
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa
File: 95E2EDBAB16C11F1A82DDA415E11F970.roa (raw, json)
Hash identifier: F4HsiDo3VynafZmrPWnH3iu8bLrDggJWw++1g655dPk=
Subject key identifier: F9:59:7E:35:37:51:B3:C9:FF:C6:70:E5:07:97:FE:DB:2E:93:93:9E
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2CC5
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa
Signing time: Wed 16 Sep 2026 01:18:55 +0000
ROA not before: Wed 16 Sep 2026 01:18:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138685
IP address blocks: 2403:6200:7602::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11461 (0x2cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 01:18:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aa9ee7f-8d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:81:0a:30:d7:0c:9d:96:0c:fd:25:57:da:
78:ed:46:1a:21:83:6c:cc:c6:bf:cd:20:9b:94:49:
a7:3c:be:87:05:5e:2f:fc:96:c7:49:43:77:29:c4:
4c:b5:a8:b0:35:43:e2:27:a6:b4:cd:ec:6f:86:4a:
29:fe:c7:53:84:fc:cc:b1:d9:7e:48:b2:f7:80:7b:
22:69:61:83:b3:42:3e:43:19:06:4e:1d:1f:cc:76:
a2:88:2f:b8:5a:c4:c4:24:a2:5a:c6:b9:60:9b:3c:
05:d4:f3:40:54:97:bf:3a:61:d3:4d:ad:c1:a0:77:
6c:3e:55:fe:03:34:1a:55:54:5f:b1:94:f1:a7:d9:
92:d5:40:b9:05:d6:53:69:bf:b9:21:9f:bc:d8:cc:
f4:ac:8d:c7:d7:4a:4f:5e:8e:a2:e2:62:e5:42:22:
ed:e6:c7:a5:e2:7d:13:fd:30:5f:1b:6f:cf:ce:14:
17:a1:e7:1a:ee:1c:c1:05:88:0d:b0:15:aa:85:0e:
2d:ea:a4:14:e6:bf:b0:92:24:76:17:16:03:5b:68:
11:75:9d:47:c7:77:3f:0f:63:e5:d7:51:96:a1:b6:
25:4b:b2:3a:a7:29:9c:79:c5:97:98:b5:fb:81:33:
7a:bf:d7:19:50:72:c7:2a:ac:2c:bf:77:68:5e:cc:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:7E:35:37:51:B3:C9:FF:C6:70:E5:07:97:FE:DB:2E:93:93:9E
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:6200:7602::/48
Signature Algorithm: sha256WithRSAEncryption
88:23:0e:ad:04:24:c1:8a:b5:62:09:49:a5:f2:92:80:c3:f2:
a2:d1:9e:4f:6d:72:e9:d5:7d:8d:5b:86:40:e2:78:b0:f3:8b:
2e:54:75:29:8e:db:e5:21:20:2f:4e:19:7a:86:bc:6b:53:04:
72:fd:56:b9:1b:7d:ed:16:38:48:a1:33:72:6c:b4:94:ce:3b:
36:4d:eb:6b:95:f2:ff:82:be:80:77:68:ca:fc:8f:fd:98:66:
3c:2a:55:c8:15:91:d2:83:e0:80:06:f9:ec:d8:6e:52:1c:a1:
83:79:02:72:01:b1:f6:f1:27:3d:b2:c3:4a:81:8a:8c:b0:be:
ed:00:ba:4d:63:35:3b:6f:5c:1f:b9:68:a2:18:cc:57:cd:58:
51:bc:2e:67:8e:3b:1f:85:c1:48:4c:2f:bf:eb:51:13:fa:56:
38:87:ff:69:97:df:24:38:8e:13:e8:05:5c:b8:a6:a3:1f:65:
c2:e6:f5:de:63:17:08:90:70:04:47:68:58:2b:a1:2f:43:ba:
16:0a:32:41:a0:e7:2f:f0:9a:85:cf:c6:d1:61:ef:b2:17:2b:
e7:36:e3:6e:98:22:2b:bf:8e:c8:da:25:84:8d:fe:85:70:dd:
ff:79:23:1c:88:d1:e7:c8:3a:15:da:53:0d:c8:b4:5b:86:b2:
61:4a:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:24:44 2026 by rpki-client