
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
File: 406928720A2411F0A2D02B4AC4F9AE02.roa (raw, json)
Hash identifier: V926R1grUMLnwt4aUalBK1wvPzImqymloPbVN3AU9Ss=
Subject key identifier: 40:55:6D:53:6D:10:1B:CB:68:8D:37:FC:A5:A3:FD:C6:DF:6C:AF:6B
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A3F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:24:45 +0000
ROA not before: Sun 06 Sep 2026 16:24:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 30058
IP address blocks: 103.196.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10815 (0x2a3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:24:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d93cd-b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:f7:25:33:b4:46:a5:43:97:21:b1:2f:13:
47:e3:35:d6:70:4b:3f:52:40:02:c6:1d:59:fe:35:
68:a5:12:06:54:dd:14:6e:db:59:46:d2:9d:d3:a8:
d3:86:e1:09:e5:af:43:80:61:93:50:5a:0a:a2:65:
17:35:b0:7f:7f:6f:c9:62:cd:55:b1:59:79:88:c8:
cb:ac:cc:fe:f1:bd:68:e4:e6:1f:22:9a:ac:a6:8c:
15:19:03:3b:ec:b9:02:be:c6:83:7b:de:d9:ac:e5:
f8:68:26:8c:9a:b9:09:25:75:4a:e2:7d:05:e2:81:
a9:4d:55:19:25:43:22:dc:96:f5:ad:8b:00:66:31:
d9:c1:92:a9:14:78:f9:9f:1a:6b:80:c6:4d:31:75:
30:8a:d4:b7:74:a6:42:27:d0:db:18:9f:d8:4b:58:
1e:b1:f4:dd:48:f5:52:b8:0b:2e:57:ff:12:1b:c6:
ce:32:69:ce:59:a0:6f:62:29:d4:f5:6a:df:70:aa:
98:0b:56:33:04:7d:47:70:3e:c3:b8:fb:73:e2:da:
15:09:0a:dc:5a:29:7e:82:ba:ab:24:c2:27:fb:09:
25:87:41:04:30:a0:a5:e7:02:79:2e:a7:49:a0:c9:
26:0f:35:bd:1d:d9:be:35:e0:c2:b4:c3:94:81:5e:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:6D:53:6D:10:1B:CB:68:8D:37:FC:A5:A3:FD:C6:DF:6C:AF:6B
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c6:ff:96:70:f8:db:a4:1f:5d:13:62:6c:cc:85:c9:1c:79:
3d:ef:39:2f:d5:fb:7f:98:c4:d1:94:f1:cb:4a:36:a4:c1:d4:
63:f1:1e:59:e2:79:86:97:44:3a:b4:65:77:df:4e:c5:13:14:
b7:64:a2:b0:f1:77:26:2d:a8:6d:2c:17:4e:42:36:f1:80:a0:
c8:f4:d8:6e:90:a7:7d:a0:f9:9a:67:0e:20:09:a6:a3:61:76:
0c:4b:25:36:72:8d:4f:f9:c4:b2:49:06:ae:a0:5a:35:a1:58:
dc:e5:69:ab:13:83:96:e2:ea:05:9d:a1:7c:8a:7a:b3:92:92:
d2:f0:98:a3:2b:ff:49:09:88:8c:75:93:40:79:58:8a:fa:94:
e7:8c:08:10:af:b6:6e:04:92:32:53:4a:80:03:54:f2:ff:fc:
3f:af:8d:4f:31:c1:77:32:80:fc:08:93:b8:81:54:39:85:7f:
ee:d6:e7:e7:77:c1:53:77:00:df:20:3d:da:6b:8a:4d:6d:9e:
09:10:78:13:73:8d:7e:ec:ac:4e:a1:de:9c:18:44:c5:47:a9:
06:f7:1b:76:a1:51:6c:65:6b:1b:93:d3:42:09:59:b0:d7:d5:
38:bf:6f:2b:6c:0b:4f:3c:5a:5c:27:b1:6d:df:84:ca:7e:d9:
24:4e:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:47 2026 by rpki-client