
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
File: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: IexqQv7o69TBjiMIwmdLqEdEgN2aWzI6UMWR5XMZAQE=
Subject key identifier: C8:30:05:FC:FC:BA:26:D7:A8:0A:22:65:8E:C6:04:D5:60:49:96:9A
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A1D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:40 +0000
ROA not before: Sun 06 Sep 2026 16:23:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138333
IP address blocks: 2402:9e80:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10781 (0x2a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d938c-ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:bc:a8:8e:3b:8a:a6:cb:c9:51:ca:a3:c4:
66:51:39:0a:fb:ad:28:9b:7a:17:83:c8:c7:c5:8e:
c8:66:74:6d:07:d4:a8:29:d0:5c:39:e7:0d:ee:10:
89:42:1d:2b:ec:f7:46:df:91:b7:d1:7b:e9:52:59:
a2:55:de:8f:f7:2e:12:8e:49:85:20:81:2f:8c:5d:
c3:a2:90:35:5f:81:38:13:f2:0a:f7:83:74:e6:b9:
90:03:bf:6c:2c:76:0f:d0:06:b3:49:4e:48:0c:c9:
5e:20:ae:6d:f6:b9:87:8e:c0:11:35:bd:80:25:5a:
d5:57:2f:5d:39:50:43:b9:15:dc:75:aa:cd:ca:52:
53:5b:01:29:62:80:b3:63:96:96:c6:e2:b1:94:e0:
5b:d9:07:a7:fe:cb:6b:8c:0a:7a:79:37:21:51:1c:
92:d8:2a:2e:b1:b2:f4:21:05:83:a9:d9:b1:67:a8:
2d:ac:fd:57:75:de:99:fd:04:36:73:05:26:30:66:
06:d6:6d:c4:ee:fa:6d:9d:94:c5:ec:c4:d9:fa:0f:
5f:81:da:ce:9d:d4:a9:82:51:4f:b4:9f:57:39:ca:
27:0a:8c:2a:e0:d8:2c:70:73:eb:7b:ae:9e:a1:7b:
c8:7b:c1:52:52:cc:18:a3:fb:5a:d1:0f:17:bc:f7:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:05:FC:FC:BA:26:D7:A8:0A:22:65:8E:C6:04:D5:60:49:96:9A
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:30::/44
Signature Algorithm: sha256WithRSAEncryption
7f:fa:50:a3:49:48:b1:35:2e:34:12:fc:72:c7:b0:be:24:fc:
02:65:1e:b7:09:32:7b:c0:69:cc:5d:82:f9:e0:2a:5e:55:97:
5c:8e:fe:49:0d:5d:a5:27:4a:56:fb:30:b5:df:1f:6e:97:47:
1e:06:dd:ae:65:40:4c:56:42:5c:5b:9e:55:d4:8f:fd:ed:6b:
95:4a:27:17:b2:cb:25:4f:96:10:e5:dc:d5:4b:9b:fd:0e:69:
81:4f:84:b5:7a:ee:60:1f:39:06:55:7f:81:9e:fb:f5:f1:25:
98:ee:1a:d8:39:d1:cf:32:44:7d:42:cf:69:e3:70:6c:aa:0e:
21:7e:69:1a:42:66:fd:8e:f0:3c:21:cb:8c:9c:29:4f:d6:55:
88:37:97:6c:52:27:e1:0c:81:21:69:88:ce:53:94:70:f7:a4:
4a:5b:cd:18:e8:52:28:a7:59:e3:9f:a3:18:45:d0:7f:51:91:
87:e3:10:95:6e:36:3d:6d:6d:62:83:d7:2f:e1:4b:48:8f:1b:
01:39:91:26:2f:04:c5:8f:07:9c:b9:13:8d:6a:7b:ea:0a:2f:
e0:02:23:e2:30:b4:4d:c3:ad:e0:cc:fb:6f:e2:a3:03:e5:8a:
ba:a7:7e:59:9c:f7:10:c9:ed:f5:e8:a4:7c:c8:4b:32:f3:fa:
7a:b0:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:15:48 2026 by rpki-client