
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
File: A085C546F64511EAAF5AD93BC4F9AE02.roa (raw, json)
Hash identifier: x4QOzzI+pFjNR5Xjf/5OXFTFxhqS5Kf+gAVqxMJxVOE=
Subject key identifier: DE:09:2A:55:57:26:73:27:E1:01:55:EB:1C:FB:E7:0A:28:22:2B:08
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29E4
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:12 +0000
ROA not before: Sun 30 Aug 2026 16:24:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138408
IP address blocks: 2402:9e80:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10724 (0x29e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:12 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94592c-cba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:84:09:39:26:7b:ef:43:ea:ec:f1:64:ec:
b2:13:00:8a:48:cc:e5:ce:32:f6:86:bd:4e:86:67:
71:3d:af:f1:cd:93:8a:04:a2:bf:8b:9f:ca:ff:2c:
4e:31:17:8a:ca:0c:ab:e2:60:b4:60:44:42:2f:b2:
e0:9d:cb:fb:65:cf:31:64:03:b9:db:6b:62:cc:73:
a1:7f:e4:4d:33:c4:80:e6:a3:c7:fc:84:f5:51:eb:
86:e2:6b:e4:d7:d1:77:df:fe:31:45:de:e9:d8:02:
a5:c8:02:a1:d1:05:92:4e:a9:26:22:33:f9:fa:a1:
f7:0b:4c:05:a1:88:7b:1c:a9:0d:a5:cd:68:8b:80:
16:0a:40:e6:08:e4:7d:26:65:44:09:39:2e:78:b9:
30:2e:f2:e8:26:10:a4:1d:20:df:1a:a2:f8:8d:ae:
af:11:74:33:73:0e:0b:22:5e:c7:6a:ea:c2:64:67:
91:9c:91:d2:a8:7b:d8:35:ae:5f:9a:0c:de:3c:32:
63:09:de:7e:48:9b:3e:26:78:3a:e1:c4:cf:e7:80:
a6:cf:09:ef:bd:c2:38:02:df:47:33:68:96:8d:0b:
d0:62:c4:93:86:6e:6f:de:33:d7:a3:3a:84:23:4b:
19:18:ff:19:38:a2:dc:6d:7b:ff:74:7f:42:c3:dd:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:2A:55:57:26:73:27:E1:01:55:EB:1C:FB:E7:0A:28:22:2B:08
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:12::/48
Signature Algorithm: sha256WithRSAEncryption
17:fb:a5:61:30:ba:12:8a:2d:c2:6b:65:5f:f8:b9:31:f7:2e:
bb:67:e4:b0:54:4e:b4:93:1e:28:17:a1:2d:16:6d:2b:31:c5:
9a:aa:96:92:40:b2:ee:f3:5d:05:4a:16:35:93:93:89:be:77:
63:b8:bc:1b:70:2b:7f:ea:03:bf:5b:5e:7d:ac:6a:eb:2b:5a:
49:b5:31:53:0f:3d:e0:d3:61:bc:be:60:47:6d:b9:37:da:57:
79:85:16:f6:50:61:df:2f:b1:a1:d9:bc:df:1e:3d:92:e8:a2:
86:71:66:d8:5c:c4:52:4e:54:71:61:43:e9:34:44:c5:0d:82:
c6:dc:21:e1:75:72:ef:c5:e1:f7:cb:62:ea:e2:86:bf:50:7e:
35:0c:44:33:c1:32:35:e2:7f:a9:dc:b8:1c:b1:cb:71:04:b1:
fc:6f:62:a6:fa:d9:50:f8:aa:f7:67:46:8c:6a:5c:f4:27:20:
7e:e5:44:80:0c:f8:1f:a7:bd:0b:c7:9c:7c:ac:0a:d3:d2:f0:
3a:d7:05:8f:c9:6d:e8:be:01:6f:df:9f:c4:a0:4e:7e:16:bf:
1d:4a:96:27:ea:0e:55:08:8f:3a:4c:ae:3d:8b:97:13:54:80:
94:36:e6:cf:5d:d4:9c:18:63:62:a1:8d:70:7c:7d:0c:55:c0:
ee:0f:b4:11
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNDEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTkyYy1jYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4eECTkme+9D6uzxZOyyEwCKSMzlzjL2hr1OhmdxPa/xzZOKBKK/i5/K/yxO
MReKygyr4mC0YERCL7Lgncv7Zc8xZAO522tizHOhf+RNM8SA5qPH/IT1UeuG4mvk
19F33/4xRd7p2AKlyAKh0QWSTqkmIjP5+qH3C0wFoYh7HKkNpc1oi4AWCkDmCOR9
JmVECTkueLkwLvLoJhCkHSDfGqL4ja6vEXQzcw4LIl7HaurCZGeRnJHSqHvYNa5f
mgzePDJjCd5+SJs+Jng64cTP54CmzwnvvcI4At9HM2iWjQvQYsSThm5v3jPXozqE
I0sZGP8ZOKLcbXv/dH9Cw91IYwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFN4JKlVX
JnMn4QFV6xz75wooIisIMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQTA4NUM1NDZG
NjQ1MTFFQUFGNUFEOTNCQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAKegAASMA0GCSqGSIb3DQEBCwUAA4IBAQAX+6VhMLoSii3Ca2Vf
+Lkx9y67Z+SwVE60kx4oF6EtFm0rMcWaqpaSQLLu810FShY1k5OJvndjuLwbcCt/
6gO/W159rGrrK1pJtTFTDz3g02G8vmBHbbk32ld5hRb2UGHfL7Gh2bzfHj2S6KKG
cWbYXMRSTlRxYUPpNETFDYLG3CHhdXLvxeH3y2Lq4oa/UH41DEQzwTI14n+p3Lgc
sctxBLH8b2Km+tlQ+Kr3Z0aMalz0JyB+5USADPgfp70Lx5x8rArT0vA61wWPyW3o
vgFv35/EoE5+Fr8dSpYn6g5VCI86TK49i5cTVICUNubPXdScGGNioY1wfH0MVcDu
D7QR
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:25 2026 by rpki-client