
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
File: 41C6F41AB84A11E98246736CC4F9AE02.roa (raw, json)
Hash identifier: TmobfWXQ7wE0wMe+C3nPHSlF+4ee5FP/igAqCE0j30w=
Subject key identifier: 4F:88:9A:77:CB:27:57:F8:20:E9:F7:DA:A5:D2:ED:AB:3F:55:BE:D7
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29EC
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:29 +0000
ROA not before: Sun 30 Aug 2026 16:24:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139308
IP address blocks: 2402:9e80:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10732 (0x29ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:28 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94593c-5ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:39:cc:d7:3e:b0:af:b8:5f:d7:cb:4a:e6:
0b:df:f3:cd:d3:82:86:66:25:2a:a6:6f:4a:aa:64:
a9:82:d1:27:c9:d5:3a:05:27:ae:46:c1:9e:8f:0c:
69:92:0e:c8:63:b0:34:55:11:7a:7a:f3:ee:25:20:
ea:e2:f9:91:dd:5d:92:3d:9d:f9:49:77:92:2a:3f:
bc:3d:7f:b9:f3:97:3c:fd:0f:18:9b:d0:1d:32:a4:
a1:37:95:de:3f:ac:44:22:e4:d0:1d:13:47:dd:0c:
ac:b9:24:79:dc:80:6b:52:5a:c1:72:2c:54:20:9b:
e2:77:f5:35:51:6f:7a:c9:23:d7:ec:1c:f7:cc:61:
b6:d9:7b:0b:79:6e:12:6f:b8:c1:5b:94:c9:49:da:
ab:b8:d3:6e:76:4f:35:ad:d4:5e:1e:b2:91:49:a4:
f0:1c:a2:27:ef:d3:56:b9:f1:4d:c8:ba:4e:51:57:
a7:c5:a7:a1:dc:d2:7c:d3:51:9b:e9:ac:41:89:cd:
03:63:a7:fc:6e:e2:01:3d:ac:67:a5:8a:b4:ec:ce:
04:3e:f9:cb:58:6c:17:67:df:12:7c:f8:8b:be:f7:
33:0b:0d:66:b3:97:6c:e8:43:f5:48:3f:5f:68:6f:
78:22:6e:f7:15:65:bf:af:a1:c9:bf:bf:a5:90:31:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:9A:77:CB:27:57:F8:20:E9:F7:DA:A5:D2:ED:AB:3F:55:BE:D7
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:100::/40
Signature Algorithm: sha256WithRSAEncryption
bf:c3:2c:40:71:be:cc:2b:01:1a:b8:6f:ef:f0:64:be:71:73:
f9:38:91:8a:8e:9e:77:c8:31:f0:93:f9:8a:d5:1f:c7:4c:bc:
bb:ee:86:dc:6b:e0:1d:5c:75:a2:ad:e0:d0:32:a0:2b:04:df:
94:9d:4e:54:fb:33:d8:68:b3:ed:d5:45:f2:14:4f:e4:6b:65:
47:bd:8a:0e:ca:7a:e7:e1:64:ee:f1:c2:c5:9f:9c:90:b6:f4:
1d:e7:96:19:aa:c6:76:b0:19:a2:58:ac:69:95:26:73:34:55:
38:3d:fb:0d:58:d5:ae:04:85:f5:74:62:9c:e4:ed:aa:93:bd:
11:2f:37:2c:0a:89:b2:07:3b:01:a3:87:c1:49:c8:8d:4b:ef:
bd:2c:cb:d7:55:88:c1:f4:ed:29:4d:e7:50:29:5a:d8:68:6a:
6e:60:46:3b:34:e6:a5:4a:1a:55:e1:a9:e9:b5:6e:7c:e0:74:
6a:1f:f1:b3:c2:42:c2:da:0f:fa:73:2a:14:3e:3e:51:35:e1:
85:41:2c:0f:9c:c1:99:a6:94:b8:6b:1a:18:4d:e6:68:6c:bc:
d1:77:2a:e3:8f:52:0b:e8:86:cc:b0:c1:67:8a:b2:05:78:5c:
5c:cb:f6:41:88:8b:fb:78:f5:4f:80:29:48:4b:16:97:10:21:
79:b0:06:52
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICKewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNDI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTkzYy01YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2w5zNc+sK+4X9fLSuYL3/PN04KGZiUqpm9KqmSpgtEnydU6BSeuRsGejwxp
kg7IY7A0VRF6evPuJSDq4vmR3V2SPZ35SXeSKj+8PX+585c8/Q8Ym9AdMqShN5Xe
P6xEIuTQHRNH3QysuSR53IBrUlrBcixUIJvid/U1UW96ySPX7Bz3zGG22XsLeW4S
b7jBW5TJSdqruNNudk81rdReHrKRSaTwHKIn79NWufFNyLpOUVenxaeh3NJ801Gb
6axBic0DY6f8buIBPaxnpYq07M4EPvnLWGwXZ98SfPiLvvczCw1ms5ds6EP1SD9f
aG94Im73FWW/r6HJv7+lkDH7dQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFE+ImnfL
J1f4IOn32qXS7as/Vb7XMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDFDNkY0MUFC
ODRBMTFFOTgyNDY3MzZDQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAKegAEwDQYJKoZIhvcNAQELBQADggEBAL/DLEBxvswrARq4b+/w
ZL5xc/k4kYqOnnfIMfCT+YrVH8dMvLvuhtxr4B1cdaKt4NAyoCsE35SdTlT7M9ho
s+3VRfIUT+RrZUe9ig7KeufhZO7xwsWfnJC29B3nlhmqxnawGaJYrGmVJnM0VTg9
+w1Y1a4EhfV0Ypzk7aqTvREvNywKibIHOwGjh8FJyI1L770sy9dViMH07SlN51Ap
Wthoam5gRjs05qVKGlXhqem1bnzgdGof8bPCQsLaD/pzKhQ+PlE14YVBLA+cwZmm
lLhrGhhN5mhsvNF3KuOPUgvohsywwWeKsgV4XFzL9kGIi/t49U+AKUhLFpcQIXmw
BlI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:40 2026 by rpki-client