
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
File: E2D385AA41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: +6QSF2TYGXENLZiKz9nJFC0VPcVd8PqcY0M2mR+T7K8=
Subject key identifier: A4:8E:85:8B:52:27:EB:C6:05:61:C3:A6:CD:16:84:C4:78:5E:BD:9C
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 29DF
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:24:03 +0000
ROA not before: Sun 30 Aug 2026 16:24:03 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137033
IP address blocks: 2402:9e80:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10719 (0x29df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 30 16:24:03 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945923-40c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:c3:64:52:8a:eb:e3:b5:45:0b:f2:30:f8:
8f:98:c2:66:fe:0a:40:b4:a7:b6:94:ef:d3:74:a3:
b6:6c:1a:98:5e:54:4b:ee:59:e7:17:a2:5d:c4:f0:
2b:be:59:b4:c8:f3:70:c0:2e:bb:07:13:82:4a:cb:
9a:30:0c:0d:6a:84:40:33:3c:aa:85:da:20:08:e6:
11:b0:c2:bf:6a:55:db:8f:9e:e7:c5:24:2b:19:62:
55:02:97:67:6f:2a:ef:33:bf:bb:c6:e1:c1:2c:88:
44:de:3b:fd:dd:03:07:96:76:90:0d:2d:64:fa:d5:
ec:16:52:d8:f6:a0:87:99:7e:4e:16:f1:e3:b0:f9:
2e:a9:23:11:83:d0:26:9a:02:1f:ff:a7:7c:d9:50:
a0:49:1a:45:2c:3a:f7:fa:af:28:7b:1c:2d:95:25:
27:c5:1a:84:8c:07:c2:7f:88:49:78:a2:97:7e:04:
b4:6b:88:0a:96:68:0a:85:76:91:bb:93:12:77:49:
90:3e:37:3e:ff:53:e2:98:56:fd:7d:02:bf:76:f6:
e1:52:91:ba:1c:fb:66:b0:ef:72:5d:67:af:18:51:
bf:d1:1d:aa:09:56:b3:52:75:d1:e8:cb:27:af:59:
0a:68:d2:f1:2f:d5:68:2b:a8:38:93:f3:23:f7:f2:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:85:8B:52:27:EB:C6:05:61:C3:A6:CD:16:84:C4:78:5E:BD:9C
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:15::/48
Signature Algorithm: sha256WithRSAEncryption
35:1d:88:98:f3:7e:65:5b:1c:7a:6f:09:04:e3:0a:91:40:37:
a3:02:fd:5d:dd:23:2a:c8:a5:ec:2b:d0:75:c4:8d:0e:34:eb:
a8:9c:48:b1:91:e6:2d:30:77:0a:17:71:16:73:9a:2e:e4:e6:
b4:14:ae:34:3e:fa:48:c7:f3:9b:fa:7e:94:21:6d:b4:07:ff:
e7:ed:ee:3c:a8:3e:93:0b:3a:91:b6:d8:2c:4c:2c:fb:a0:25:
7d:ba:b0:5f:b2:a3:dd:a1:de:e4:50:3d:aa:9d:af:4e:7d:02:
60:9f:c9:32:a9:1f:44:04:84:69:85:14:24:91:60:73:96:29:
9d:c4:f9:ab:32:94:d0:a2:d5:af:0d:b9:37:9f:af:c5:ce:d9:
26:24:9c:c3:b4:09:41:85:b4:94:f7:12:a3:bd:7a:aa:1d:3f:
eb:72:3a:ed:81:c9:11:17:ec:5e:5f:09:e3:e2:bf:9e:59:ff:
9d:6e:da:55:b2:8f:7b:e1:7c:77:1b:30:aa:66:1f:48:20:51:
fe:10:b0:62:21:6e:cf:c6:29:84:c9:16:37:d8:4a:dd:e7:b5:
f0:d4:80:04:33:0d:aa:f1:61:39:35:d5:45:9e:94:03:b7:53:
29:94:8d:63:24:1c:b0:d3:eb:af:c5:7a:0a:6d:a4:d8:cb:ab:
37:d1:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:32 2026 by rpki-client