
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3494EF9604AB11EB8AAF5923C4F9AE02.roa
File: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (raw, json)
Hash identifier: mi+n0Q4jzq7lcwPc2tybuDAiPWItkMvWyzTgNED0L24=
Subject key identifier: B3:CB:D6:8A:54:BE:25:ED:E8:43:B3:3F:97:FD:60:B9:D9:7B:3B:EF
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A2B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3494EF9604AB11EB8AAF5923C4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:24:07 +0000
ROA not before: Sun 06 Sep 2026 16:24:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141223
IP address blocks: 2402:9e80:53::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10795 (0x2a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:24:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d93a7-b586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:4d:c1:ac:03:02:30:6d:13:b5:dd:62:42:
13:2c:7f:d8:61:2f:7f:e6:5d:12:ea:96:3c:28:cc:
3e:85:8b:d9:7a:20:a8:49:38:59:53:a8:51:9c:bc:
e3:ba:1e:ff:35:d2:98:cf:ed:3d:9a:3d:4f:81:4d:
10:97:18:d1:94:b5:e3:9d:64:b7:bc:0a:9d:fa:72:
12:3f:83:bc:4e:06:d8:01:82:6d:d6:7b:bd:2b:e4:
7c:3b:19:43:e0:b3:d7:60:de:91:20:a2:fc:46:54:
06:0d:2f:26:01:ad:71:3b:b1:c9:27:8f:6a:f0:4d:
5b:0d:1f:5d:03:b2:80:7e:ac:83:74:79:60:36:84:
d0:40:c0:2f:bb:dc:4f:ba:f9:e6:48:98:c1:a0:93:
ec:be:07:3e:d6:d6:c0:7d:80:79:e3:96:bc:3c:41:
2f:39:cd:5a:62:8e:b2:40:bb:c5:04:f2:8c:a7:be:
df:11:7c:a0:df:e3:c5:c9:7e:99:99:d5:76:bc:fc:
ed:88:96:43:c0:8e:da:40:51:57:dd:df:db:51:16:
8a:67:11:14:ae:1c:df:de:73:78:1f:c4:c8:48:80:
cd:60:6c:1e:fd:f3:43:b9:fd:0a:34:8a:af:ae:a3:
59:f2:bf:52:14:49:75:71:ba:35:d4:da:ae:c3:a4:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:D6:8A:54:BE:25:ED:E8:43:B3:3F:97:FD:60:B9:D9:7B:3B:EF
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3494EF9604AB11EB8AAF5923C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:53::/48
Signature Algorithm: sha256WithRSAEncryption
bf:d4:c1:0b:62:52:5b:af:89:53:59:65:87:50:11:da:b4:66:
9a:8d:de:2a:52:a4:7b:56:d0:31:92:c4:31:72:a7:be:bb:01:
1c:3e:59:89:c5:08:80:70:07:3c:fa:8c:b2:a9:7b:8a:76:54:
77:05:07:92:55:fe:47:be:05:94:25:e3:4d:67:97:15:ba:e8:
df:64:6f:85:d3:b9:bd:03:b4:85:fd:e7:69:1a:13:95:8d:2b:
60:29:ac:43:a5:bb:d2:cb:94:8c:a8:e9:36:ee:e0:c5:01:eb:
34:c5:1a:f5:9a:fc:34:44:6e:61:28:38:ea:13:ed:97:d9:ea:
eb:22:1c:82:fb:25:0b:4b:63:f0:ee:75:2b:7a:98:dc:fc:07:
0f:59:da:fb:be:03:05:a7:b2:1c:da:b1:15:a1:25:72:f1:bc:
b4:a5:07:df:d4:57:c8:9a:8c:79:a1:98:20:cd:38:ca:8f:ed:
72:4b:88:35:f1:36:7b:59:bd:fe:f3:6e:81:6a:ff:fb:9c:09:
8a:f3:31:fe:bd:00:da:67:ac:a4:8c:bd:2d:80:1c:5c:06:2e:
72:55:39:39:3a:bd:dc:9e:da:4a:17:0f:d3:d7:c6:54:3c:97:
60:ba:b7:ed:fd:9f:20:37:95:82:c8:5c:cc:61:dc:d1:5d:f0:
2c:73:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:57 2026 by rpki-client