
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
File: 2F36F25EFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: 2pdFhd9WqBi5yxIloYI8RA3RRjeo8IMs/GO3mQmzTnk=
Subject key identifier: 08:04:92:99:CF:98:5F:4F:25:57:99:BD:9C:37:84:35:60:EC:38:83
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A1E
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:42 +0000
ROA not before: Sun 06 Sep 2026 16:23:42 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138358
IP address blocks: 2402:9e80:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10782 (0x2a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d938e-4fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:68:bb:01:45:8e:64:a8:60:46:8d:e3:3d:
ff:69:e1:d1:e4:a5:49:e0:76:b8:66:b0:ee:32:e2:
50:cc:e9:29:79:ef:d8:b6:cd:b4:fe:28:6e:01:6e:
34:2e:7b:6c:b0:ee:9a:6c:33:75:08:b1:51:61:ef:
2c:a0:fb:23:0b:27:df:cc:06:c2:57:47:e5:9f:a6:
0c:e7:02:1d:22:48:36:76:ba:fd:6b:01:0c:2a:a1:
b5:2e:4a:55:60:5e:9b:bb:fe:4e:5f:93:ce:19:25:
b5:2b:2d:0c:c2:1a:fb:95:04:6e:d9:2e:a4:b0:d5:
31:db:d4:6d:7f:06:c3:55:7f:f2:84:e8:c7:83:46:
e1:5f:cf:0c:44:05:0b:87:a5:25:03:d0:36:e4:59:
d4:41:db:06:f5:b0:eb:2b:e8:06:69:be:57:eb:c6:
b4:c2:a8:ba:ff:57:6f:23:13:04:1a:fc:5f:ac:07:
d2:ac:67:db:b0:5c:09:65:a1:be:14:33:e3:ae:aa:
5b:eb:1a:2f:71:01:c5:6a:b4:f1:06:72:16:45:df:
4d:2e:42:f9:a9:7c:85:8e:11:67:70:eb:73:fb:64:
c3:a0:65:c1:24:35:83:e0:25:69:2d:ab:ba:49:7e:
84:d7:ac:85:27:7e:79:b1:f2:1b:12:73:94:4a:f4:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:92:99:CF:98:5F:4F:25:57:99:BD:9C:37:84:35:60:EC:38:83
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:28::/48
Signature Algorithm: sha256WithRSAEncryption
3d:39:af:18:99:72:4c:12:b5:5d:70:f3:14:59:7a:60:db:d0:
58:7c:94:24:a9:22:c1:7d:66:69:75:c4:f5:64:5a:58:b8:14:
77:3f:e6:1c:8a:c3:db:4c:54:98:72:a6:9d:ff:e2:d4:72:4c:
72:a5:0c:41:d8:65:e3:62:cf:35:d9:a6:d9:57:25:41:08:98:
f2:ae:53:5e:44:69:a1:09:38:5b:da:55:d0:ed:41:9b:cc:fa:
aa:1a:0a:d1:f6:92:dc:de:0c:0c:3d:4d:64:bf:5a:16:b4:f5:
af:3a:93:be:25:11:f0:0e:f5:38:01:6e:66:6c:db:06:ab:ae:
bd:05:09:62:34:85:90:f4:da:55:74:ee:e8:04:1b:9b:58:26:
cb:a4:ff:0b:6a:d1:7f:b5:6b:3b:73:3e:25:f1:2a:00:f0:92:
39:cc:83:e0:26:e4:b1:e3:cc:74:1d:f0:1a:7f:6b:dc:20:eb:
6b:48:e8:10:df:5a:a2:80:ce:20:4a:76:70:eb:8d:04:a5:c2:
a5:70:df:60:2f:ec:f6:38:01:ac:65:af:f6:07:5c:5d:0a:92:
28:3f:81:06:df:56:3d:b4:97:6d:2e:73:12:42:a7:35:92:86:
52:8e:fd:c2:eb:15:09:48:8f:4e:62:e7:22:70:84:39:9f:25:
0a:30:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:22:17 2026 by rpki-client