
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa
File: 4969EFD6A34711EA996BB179C4F9AE02.roa (raw, json)
Hash identifier: LoOPincGiqJLUbv+Kni+9482R+Co4GqUr720dF3sgQ0=
Subject key identifier: 10:12:36:0E:A3:0A:30:55:B4:93:1A:D0:80:D8:31:74:18:D7:B7:70
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29EE
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:33 +0000
ROA not before: Sun 30 Aug 2026 16:24:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140686
IP address blocks: 2402:9e80:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10734 (0x29ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:33 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945941-5da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:fa:02:49:1f:f2:ad:eb:c0:94:aa:b4:cb:
36:ec:cd:53:2e:ee:37:cb:ad:15:b8:3c:c2:8d:e1:
d9:07:cd:3a:4a:24:f6:ac:85:83:4a:fc:c0:a5:0a:
eb:51:2e:f8:ed:1b:38:4b:b6:b8:7f:31:db:6d:a8:
2b:2e:1e:55:72:9f:a2:6d:0c:51:c7:97:fb:84:b0:
70:1c:11:f6:bc:e8:36:9a:72:68:d0:7c:b7:b7:b1:
3a:a6:bf:2b:86:d9:57:91:5f:f8:7a:66:14:c1:80:
ae:e7:a7:56:cc:cc:9b:29:fa:e6:3a:77:cb:b9:1d:
81:37:61:11:67:c0:42:49:2d:a4:bc:59:53:ea:59:
1d:d9:9a:89:c5:d5:52:16:6b:59:82:f4:f1:93:9b:
bf:7f:ea:3c:f5:07:8d:26:72:8f:40:5d:b6:14:44:
83:5c:8c:f3:fd:ba:44:66:a9:0a:d4:58:2d:82:fd:
c0:65:a9:9b:f0:fc:85:6e:d5:1a:df:a7:6c:8c:68:
2d:07:6e:ab:7b:e4:a4:0d:49:08:ce:99:8a:58:2e:
ef:90:92:2b:d8:1e:4d:34:f4:c2:bf:06:ab:f5:84:
c6:50:46:5f:c7:6e:75:e0:9d:60:c4:1b:73:60:c7:
db:18:b7:44:a0:36:e1:72:99:4e:64:c2:87:ad:51:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:36:0E:A3:0A:30:55:B4:93:1A:D0:80:D8:31:74:18:D7:B7:70
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:15::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3b:52:30:5a:aa:46:4d:8e:ed:a0:cd:c6:12:a5:d7:18:27:
cd:e4:5c:35:fa:40:c5:fd:45:d6:de:0a:db:80:41:91:18:c8:
8b:51:c6:6f:21:4a:c8:2d:f7:5a:56:64:fb:f0:44:29:9c:c6:
28:fc:5d:09:05:7e:5b:0c:99:9b:07:c7:21:04:a8:89:ea:7a:
51:b5:34:c7:b7:0f:c9:6a:4e:05:f9:50:32:8e:e9:71:a1:34:
85:05:36:18:5d:b7:0a:75:86:e7:cd:6b:28:d7:6a:d2:61:fb:
63:61:cb:2c:b7:fb:89:ff:c6:38:27:92:a5:13:cf:35:19:ee:
b1:44:8a:4b:16:1e:25:73:6b:62:15:3b:bf:81:60:e1:25:b5:
96:e3:11:82:ca:92:7e:01:12:a4:bb:fe:ca:27:3c:b8:c3:76:
25:75:55:2c:9a:0a:37:ec:34:62:49:fe:80:29:bf:a6:7c:de:
1a:44:f5:4c:fe:2d:71:d3:06:23:d6:0e:9c:32:a2:e9:fc:44:
bd:9c:f4:ca:02:1e:29:d6:81:0e:57:77:64:2e:95:59:66:21:
e3:76:16:fd:3f:b8:cd:a3:c2:f8:1d:e8:96:1e:e9:fd:b6:ca:
3d:1e:77:a0:44:58:a6:df:5c:2f:5c:5b:9f:ac:d1:13:7b:5c:
4e:5b:f4:b7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNDMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTk0MS01ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlA36Akkf8q3rwJSqtMs27M1TLu43y60VuDzCjeHZB806SiT2rIWDSvzApQrr
US747Rs4S7a4fzHbbagrLh5Vcp+ibQxRx5f7hLBwHBH2vOg2mnJo0Hy3t7E6pr8r
htlXkV/4emYUwYCu56dWzMybKfrmOnfLuR2BN2ERZ8BCSS2kvFlT6lkd2ZqJxdVS
FmtZgvTxk5u/f+o89QeNJnKPQF22FESDXIzz/bpEZqkK1Fgtgv3AZamb8PyFbtUa
36dsjGgtB26re+SkDUkIzpmKWC7vkJIr2B5NNPTCvwar9YTGUEZfx2514J1gxBtz
YMfbGLdEoDbhcplOZMKHrVH7LQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBASNg6j
CjBVtJMa0IDYMXQY17dwMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDk2OUVGRDZB
MzQ3MTFFQTk5NkJCMTc5QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAKegAAVMA0GCSqGSIb3DQEBCwUAA4IBAQBcO1IwWqpGTY7toM3G
EqXXGCfN5Fw1+kDF/UXW3grbgEGRGMiLUcZvIUrILfdaVmT78EQpnMYo/F0JBX5b
DJmbB8chBKiJ6npRtTTHtw/Jak4F+VAyjulxoTSFBTYYXbcKdYbnzWso12rSYftj
Ycsst/uJ/8Y4J5KlE881Ge6xRIpLFh4lc2tiFTu/gWDhJbWW4xGCypJ+ARKku/7K
Jzy4w3YldVUsmgo37DRiSf6AKb+mfN4aRPVM/i1x0wYj1g6cMqLp/ES9nPTKAh4p
1oEOV3dkLpVZZiHjdhb9P7jNo8L4HeiWHun9tso9HnegRFim31wvXFufrNETe1xO
W/S3
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:09:22 2026 by rpki-client