
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa
File: 99E3B47E230D11EBACAFB634C4F9AE02.roa (raw, json)
Hash identifier: gPCdOAlKz8akdP//WWNUnxSSnRL+YtMFaWi1bUN6Ajs=
Subject key identifier: 22:E1:F8:4E:EE:01:5C:E8:57:84:2E:5B:69:DC:28:DB:85:7F:49:F4
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29ED
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:31 +0000
ROA not before: Sun 30 Aug 2026 16:24:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139677
IP address blocks: 2402:9e80:58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10733 (0x29ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94593f-d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:35:eb:01:0a:16:3b:83:07:c8:b9:73:51:
a2:44:09:27:a6:ad:82:09:b9:d0:ac:77:c5:ab:1f:
c8:b4:a6:6b:ae:a5:1c:bf:ed:12:4f:d5:88:1d:8a:
a6:74:61:dd:58:a6:96:8e:ae:ac:b8:b8:d6:d2:75:
d0:b6:18:ed:d1:dd:16:61:d3:6c:95:50:ff:9a:aa:
a2:53:02:10:b1:34:4a:bf:eb:ee:7c:8c:31:5a:03:
4d:d4:43:41:c4:9f:b4:0a:0a:db:ef:93:2d:e6:2e:
73:d0:fa:8b:23:36:e3:40:ad:93:58:67:36:9a:09:
1b:6b:a6:a9:44:68:37:45:66:ae:82:63:93:6a:ce:
45:50:2c:f1:cf:8f:18:e0:a3:9a:59:3d:e9:bb:cc:
77:27:0d:55:72:ab:ce:a5:3e:91:b5:e0:cf:5a:39:
2a:d6:63:8e:9d:90:35:c2:14:0d:b8:6b:0e:f3:e1:
b9:a0:10:c1:3a:69:ee:63:75:8b:bb:98:e0:47:36:
b0:6d:b1:4c:f4:cc:bf:a7:29:74:78:96:2d:0a:a1:
dc:52:f4:bc:6a:f6:56:33:08:17:cd:fe:c9:80:cb:
03:a9:bd:25:20:67:86:e7:c0:bc:65:b5:3b:8f:fb:
5b:d0:af:9c:e5:10:d0:10:a6:e4:68:c4:86:5c:66:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:F8:4E:EE:01:5C:E8:57:84:2E:5B:69:DC:28:DB:85:7F:49:F4
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:58::/48
Signature Algorithm: sha256WithRSAEncryption
24:62:66:96:6b:e2:17:32:32:2d:98:2e:ba:f9:f5:7c:e7:7d:
51:24:cd:8d:77:e5:b2:eb:77:df:e1:f3:5c:9b:53:94:56:db:
31:01:be:50:51:5f:eb:4d:51:1b:82:a4:ee:92:23:cc:6f:28:
a3:19:95:79:02:4f:c2:33:6c:24:97:31:54:5b:31:92:e9:dc:
58:9a:d3:37:fc:e3:67:7c:22:ff:f0:37:eb:d6:fb:c7:47:21:
18:f6:96:ca:c9:b4:cd:5f:7d:d2:56:0b:f2:3f:b6:98:c2:f9:
34:e8:62:4c:64:aa:2e:4b:a3:69:13:99:5d:92:0d:0a:d8:da:
f7:4d:ce:5a:a3:af:d0:ce:ff:f1:cd:77:20:ac:f4:18:42:b9:
93:5a:dd:e1:3d:ae:dd:cf:c5:47:8d:44:f2:e9:88:2d:a3:14:
72:3e:bc:77:e2:70:37:aa:51:e0:96:16:64:91:9b:dd:c8:64:
ff:d5:0b:51:10:44:59:f3:3f:5b:68:69:5b:30:03:9d:99:93:
1b:74:2a:6e:56:27:c3:cd:6e:91:d3:4e:4f:7f:6d:70:fb:2f:
39:d3:20:b7:26:e6:8b:98:79:54:b5:25:7c:29:1d:44:93:a2:
73:a4:c5:d0:77:10:af:4f:24:ee:74:f8:15:1a:7f:81:39:27:
af:bb:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:28 2026 by rpki-client