
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
File: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (raw, json)
Hash identifier: ZR7J+T1IhEZnzvfl6+09bB4XBL8DLt+Alz2Ka14p6/M=
Subject key identifier: 81:F4:0C:B1:47:10:AF:49:1D:E5:69:D5:1B:19:A2:6E:7F:6D:93:84
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A2A
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:24:05 +0000
ROA not before: Sun 06 Sep 2026 16:24:05 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140934
IP address blocks: 2402:9e80:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10794 (0x2a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:24:05 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d93a5-7cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:c5:75:4c:7b:09:aa:97:6f:fa:e4:ca:3f:
9c:3b:b8:d0:21:d9:19:75:33:61:b6:d3:98:b3:f2:
c5:8d:19:78:66:26:7b:be:8e:f9:f1:ca:02:74:5e:
cd:8b:02:c5:ca:72:cb:c5:f6:8a:fd:0f:11:97:3e:
1b:e8:a4:21:c3:0a:84:ae:2f:f1:8a:22:00:7f:78:
94:c5:43:71:4d:f4:c8:c5:26:0d:13:ca:3a:c3:9f:
d3:de:38:4a:ef:76:44:74:0b:87:a9:91:62:ee:62:
17:a9:3e:9a:e4:f1:8f:1a:37:49:e7:98:35:ed:2d:
81:33:04:3f:3e:fa:7d:10:b2:89:b1:df:20:c6:9a:
fa:fb:55:03:a7:ed:5d:d6:0b:d8:19:8b:2d:93:d1:
aa:6e:59:f6:e2:d1:49:83:e1:d9:fe:9f:1c:c2:ed:
a4:65:c6:b4:99:6e:36:72:74:25:88:9e:88:71:e9:
42:f4:5c:00:5d:e5:d8:90:dd:6b:36:39:b2:63:62:
da:5a:f8:a6:cb:02:f0:f9:6f:73:02:f1:06:f0:79:
1a:d3:f9:6c:6c:70:eb:c2:fc:2f:3e:25:fe:58:d4:
bf:e9:a9:4f:62:2f:e7:e1:1f:27:25:c8:c8:92:79:
dd:01:c6:ee:41:f6:b8:e6:3a:23:f4:41:4f:e6:32:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F4:0C:B1:47:10:AF:49:1D:E5:69:D5:1B:19:A2:6E:7F:6D:93:84
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:23::/48
Signature Algorithm: sha256WithRSAEncryption
0b:6d:4e:ca:46:47:d7:3e:ab:ae:f5:2a:4f:25:c7:53:38:e7:
56:79:43:63:4c:57:1a:88:44:de:90:e1:99:a9:4a:11:d4:3b:
27:71:41:7a:50:c0:fe:0e:a9:4e:fe:e8:8b:fd:9e:13:9c:67:
82:8d:f8:67:40:f6:df:c7:cc:ef:b9:53:d7:d5:81:a5:d1:ea:
ae:c4:c2:2b:3a:bb:81:68:f9:0d:54:be:b2:fb:4c:01:9a:4a:
3b:f8:c5:43:c3:11:9e:ee:92:7f:16:69:9c:b2:07:e5:10:e6:
12:d6:8d:ae:b1:85:2a:b4:0a:9e:d1:fb:48:43:bb:e4:0f:b8:
2d:23:64:bc:24:0a:fe:31:c3:7a:15:b4:0a:24:18:5d:53:1c:
a1:6e:16:ca:66:cb:84:d4:4d:f0:c1:f9:62:53:10:48:3a:9a:
b7:08:c0:6c:6b:88:d2:3e:bd:0f:7f:c4:0a:83:98:0a:9e:ec:
61:b3:1a:31:ff:c8:fa:00:85:6d:49:79:0b:1b:f2:79:25:29:
69:44:83:4c:0b:64:ad:07:ac:8e:56:3b:fb:92:2a:52:cc:ee:
ff:08:a2:d5:84:52:b9:57:a0:e9:f4:c6:1d:0e:45:63:68:2b:
01:08:94:d0:37:24:92:b2:90:e1:fe:6b:f3:e3:ca:7e:f6:5f:
91:3c:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:06 2026 by rpki-client