
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
File: 350965D2992511EC94DB646EC4F9AE02.roa (raw, json)
Hash identifier: EY1N7InDIyqnetkTStaRXwDvT46EKQk+OUcdv2JKkq0=
Subject key identifier: 99:00:87:61:53:FE:E2:51:BD:BB:C0:63:5F:C6:AE:26:0E:0C:60:B4
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 295F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:57 +0000
ROA not before: Sat 26 Jul 2025 15:54:06 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149500
IP address blocks: 2402:9e80:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10591 (0x295f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:54:06 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48f05-18bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:52:19:07:8a:7e:4a:79:7b:20:a8:61:c5:
8e:98:a7:f4:2d:0c:75:e5:66:45:5a:c2:71:8b:89:
cc:cc:4d:b1:08:0b:32:f5:0b:a9:c9:e7:be:79:57:
d3:40:ee:cb:8c:0e:0b:e9:b2:a4:f5:9e:0d:7c:9a:
8b:d3:d0:f5:11:10:52:d3:ad:be:67:89:13:e3:ea:
4d:5b:22:0f:34:ad:4f:c0:10:a7:f5:d6:62:93:50:
77:44:83:cd:a6:49:d9:59:34:19:4c:da:f6:8b:63:
13:0f:a9:83:f3:da:00:d6:c3:cb:c0:e3:54:76:9e:
02:b9:8b:9f:42:75:96:c3:b0:54:3c:5b:66:39:65:
65:97:ba:80:e8:de:f1:0a:3b:bc:e9:1a:12:97:40:
d5:19:17:28:eb:c2:f5:fa:3d:e6:0f:4a:c4:c8:17:
94:6d:0b:5c:be:40:67:a6:1c:03:df:b7:1a:99:3a:
09:62:35:07:89:7b:61:ff:7d:8e:b1:98:89:87:e3:
6d:1e:2a:91:39:f1:8d:83:4a:19:94:0a:1e:80:8d:
2c:30:7d:fa:e0:02:be:b1:b5:b2:5b:5e:ed:ef:17:
e9:a4:16:73:e8:69:ae:8b:18:ae:d5:2a:41:aa:7f:
f1:bc:fb:57:13:1d:85:a7:f6:12:5b:ef:03:83:69:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:87:61:53:FE:E2:51:BD:BB:C0:63:5F:C6:AE:26:0E:0C:60:B4
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:17::/48
Signature Algorithm: sha256WithRSAEncryption
bf:f6:71:78:fb:ce:f3:5e:a5:44:c0:4d:f4:4f:fa:13:4e:3c:
ee:f0:88:72:1b:91:d6:2d:2c:3e:a1:55:49:10:83:99:23:9d:
57:ef:08:db:cd:f0:00:09:37:02:99:d0:2f:c3:ab:28:99:c6:
4e:44:a3:8a:25:f7:ec:da:92:9f:ad:08:c0:84:0b:6c:ce:28:
79:ea:43:c5:fc:03:3b:62:8f:ec:31:31:2b:b1:e1:79:c0:4e:
4a:c2:b1:31:02:8f:1e:db:2a:03:aa:96:c0:91:e5:34:c6:57:
ee:3f:42:08:21:16:32:9d:cb:46:4f:5c:9a:02:61:19:8e:86:
0f:16:05:31:a7:68:19:8f:b5:77:ce:b3:ee:4e:fa:89:94:64:
3a:5a:be:f4:0a:83:14:34:12:b7:98:bf:78:ac:9d:ac:86:e3:
96:1c:5b:39:5e:2b:be:58:e9:8e:ef:da:c4:db:0e:68:47:52:
f1:d1:1a:df:18:4b:1d:9f:12:cb:d6:3f:9d:a0:f2:98:63:7f:
cc:8c:4e:85:f2:1c:a5:c3:86:2e:80:a4:35:eb:ad:ad:7d:53:
f7:12:94:33:ba:d7:ee:d7:d6:f1:dd:2e:3f:88:14:29:a6:da:
c0:21:5f:3c:23:98:9e:2c:c7:b1:54:18:96:a3:ac:d7:77:1d:
05:77:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:04 2026 by rpki-client