
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
File: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (raw, json)
Hash identifier: UWyxi4Cq0ZxQNatw6TQpyx4tbDVPPXKEU3ULANWm760=
Subject key identifier: 23:30:9A:EE:42:E4:A3:10:7B:7D:9C:41:DE:3D:3D:8E:12:3D:22:BD
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29FF
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:25:06 +0000
ROA not before: Sun 30 Aug 2026 16:25:06 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2402:9e80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10751 (0x29ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:25:06 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945962-4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:82:a3:27:9a:a5:04:31:08:06:12:95:ac:
0b:57:4a:0c:9e:dc:37:ee:73:58:31:6e:dd:ed:d0:
f5:26:ff:f8:38:0e:61:8d:11:63:86:ed:27:c8:04:
a6:f1:f6:30:94:ed:c1:7b:75:88:af:7c:74:8a:0d:
d7:81:e0:2d:f9:a5:0a:b5:6c:7d:ae:75:91:6b:3b:
e6:60:e0:16:b4:63:17:98:16:23:92:9b:68:dc:89:
1f:50:aa:e3:1d:b5:f4:69:9a:5f:b8:02:f3:4b:04:
94:bc:20:b7:8a:2f:11:05:41:53:e2:1b:52:6c:24:
44:9c:92:93:fd:6d:51:ff:31:67:8d:a3:51:4d:4b:
a0:46:d8:41:95:c9:f4:c4:af:c5:83:86:35:f1:1b:
bd:aa:4e:be:0d:93:84:99:1c:8f:dd:cb:a5:c5:33:
87:ed:97:cc:56:d9:0b:e2:f6:27:68:c0:e9:44:46:
bb:e7:38:50:0b:18:49:3b:bb:a5:7a:18:df:b0:6e:
5e:0c:15:9e:c1:0e:0b:ec:b9:4e:23:d9:39:4e:e6:
5a:45:10:65:54:3c:d7:0c:60:95:d1:09:77:fe:47:
16:f7:1f:5a:55:c8:29:a5:b6:9a:c6:72:87:67:4c:
f5:19:10:74:77:cf:2d:ad:75:86:7a:ba:3d:3f:df:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:9A:EE:42:E4:A3:10:7B:7D:9C:41:DE:3D:3D:8E:12:3D:22:BD
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:10::/48
Signature Algorithm: sha256WithRSAEncryption
d5:22:7f:c9:e8:96:ef:96:a1:1e:5a:bf:d8:ce:c0:01:70:86:
22:74:61:67:a7:ec:c6:a1:e4:35:ef:5a:5a:7b:64:e6:d4:e2:
77:e9:fe:c4:49:30:dd:f0:98:f7:35:f3:54:d9:d5:3b:81:54:
bb:24:29:52:8c:f2:db:6e:3e:84:8a:96:43:14:db:ec:bd:7f:
34:05:fd:d5:be:11:ef:60:e5:e7:96:b4:81:06:47:b8:03:fe:
a4:ea:90:ea:11:41:41:c3:6d:11:d7:f2:8e:f2:c6:39:11:8c:
0f:7a:14:fa:d9:17:18:5b:74:e8:d5:1c:c4:0c:b8:34:0e:a7:
8a:9c:84:5e:1c:aa:f9:57:ec:7c:e5:97:3a:53:ea:09:4a:f6:
af:6e:fd:b6:9a:48:08:41:6e:ca:96:f9:4c:74:52:c7:44:8d:
a9:0c:43:b3:d4:a6:44:a8:96:98:06:e8:30:57:8e:64:db:fa:
2a:03:da:0a:c4:2d:23:37:e0:5d:5d:a5:97:9d:f9:90:8c:50:
6d:28:91:1e:f8:9d:9a:af:a2:60:2f:90:99:53:02:04:d7:be:
59:f9:a6:bb:10:96:ce:e5:97:6e:92:d0:9f:47:7f:76:3a:f8:
e8:db:f1:63:9a:36:5c:d9:42:36:97:f7:f4:e3:78:3b:7d:8a:
26:b0:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:34 2026 by rpki-client