
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
File: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier: HzV200bq31cquOIVduvv1A8TY8QHfx1JbnFGQr4HlmA=
Subject key identifier: A4:90:0D:B1:ED:BD:C4:31:BE:06:E7:85:BA:7A:72:1B:A3:E0:01:4E
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A20
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:46 +0000
ROA not before: Sun 06 Sep 2026 16:23:46 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138445
IP address blocks: 2402:9e80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10784 (0x2a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d9392-f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:4a:5d:d5:94:c6:ea:12:bd:f6:a9:97:e5:
3c:d1:a9:7e:e0:aa:11:a9:b0:6e:0c:c3:2e:99:d9:
63:03:97:29:c6:78:5d:95:c1:f6:8e:52:31:c2:f1:
4a:9b:9a:20:09:29:65:4b:eb:63:fd:2a:4e:cf:f1:
94:0b:be:4e:d5:2e:9c:bc:e1:ca:30:d0:6d:39:d8:
cb:08:30:7f:bf:29:48:f3:0f:e2:21:87:48:d9:a9:
df:21:91:9b:97:11:b6:f6:ad:c9:09:ad:7f:62:2a:
72:fe:34:c1:7e:8a:ac:24:8d:a6:b2:d2:e8:12:8d:
b1:1d:a5:8b:1d:b7:2d:3c:f2:f1:b5:71:bd:b7:56:
29:b8:51:d1:c2:8e:da:c4:e8:dc:6b:e3:12:18:a8:
20:5e:36:33:83:1e:eb:8d:56:d4:4e:4f:b2:f5:39:
cf:d6:bd:40:79:ed:ec:e0:23:93:0b:b2:65:8e:60:
6f:e9:73:c5:17:31:a5:ff:15:e1:d9:2e:bd:47:57:
b0:93:85:04:e9:7b:8d:d1:9a:19:46:4d:f4:b0:e9:
73:ff:f0:c4:f2:b9:05:61:e3:18:09:74:a3:ee:ed:
50:03:18:13:fa:10:dd:56:5b:0c:f2:ec:b4:9a:e7:
3f:d2:16:ed:50:96:ca:e6:ff:df:5e:f3:0e:80:fb:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:0D:B1:ED:BD:C4:31:BE:06:E7:85:BA:7A:72:1B:A3:E0:01:4E
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:7::/48
Signature Algorithm: sha256WithRSAEncryption
c1:60:57:09:27:d0:b9:91:8d:1f:c5:37:20:ad:3a:cb:23:0b:
ea:c3:ba:eb:de:1a:e8:bd:86:9d:28:8d:59:86:9b:c6:11:23:
ae:ad:29:8a:b2:a1:3f:da:0a:25:9f:61:b8:5b:be:40:f3:28:
1d:10:71:fa:78:f3:ee:ad:3a:9d:4d:71:d1:59:aa:2a:9d:10:
79:dc:6d:86:e7:b7:71:e7:39:fd:9b:f5:f4:f1:62:35:3b:45:
64:c0:e0:3b:36:3e:06:83:08:08:6c:10:f9:75:9a:33:19:78:
56:77:4e:3c:77:4b:db:15:c8:e6:3e:05:ef:64:07:15:89:66:
43:be:cb:c3:2d:d7:6d:b0:f4:6f:05:de:27:be:ea:24:8f:1a:
83:78:ad:09:58:20:64:d0:a6:7a:bf:5e:07:a7:70:17:f5:39:
bc:f9:c0:58:b5:aa:47:4e:9a:51:d3:d1:fc:e7:de:70:07:0f:
15:22:bb:f0:96:d0:0f:a0:8e:0e:04:46:4c:13:5d:8e:b0:1a:
93:ea:ef:14:7f:5b:8a:ae:ad:53:f5:b9:16:b6:d3:88:9a:ff:
f8:1f:7c:3a:23:b4:96:63:01:fe:14:f3:34:28:a9:cb:11:21:
0d:01:a8:97:8c:57:7b:b2:4b:0a:d5:37:87:14:d5:60:42:a8:
27:6c:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:16:37 2026 by rpki-client