
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
File: 41C6F41AB84A11E98246736CC4F9AE02.roa (raw, json)
Hash identifier: Ykb3cSWUq1zXz6vtIrYg8i8stuQYUoYkzZUEWPv7HWY=
Subject key identifier: C3:15:4F:F8:D6:C2:3E:3C:27:77:69:BC:17:17:F9:85:09:B2:53:25
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A27
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:59 +0000
ROA not before: Sun 06 Sep 2026 16:23:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139308
IP address blocks: 2402:9e80:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10791 (0x2a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d939f-4fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:3f:1a:cf:e3:ea:3e:8a:51:b5:89:07:a5:
1e:df:a8:e3:91:eb:4d:f5:ef:ee:db:f5:14:d8:53:
6b:fb:fe:a2:73:69:1e:5c:b1:fc:a1:32:2f:0a:49:
9d:29:99:2b:37:fb:1d:7f:47:82:2e:e7:37:f8:20:
4c:7d:e1:a3:09:20:e3:0c:35:f2:aa:39:3d:28:1f:
96:af:9f:3d:59:2b:c2:81:fa:b5:4c:82:0c:fb:ef:
28:2e:56:34:d6:f4:31:53:16:34:a9:c7:ff:de:ca:
b3:05:67:7f:ac:70:5e:4a:1e:06:e3:67:8c:70:e8:
b1:86:dd:88:ec:0f:00:a8:ce:41:e0:6b:6f:cb:a1:
6d:66:9c:70:aa:26:10:72:03:11:83:8f:10:fc:94:
5b:26:06:6e:e7:20:e3:3b:82:00:b2:21:61:00:b1:
bd:ff:89:3a:31:c1:aa:43:bd:03:e1:d0:d8:06:c2:
dc:94:67:2f:fc:cd:04:64:31:e6:a9:b9:69:ff:ce:
1f:88:e3:9d:9c:1f:8f:ca:23:71:39:c8:d9:56:c3:
94:27:af:2a:d5:c0:3f:43:b6:c0:96:38:eb:a5:c7:
8b:69:b7:cd:64:c1:9f:24:d2:f1:3d:64:33:af:c6:
ed:ab:7d:98:82:98:d4:e8:61:29:33:74:33:da:04:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:4F:F8:D6:C2:3E:3C:27:77:69:BC:17:17:F9:85:09:B2:53:25
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:100::/40
Signature Algorithm: sha256WithRSAEncryption
74:6f:d1:73:58:b7:5e:1b:53:ce:3a:68:b4:7d:d8:a1:6e:d9:
32:d3:55:62:01:5f:c9:02:c7:f4:99:d7:be:78:c6:aa:c1:88:
31:ce:1d:fd:24:ef:77:f4:47:78:6d:e3:63:67:b2:e1:92:f0:
64:12:37:23:cb:81:80:16:3f:8f:30:a9:31:25:1e:83:0d:0d:
cf:0a:df:cc:32:7b:da:c2:69:b0:5f:b8:ca:98:1c:8b:10:2e:
aa:e5:48:45:81:ac:1e:ad:12:89:40:80:cf:0f:1f:98:c6:bc:
83:49:97:24:de:b1:fb:16:4f:b4:19:8f:06:8f:30:a0:95:22:
be:36:d1:cc:41:fb:27:37:45:2c:ab:02:6b:e9:bc:51:24:a0:
07:fd:6b:a9:26:69:a1:62:b8:48:0b:34:68:7b:58:56:25:a8:
ed:85:a0:5e:ee:e5:4d:32:c4:9c:52:bb:e0:e8:e0:57:55:56:
06:6c:d2:bb:6c:59:49:0a:54:fb:f2:6b:76:99:4e:d2:6a:49:
6d:a6:1a:3c:a9:0a:53:15:b1:65:15:b5:70:b9:e1:c1:a5:ea:
8e:a5:26:e9:55:92:68:1a:36:fc:66:37:9a:63:25:db:1a:76:
8a:5b:c8:56:71:84:de:74:e3:4f:01:bb:7b:23:d5:19:f1:61:
22:fe:80:12
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICKicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwOTA2MTYyMzU5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlkOTM5Zi00ZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1G8/Gs/j6j6KUbWJB6Ue36jjketN9e/u2/UU2FNr+/6ic2keXLH8oTIvCkmd
KZkrN/sdf0eCLuc3+CBMfeGjCSDjDDXyqjk9KB+Wr589WSvCgfq1TIIM++8oLlY0
1vQxUxY0qcf/3sqzBWd/rHBeSh4G42eMcOixht2I7A8AqM5B4Gtvy6FtZpxwqiYQ
cgMRg48Q/JRbJgZu5yDjO4IAsiFhALG9/4k6McGqQ70D4dDYBsLclGcv/M0EZDHm
qblp/84fiOOdnB+PyiNxOcjZVsOUJ68q1cA/Q7bAljjrpceLabfNZMGfJNLxPWQz
r8btq32YgpjU6GEpM3Qz2gQ79QIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFMMVT/jW
wj48J3dpvBcX+YUJslMlMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDFDNkY0MUFC
ODRBMTFFOTgyNDY3MzZDQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAKegAEwDQYJKoZIhvcNAQELBQADggEBAHRv0XNYt14bU846aLR9
2KFu2TLTVWIBX8kCx/SZ1754xqrBiDHOHf0k73f0R3ht42NnsuGS8GQSNyPLgYAW
P48wqTElHoMNDc8K38wye9rCabBfuMqYHIsQLqrlSEWBrB6tEolAgM8PH5jGvINJ
lyTesfsWT7QZjwaPMKCVIr420cxB+yc3RSyrAmvpvFEkoAf9a6kmaaFiuEgLNGh7
WFYlqO2FoF7u5U0yxJxSu+Do4FdVVgZs0rtsWUkKVPvya3aZTtJqSW2mGjypClMV
sWUVtXC54cGl6o6lJulVkmgaNvxmN5pjJdsadopbyFZxhN50408Bu3sj1RnxYSL+
gBI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:12:22 2026 by rpki-client