
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AFC59224604711E9BB8C0349C4F9AE02.roa
File: AFC59224604711E9BB8C0349C4F9AE02.roa (raw, json)
Hash identifier: oPlOJVvZxzvPy4Or0sYZKXXX1vJlFZM4s22GRdMvZww=
Subject key identifier: CC:D2:08:2C:07:E5:C0:F5:18:7B:7A:68:7E:03:10:21:F4:EE:8E:05
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29EA
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AFC59224604711E9BB8C0349C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:25 +0000
ROA not before: Sun 30 Aug 2026 16:24:25 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138992
IP address blocks: 2402:9e80:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10730 (0x29ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:25 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945939-690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:72:0a:cb:4b:eb:c0:4e:61:5c:74:17:6d:
b8:66:d3:c0:d5:96:42:36:aa:c7:91:08:62:01:1a:
52:d7:85:94:9f:a1:d9:e7:a0:9a:fe:37:80:e0:6d:
58:30:f4:78:9c:ec:14:57:7a:1e:57:a4:b9:8d:47:
c0:1d:cd:bf:38:c0:e8:27:83:51:e4:e6:28:39:fb:
30:34:14:1d:dd:0d:f0:d0:ee:4f:b8:d4:cd:43:c3:
3e:e5:ef:99:e5:b1:1c:61:bf:55:ee:c8:83:1f:76:
10:83:f5:e1:17:1c:03:01:74:ad:f8:ac:88:ee:c6:
14:57:44:ff:2e:99:46:57:7e:d7:3d:47:d3:62:7a:
6a:09:2b:a2:33:2f:60:2c:b4:a4:db:9c:49:46:3c:
f3:42:84:db:5f:78:bb:d6:73:20:0e:68:bc:91:ce:
c1:9b:dd:fb:e8:83:ee:03:ae:fd:75:e1:a5:3a:51:
9c:26:cd:78:dd:fb:20:7d:98:50:dc:3f:65:c6:fe:
a4:a5:b6:db:3f:78:02:4d:7c:da:cb:44:b2:4c:4a:
64:6e:85:87:6e:e2:9b:19:47:1e:aa:54:1f:07:c7:
92:9b:b7:75:bf:0c:a6:0c:9b:45:5d:27:2b:20:44:
01:5d:c3:0d:77:1e:5a:89:70:35:c6:cc:9f:87:26:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:08:2C:07:E5:C0:F5:18:7B:7A:68:7E:03:10:21:F4:EE:8E:05
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AFC59224604711E9BB8C0349C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:49::/48
Signature Algorithm: sha256WithRSAEncryption
7f:45:5d:2e:c2:ed:4c:df:74:f9:57:93:f3:e6:f2:ab:93:a7:
95:52:59:5c:07:fa:61:fb:ad:fa:c6:bf:40:ba:7c:50:a8:07:
2f:83:be:13:09:76:aa:6b:2f:02:9f:85:dd:91:cb:35:d8:53:
6e:25:bd:83:29:fc:7f:76:a6:f0:9d:77:04:85:04:34:34:e7:
19:52:66:0b:1c:e6:48:61:cd:b6:f9:43:15:0e:75:9e:d1:c0:
be:12:da:70:35:c3:2a:a5:bf:53:f0:66:9d:bc:df:10:d3:e7:
c0:a2:3f:46:db:e2:77:91:58:11:bf:71:6e:dc:67:42:37:39:
40:9b:4f:2c:18:3a:c7:6b:df:9b:05:ea:7e:ed:3a:d9:bc:23:
42:50:07:e1:f9:fc:98:f0:90:e7:c1:f6:74:00:4c:37:64:34:
ea:30:7d:27:0e:34:94:e7:5d:31:4b:ab:9e:04:12:8a:af:b2:
7b:3c:9c:a2:8a:8b:d5:86:c3:d1:bb:c7:e8:32:f3:82:71:4c:
35:63:2a:5a:5f:9b:8a:ee:44:4b:19:c7:ea:1e:8e:1b:3a:99:
e9:0d:fc:60:f8:30:17:c3:ee:73:f9:8f:3e:6c:34:d7:33:de:
0f:7b:3c:9b:e0:7f:af:b5:c7:1f:bd:e9:84:27:ec:cc:77:3b:
da:1c:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:38:00 2026 by rpki-client