74:77:39:58:
64:d8:f4:6c:27:a2:7f:ff:2d:11:17:54:c3:23:dd:
f0:8b:4f:85:5b:e3:69:02:63:e1:d1:5b:cb:0b:cb:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:63:54:9F:C2:95:AE:D2:1A:D8:0C:0C:9C:8C:53:56:FF:E1:FE
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:57::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c2:aa:2f:10:59:92:1b:4a:c8:90:a3:34:24:57:4a:ac:00:
23:68:3c:09:c1:f1:a6:8d:5e:20:7c:46:d8:1c:d8:d7:1e:5b:
bc:7f:2b:38:b3:6c:49:c2:0a:33:a6:50:f1:10:02:57:7c:13:
12:e1:b2:01:ae:25:5e:73:4b:e3:e4:09:6a:a7:e8:d0:34:a4:
60:db:fc:68:b8:23:7c:d4:2b:52:76:8b:d4:94:6e:b9:c7:cf:
1b:69:c3:e8:33:61:b3:c7:6b:1a:f5:3e:d5:ec:88:db:56:7a:
8f:c7:f2:23:b0:28:bc:90:85:2f:69:de:e4:2d:4b:44:03:c6:
92:b7:ad:bb:11:4e:81:f9:68:fb:01:7e:64:a0:78:5a:2c:9e:
a2:d7:8d:04:eb:bd:b4:a6:56:96:43:e9:40:71:73:a0:6d:ae:
12:da:4a:5e:e1:4c:ab:d1:00:68:11:e5:77:6e:a8:58:bd:22:
0a:a5:7c:8f:5f:53:83:d4:04:a0:f0:75:7a:54:aa:8e:37:7d:
3d:e9:b1:8a:3f:3c:46:93:09:17:cf:11:c0:14:c9:c4:25:31:
de:23:52:4f:64:45:2d:c0:a7:65:61:9f:f8:62:7d:71:40:e6:
cb:53:fc:9c:f8:a2:53:7d:f0:56:ec:96:35:fd:94:eb:23:ad:
cf:b7:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:05 2026 by rpki-client