
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa
File: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: wP0qG8YEfiC2OHz5nmByAfKLo6DtyRgwIpHHExXSsqw=
Subject key identifier: 7E:A5:90:E8:83:03:98:4F:A5:A3:A7:A7:CC:A3:C8:A2:C7:93:BB:6A
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 293D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:28 +0000
ROA not before: Sat 26 Jul 2025 15:53:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133846
IP address blocks: 2402:9e80:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10557 (0x293d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ee8-3ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:01:07:30:cc:3c:ca:ee:5e:4c:c7:a0:32:
d8:0f:6c:2c:b7:84:c8:2f:f9:78:87:3b:77:10:ff:
22:10:e7:e8:7f:47:ee:c1:b7:5e:4e:a4:04:63:c5:
6f:f3:3a:0c:19:1e:46:a2:aa:e6:19:8f:9d:50:9e:
0f:a0:e7:43:d1:56:54:17:41:6f:96:49:4c:cd:cc:
f4:33:b2:5d:ca:c9:e7:7c:63:d3:34:ba:cc:c4:b7:
70:6c:d2:65:c1:17:60:9f:fb:36:49:27:65:30:c1:
69:86:d1:e8:4a:01:9b:94:5e:7d:fc:5a:a9:29:5f:
5b:f4:7b:15:a9:cf:ed:9e:f4:83:40:be:40:b0:b4:
62:f9:3d:85:77:d4:88:52:93:bf:29:5a:26:95:ca:
3f:d1:13:5d:ae:0f:b8:40:9d:32:86:26:19:f4:00:
dc:55:a6:50:ab:4d:3f:4f:f7:d2:9a:96:65:7f:47:
7e:87:e6:a6:88:d5:35:74:77:b5:ed:72:73:f9:71:
9d:b0:f8:3d:09:5b:eb:01:c5:be:be:78:42:7c:06:
9f:5e:35:7e:51:90:4d:47:4c:50:5b:74:7a:ac:2f:
a8:f7:e4:58:0c:17:29:ff:31:04:ac:f6:ea:30:5c:
66:db:71:a1:0a:81:ad:cf:02:79:22:64:aa:2d:68:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:90:E8:83:03:98:4F:A5:A3:A7:A7:CC:A3:C8:A2:C7:93:BB:6A
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DD8ACB8041C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:18::/48
Signature Algorithm: sha256WithRSAEncryption
80:b6:80:48:92:07:9e:3f:2f:bb:35:c6:91:af:18:5f:af:c7:
fe:90:d1:dc:15:b1:3e:e2:a9:62:6c:e9:17:fe:64:0b:42:42:
e6:26:c8:40:0f:19:b3:2c:05:73:c6:8a:00:4b:a3:43:f7:ca:
e6:8a:11:d3:f6:2a:ad:9f:11:13:7a:e9:0c:95:1f:22:ba:53:
fa:ee:45:37:58:46:e6:e4:a3:96:20:c7:4d:54:02:6a:d1:9a:
2c:ea:a9:9c:5a:7f:68:42:06:cf:c7:19:a8:e5:40:7f:5c:ba:
3b:b8:09:ff:86:7d:2a:5c:92:8f:b6:ff:ba:76:cf:83:d7:e3:
e9:a1:21:af:8c:4e:53:e1:06:33:ba:0a:05:99:1b:56:23:e6:
46:ac:98:cc:0e:be:c2:6d:6d:ae:2d:51:3e:22:ba:dd:f8:49:
51:4c:a0:88:43:9f:e8:7a:14:a2:b3:c9:40:ca:2a:53:e0:b6:
31:6b:43:e4:fc:ae:5b:12:ab:ee:6a:87:cf:9f:a3:34:08:e0:
93:6b:18:79:9f:64:31:af:28:be:19:1b:34:7a:d7:0a:06:86:
62:71:9b:dc:f4:03:f0:d0:b9:6d:62:1c:a7:64:7f:7c:af:02:
99:3d:6d:12:ee:1c:8b:ff:f0:b4:6d:39:d9:1c:87:e9:d8:fe:
d2:dc:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:43:24 2026 by rpki-client