
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
File: 34D73F3E230C11EB825ED82EC4F9AE02.roa (raw, json)
Hash identifier: W7ynGCC0J2vnHiG0FU5+w/LkQiN+XmNL3FBfLW+RNOc=
Subject key identifier: 32:A4:3E:DC:04:F8:5B:E8:B2:98:2C:CA:8E:77:8F:CF:60:22:9C:89
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2958
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:51 +0000
ROA not before: Sat 26 Jul 2025 15:53:58 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141380
IP address blocks: 2402:9e80:57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10584 (0x2958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48eff-e07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:d4:18:aa:74:77:fc:a1:56:c1:3c:b6:5d:
8c:42:8c:2d:0c:a9:57:29:2e:41:3f:be:5c:4d:9e:
a8:1b:47:cd:ed:8e:bc:d4:1a:a1:14:da:23:a8:cf:
55:a6:f8:46:f9:b5:d1:1c:a7:a2:17:f5:a8:f2:a9:
37:78:05:12:6c:96:2b:e0:5f:18:66:ba:db:8e:de:
2e:24:b1:93:cb:ae:3e:5c:c5:55:a5:9c:bd:e0:77:
a3:78:ec:04:ab:49:ca:f5:9e:ed:65:72:6e:3f:57:
2f:3e:3e:6d:b3:df:3b:51:cd:cb:7c:df:bd:9e:bd:
ce:ae:3c:50:b9:b6:d3:85:fc:9a:55:ea:1f:a5:32:
dc:0d:76:c4:c4:7f:b9:d8:3d:99:bb:f8:04:0a:f6:
7e:af:d9:96:a2:43:2f:28:f9:e5:c1:0e:84:90:59:
a6:ee:a3:77:82:fa:67:f3:9b:96:26:9a:3a:67:05:
2b:b9:2a:5e:81:47:45:8a:3f:cb:8f:cd:22:34:1e:
76:25:cd:9b:43:72:06:a1:01:c2:01:61:3a:a2:e1:
ba:8a:d7:c6:01:1c:88:c4:d5:97:c9:5a:ed:06:f0:
76:50:6f:ea:1a:60:9c:ac:ff:90:1a:8f:c2:ed:20:
a6:53:c9:83:29:3d:42:95:23:43:d7:33:97:17:6c:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:3E:DC:04:F8:5B:E8:B2:98:2C:CA:8E:77:8F:CF:60:22:9C:89
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:57::/48
Signature Algorithm: sha256WithRSAEncryption
bc:de:d7:e8:16:e9:c2:10:fa:26:4a:d4:ca:8f:c8:fb:e0:aa:
38:b6:08:9f:4a:95:ac:f8:18:b5:42:90:81:2b:db:aa:d8:dc:
61:a0:6d:c3:50:94:fc:30:11:94:ba:ca:62:3b:af:4d:e7:0f:
c8:6c:f6:b8:b9:30:30:a7:4c:b2:92:e3:86:43:4e:56:d1:9e:
10:07:db:a1:1f:3f:fe:c4:da:18:23:1c:b2:1f:e9:d4:32:01:
23:da:29:f8:5f:1f:2c:2f:6b:1d:25:35:6b:20:b4:0f:38:a3:
26:cb:f0:7f:a5:86:be:9e:d1:17:09:71:3e:a4:9b:58:7d:44:
7d:89:3a:42:47:3d:be:ee:ab:b4:a4:93:65:ab:54:ab:46:9e:
1d:a6:79:d7:83:80:56:3b:0f:62:f5:54:a9:74:c5:5c:2a:2e:
cd:73:76:9d:b3:87:81:66:8d:44:61:59:0c:7f:72:21:60:ac:
f0:79:da:41:99:70:bc:1d:87:e5:00:9c:12:62:b1:97:25:05:
e8:bc:03:a0:db:f8:96:ec:3f:bb:8b:c9:7a:dc:5f:4f:e7:2a:
6e:cf:49:45:29:48:1b:91:ce:a7:34:f8:77:ce:e2:bb:31:30:
00:d2:2c:16:bc:31:67:9f:c2:5c:fb:61:02:c9:b7:ea:49:5c:
c8:88:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:11 2026 by rpki-client