
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
File: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (raw, json)
Hash identifier: 4YwUQhJTDWjalWYZWhvDTmeV5yu0GH7bVHs2sdEB9k0=
Subject key identifier: 31:F4:4D:EE:9F:0D:C6:E9:C1:94:1C:D1:71:63:DB:7C:F1:72:81:F3
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2955
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:48 +0000
ROA not before: Sat 26 Jul 2025 15:53:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140934
IP address blocks: 2402:9e80:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10581 (0x2955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48efc-4037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:8b:31:67:f8:f5:93:3e:c5:80:71:c2:35:
7a:a5:d3:d1:e0:00:80:12:26:13:0f:1f:fe:42:cf:
90:a0:a4:0b:43:99:07:67:93:9b:e2:21:27:1b:6b:
48:b5:f6:1a:b9:51:70:41:ce:74:3a:5b:f9:fe:6d:
1d:b4:e4:25:91:4c:28:12:3e:87:e5:df:74:d7:ae:
8e:fc:a0:e4:0a:55:71:41:98:88:07:ec:52:6f:5a:
ab:d0:9d:84:d0:a3:af:8e:30:ab:f4:bc:2c:10:4c:
1c:35:a7:cb:01:8d:3d:74:2e:90:91:0e:f6:7b:ca:
57:0d:94:66:bd:01:f0:91:b8:f3:bd:53:2d:0f:9c:
6b:01:80:10:f8:1c:d6:13:dc:6f:4e:51:ba:15:6b:
7c:09:81:7a:b6:57:c3:05:9d:07:fd:08:57:09:29:
01:e6:23:02:06:06:74:e3:2e:45:2a:f3:df:5e:74:
46:3d:bc:bc:5a:a7:df:2a:fe:d4:ea:9f:ce:c7:12:
8c:08:22:83:b1:64:20:1a:e9:14:1b:ae:59:98:67:
63:8c:0e:7e:94:8f:4f:ff:38:83:a0:32:12:8a:2c:
31:36:45:aa:75:7b:6d:31:13:c6:5f:9e:01:ce:13:
0a:18:b9:27:41:f1:c0:82:47:d8:dd:79:f3:dc:53:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:4D:EE:9F:0D:C6:E9:C1:94:1C:D1:71:63:DB:7C:F1:72:81:F3
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:23::/48
Signature Algorithm: sha256WithRSAEncryption
cc:04:98:99:49:65:11:88:97:cf:18:5e:b5:03:ea:03:95:b7:
94:93:08:78:d7:ed:76:5c:21:7f:9d:be:2f:33:ea:96:1b:b6:
81:75:fe:63:2c:c5:ac:7c:3c:97:8b:61:5c:b7:96:ad:2a:cd:
fd:fa:91:34:b9:a5:e5:f4:bb:ef:a7:86:a3:17:57:ab:8c:d8:
00:3d:9e:43:27:69:79:7f:2d:c0:00:69:2c:df:26:e1:25:a4:
44:d4:91:56:1c:7c:b0:45:a3:5e:47:9e:3d:91:a9:48:db:8c:
c1:19:d2:2b:54:86:ba:ca:d2:a6:70:0c:bb:87:cb:2f:35:14:
92:6b:bf:df:61:83:ea:08:2b:8e:08:39:36:60:ef:16:32:dd:
1a:fe:db:ea:3a:65:61:d8:7e:c3:08:12:a4:d2:da:36:28:e5:
83:ba:bc:22:32:e8:22:44:d0:7d:56:8b:7f:66:c6:8f:50:e6:
0b:a8:87:e2:b0:1b:83:ea:33:c1:73:2c:ed:ff:c0:d3:9b:37:
94:e5:42:8b:b4:5c:da:54:30:1c:15:bf:11:14:d9:0e:51:d4:
ee:06:27:55:d4:31:f1:d0:ab:c4:0a:f3:53:49:f9:a1:5f:25:
15:50:c7:5d:5e:0c:6e:37:ca:ce:5b:77:f4:c1:4b:b0:48:b8:
ad:f2:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:44 2026 by rpki-client