
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa
File: E0CC264A41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: gPh8W8RbqH/tQ0/7YHg9tHDt6TnMcYNETJq3+Suopyw=
Subject key identifier: C9:E5:D6:0A:F8:ED:69:B0:BE:89:05:23:F2:CC:84:96:6A:31:9F:1D
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29DB
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:23:55 +0000
ROA not before: Sun 30 Aug 2026 16:23:55 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135646
IP address blocks: 2402:e380:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10715 (0x29db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:23:55 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94591b-600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:d8:0c:e5:ac:b7:7e:a2:88:d3:f0:d4:26:
fe:35:82:91:71:71:ab:d6:c9:08:44:e1:13:71:f9:
9e:33:dd:9e:cb:df:87:66:e9:0a:33:c6:a1:35:b6:
3b:98:f7:76:24:c6:9e:de:a5:53:54:ff:e7:d5:53:
a4:3d:bc:f6:0a:63:57:44:c8:02:b8:ff:bc:ab:20:
75:d8:9d:26:4d:d9:67:ad:0d:20:0d:dd:c3:55:3a:
46:14:59:95:a4:b2:e6:2b:1a:7f:85:d2:e4:8f:4d:
50:d1:ee:1f:07:0c:5c:88:90:67:6d:9a:9f:03:fa:
ec:2a:1a:c8:2a:29:6f:3d:00:9c:bc:66:9e:78:30:
29:f3:2f:02:dc:18:f8:8e:72:0a:c0:a0:ed:ca:da:
d0:51:19:ac:ae:f4:83:c4:3f:95:6b:9b:79:49:83:
ec:aa:e8:02:3e:58:b2:9c:f0:17:5f:13:82:d6:0b:
85:02:52:8e:b2:68:b2:e5:36:7b:c6:03:18:93:ee:
4f:85:c4:44:84:e9:c4:08:50:36:b2:cd:d7:ad:5e:
75:fc:d2:10:4f:1a:4b:3d:63:1c:05:ce:74:5f:5d:
eb:37:7d:a1:44:1e:cd:a7:90:59:b5:6b:d7:51:db:
22:4f:0a:29:aa:c1:ea:a8:03:57:39:65:c9:ae:cb:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:D6:0A:F8:ED:69:B0:BE:89:05:23:F2:CC:84:96:6A:31:9F:1D
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:e380:15::/48
Signature Algorithm: sha256WithRSAEncryption
29:57:35:f6:5a:f0:47:5e:e5:47:ee:63:30:88:a2:dc:43:66:
67:d1:6b:93:f4:0c:70:5a:4d:24:d3:63:d7:e5:f1:7f:06:60:
27:2d:28:bf:a0:21:47:44:32:0f:0b:f9:d1:5f:d1:d8:99:3a:
d2:b8:7e:37:14:75:e8:b7:66:b4:9c:2c:02:98:61:bf:cc:9d:
b9:35:9c:78:7a:66:d5:61:a3:df:af:04:99:be:9a:0c:ff:db:
d0:ff:72:09:3c:e4:50:a2:c1:8a:5a:da:69:17:da:38:88:fa:
77:a9:97:b0:87:56:67:98:fc:63:31:ef:d2:fc:1d:c5:4f:df:
43:2b:86:f2:d9:56:3e:e8:fe:36:64:e5:51:a6:c7:dc:75:03:
ec:fb:cc:9a:78:04:de:91:ca:ca:83:c2:a5:1b:e4:cb:a4:1e:
6d:1a:c2:e8:03:ae:1f:d6:70:9b:0b:2c:a1:66:b4:65:d8:9c:
80:74:4a:ea:21:e4:d1:f3:6e:66:76:b4:4f:cf:8d:6c:85:ad:
14:dd:7b:42:ed:74:d3:58:e5:2f:e1:11:a7:59:2b:97:e9:fe:
60:3f:b2:51:45:66:ee:c5:80:0c:4b:f1:df:f3:c4:d1:86:7e:
23:10:fc:a6:42:fa:e6:63:27:3f:57:0e:86:ea:4a:e5:f4:c7:
07:68:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:45:51 2026 by rpki-client