
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
File: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (raw, json)
Hash identifier: u/+8fBdjqanPnyDifOjv9RKhyjJBxJ44hvKEAUhbuXI=
Subject key identifier: 0F:5D:C3:DF:2E:49:8F:42:0E:91:70:CC:E9:2A:34:EE:4F:FB:C1:EA
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E6
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:16 +0000
ROA not before: Sun 30 Aug 2026 16:24:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138564
IP address blocks: 2402:9e80:42::/48 maxlen: 48
2402:9e80:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10726 (0x29e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945930-66a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:c8:8f:28:b6:71:b8:83:bf:d7:f7:08:02:
f8:58:95:e9:46:cf:02:6c:0a:64:74:62:9a:f1:44:
53:10:93:b3:c7:29:31:15:5f:73:e9:0c:ca:59:9d:
7e:6b:9a:95:8b:5e:ef:35:94:07:f9:12:0d:ac:c5:
1f:9d:c6:34:e0:ab:52:dd:33:0f:8f:37:5c:38:cf:
3f:e7:e9:b9:5a:cf:77:04:ed:28:27:22:49:79:cf:
93:0e:68:a1:48:b7:89:60:6c:a6:f2:1c:f2:a6:2e:
9c:78:ef:a9:4d:06:9c:e7:18:09:c9:d6:52:86:e9:
32:86:12:35:c0:8a:d0:20:b8:27:35:14:e8:44:01:
57:a0:4c:d4:b9:d5:94:3b:4a:96:eb:62:d1:32:1d:
0f:9f:5a:6f:71:a8:5d:74:14:9a:f1:58:6c:54:b5:
70:82:66:8a:41:5d:bf:f3:4e:f5:50:b6:1f:0a:0e:
89:89:0f:52:a7:14:ef:67:ca:a3:89:a4:df:eb:59:
73:3f:53:49:0c:a5:a8:70:89:eb:2e:82:a0:0a:05:
16:c5:79:bf:48:3a:81:6f:af:47:f0:8d:6e:e7:06:
7d:30:db:79:ce:88:15:ea:6d:ca:59:38:44:7a:3a:
b3:23:f0:96:6c:aa:04:a7:1c:1f:aa:c8:72:a7:0a:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:C3:DF:2E:49:8F:42:0E:91:70:CC:E9:2A:34:EE:4F:FB:C1:EA
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:42::/48
2402:9e80:a00::/40
Signature Algorithm: sha256WithRSAEncryption
2a:42:29:ac:89:e0:6c:68:39:38:4c:16:1e:19:cf:0b:20:a9:
12:3a:89:e8:f8:d0:2d:ba:85:75:09:23:e6:34:1b:ab:77:f5:
c7:66:e9:cc:bd:c3:d3:cd:37:62:1a:3c:37:b0:1f:d2:04:3a:
d5:9d:a5:e9:a4:bc:60:c2:80:d5:3c:c5:08:b9:e3:b2:8d:22:
0c:5b:74:05:ed:c7:97:e0:d4:83:90:23:40:60:58:9f:85:f8:
23:94:c2:96:c4:3b:ed:b0:be:0f:e5:dc:b0:9f:b8:b6:d5:b5:
92:1e:8f:fa:3b:e2:33:55:b9:52:c2:16:22:7a:76:88:9b:a6:
3e:bb:3d:52:7f:a4:7f:55:eb:0a:53:39:66:4a:93:1b:8a:5c:
6b:bc:c2:9e:bb:00:c4:e0:f0:f2:32:53:69:78:7a:d4:ab:de:
98:90:1d:07:bc:93:6e:e5:93:62:52:23:36:5f:23:51:a1:52:
de:1a:a8:06:9c:11:ee:a5:88:c4:75:36:45:d1:08:45:63:70:
a9:d2:5a:e8:4a:8c:33:12:cf:64:ba:3a:34:ba:0a:bb:f6:08:
ca:49:31:6c:4c:25:6c:6f:61:a9:46:61:57:54:99:10:f8:c4:
f5:c3:ac:59:a0:8d:90:fb:3d:07:01:67:2a:67:10:04:32:8a:
5b:fd:87:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICKeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNDE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTkzMC02NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwADIjyi2cbiDv9f3CAL4WJXpRs8CbApkdGKa8URTEJOzxykxFV9z6QzKWZ1+
a5qVi17vNZQH+RINrMUfncY04KtS3TMPjzdcOM8/5+m5Ws93BO0oJyJJec+TDmih
SLeJYGym8hzypi6ceO+pTQac5xgJydZShukyhhI1wIrQILgnNRToRAFXoEzUudWU
O0qW62LRMh0Pn1pvcahddBSa8VhsVLVwgmaKQV2/8071ULYfCg6JiQ9SpxTvZ8qj
iaTf61lzP1NJDKWocInrLoKgCgUWxXm/SDqBb69H8I1u5wZ9MNt5zogV6m3KWThE
ejqzI/CWbKoEpxwfqshypwo5bQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFA9dw98u
SY9CDpFwzOkqNO5P+8HqMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNzdDOThENDZD
OEUwMTFFQTlGRjgwMjdBQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAAjARAwcAJAKegABCAwYAJAKegAowDQYJKoZIhvcNAQELBQADggEBACpCKayJ
4GxoOThMFh4ZzwsgqRI6iej40C26hXUJI+Y0G6t39cdm6cy9w9PNN2IaPDewH9IE
OtWdpemkvGDCgNU8xQi547KNIgxbdAXtx5fg1IOQI0BgWJ+F+COUwpbEO+2wvg/l
3LCfuLbVtZIej/o74jNVuVLCFiJ6doibpj67PVJ/pH9V6wpTOWZKkxuKXGu8wp67
AMTg8PIyU2l4etSr3piQHQe8k27lk2JSIzZfI1GhUt4aqAacEe6liMR1NkXRCEVj
cKnSWuhKjDMSz2S6OjS6Crv2CMpJMWxMJWxvYalGYVdUmRD4xPXDrFmgjZD7PQcB
ZypnEAQyilv9h0M=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:32:58 2026 by rpki-client