
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
File: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (raw, json)
Hash identifier: DuuzI7oTybdnth7THgkssn/oIPtLqhSKWiBDhN3KD6w=
Subject key identifier: A2:95:43:87:4D:E5:D0:24:B7:60:B4:78:59:1C:DD:B4:0B:EC:4A:B1
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 294C
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:41 +0000
ROA not before: Sat 26 Jul 2025 15:53:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138564
IP address blocks: 2402:9e80:42::/48 maxlen: 48
2402:9e80:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10572 (0x294c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ef4-ee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:4c:15:9b:b5:66:1e:e6:51:f8:9c:f7:34:
d6:91:f3:7e:d4:7f:88:3b:53:04:9d:ac:1d:81:ce:
12:2a:82:29:f4:13:28:80:76:c5:2b:49:30:fe:ca:
97:86:a0:48:bc:ea:1d:fa:26:8e:f8:38:bd:32:52:
11:90:b9:64:dc:f7:0d:21:ec:d9:72:d7:b3:a1:56:
a5:3e:8d:12:ab:9a:1f:07:4c:93:7f:46:b2:06:f4:
64:f3:22:31:34:97:23:38:23:69:f2:31:e6:ca:a0:
3a:40:39:e0:5b:6e:c5:9d:cd:e3:04:5e:f6:c1:33:
30:8c:de:73:b4:d9:f8:e9:dc:db:21:65:02:18:f1:
73:44:25:e0:6e:a6:81:94:ab:67:3f:ee:14:7f:5c:
49:d4:00:e7:91:10:6f:3c:40:46:f7:bc:5e:e3:6a:
93:8e:a1:b5:6d:4e:9b:53:56:c9:23:ce:bf:1b:89:
e0:07:59:a0:d7:42:cc:57:17:f5:f3:b0:4d:6a:fb:
29:9c:fc:5f:4a:e4:e9:56:37:ba:fa:a0:a6:0e:a3:
4b:4c:31:02:ee:17:4c:40:7c:45:96:e6:da:1f:ca:
3b:66:89:f0:57:34:e3:8a:a4:44:bb:70:dd:1b:c8:
af:81:99:41:2a:b8:e6:0b:a6:22:b8:d4:9c:6a:0f:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:43:87:4D:E5:D0:24:B7:60:B4:78:59:1C:DD:B4:0B:EC:4A:B1
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:42::/48
2402:9e80:a00::/40
Signature Algorithm: sha256WithRSAEncryption
01:81:cc:c0:c9:71:67:d6:41:76:cc:3f:97:56:e2:9c:cd:e9:
bb:4e:ee:90:fc:f5:a3:83:be:b2:42:5b:e9:7e:7c:ef:70:12:
fb:eb:6b:e2:a1:10:12:87:ed:36:12:b0:d2:a5:c1:31:b9:3d:
b6:46:01:ee:b7:22:c4:12:53:4f:1c:2b:e6:3b:5b:fe:9d:dc:
25:b5:4a:59:53:c1:f3:ae:2b:c5:c8:e8:7e:7c:3f:32:d1:85:
9a:7a:0d:ee:c3:8b:d8:ec:94:4b:14:a5:67:5f:9a:2e:35:41:
c7:48:71:c7:22:38:b6:42:f4:13:f6:c5:47:65:6e:62:82:c4:
94:8f:b2:08:13:c7:1f:ed:87:9a:0f:d2:76:67:3c:85:d7:b4:
10:6d:00:2b:87:fd:76:48:40:8a:d1:73:48:9a:96:86:33:1a:
9f:bb:6f:a4:c0:1b:a9:4d:d3:06:e1:d4:a7:9d:98:57:f4:21:
9f:cd:67:06:cd:9c:0b:33:90:33:ae:b2:04:14:b7:f1:06:49:
9f:b9:f3:30:fc:e3:83:cd:61:7d:4b:ee:8a:e8:91:a9:8d:7f:
ef:93:17:b8:b4:12:14:ac:2f:67:d6:f5:06:32:1c:cb:e9:36:
16:f9:58:ce:56:18:d9:53:dd:4e:5c:fa:12:bc:07:fe:1f:0a:
15:31:8f:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICKUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGVmNC1lZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA00ZMFZu1Zh7mUfic9zTWkfN+1H+IO1MEnawdgc4SKoIp9BMogHbFK0kw/sqX
hqBIvOod+iaO+Di9MlIRkLlk3PcNIezZctezoValPo0Sq5ofB0yTf0ayBvRk8yIx
NJcjOCNp8jHmyqA6QDngW27Fnc3jBF72wTMwjN5ztNn46dzbIWUCGPFzRCXgbqaB
lKtnP+4Uf1xJ1ADnkRBvPEBG97xe42qTjqG1bU6bU1bJI86/G4ngB1mg10LMVxf1
87BNavspnPxfSuTpVje6+qCmDqNLTDEC7hdMQHxFlubaH8o7ZonwVzTjiqREu3Dd
G8ivgZlBKrjmC6YiuNScag87swIDAQABo4ICazCCAmcwHQYDVR0OBBYEFKKVQ4dN
5dAkt2C0eFkc3bQL7EqxMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNzdDOThENDZD
OEUwMTFFQTlGRjgwMjdBQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAAjARAwcAJAKegABCAwYAJAKegAowDQYJKoZIhvcNAQELBQADggEBAAGBzMDJ
cWfWQXbMP5dW4pzN6btO7pD89aODvrJCW+l+fO9wEvvra+KhEBKH7TYSsNKlwTG5
PbZGAe63IsQSU08cK+Y7W/6d3CW1SllTwfOuK8XI6H58PzLRhZp6De7Di9jslEsU
pWdfmi41QcdIccciOLZC9BP2xUdlbmKCxJSPsggTxx/th5oP0nZnPIXXtBBtACuH
/XZIQIrRc0ialoYzGp+7b6TAG6lN0wbh1KedmFf0IZ/NZwbNnAszkDOusgQUt/EG
SZ+58zD844PNYX1L7orokamNf++TF7i0EhSsL2fW9QYyHMvpNhb5WM5WGNlT3U5c
+hK8B/4fChUxj+I=
-----END CERTIFICATE-----
Generated at Fri Mar 6 23:46:18 2026 by rpki-client