
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
File: 41C6F41AB84A11E98246736CC4F9AE02.roa (raw, json)
Hash identifier: LLehUcFhfa4SPyjVj95yDZpP4SAhUPMkxQbrMpPDidI=
Subject key identifier: 69:62:23:C8:CB:CC:03:2B:DB:D0:AC:9A:28:1B:D8:5D:7E:E7:F2:3F
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2952
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:46 +0000
ROA not before: Sat 26 Jul 2025 15:53:51 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139308
IP address blocks: 2402:9e80:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10578 (0x2952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:51 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ef9-d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:e2:17:9d:1d:c6:ce:5a:c1:db:0a:bb:9c:
ea:ab:27:b4:26:fb:60:e7:9e:5c:80:9d:31:3f:de:
1d:b5:57:a7:e0:97:05:1b:52:cb:89:26:4b:c9:84:
8d:89:f6:93:09:23:10:c8:0a:7b:57:4a:94:ca:9e:
80:59:62:6d:b2:64:ed:ab:11:65:09:25:fb:03:96:
d1:98:1b:ab:c2:c2:f3:cb:a0:27:79:8f:50:db:47:
13:fd:43:05:2d:9c:7b:f7:d4:c3:72:95:06:a0:da:
86:3e:58:e3:f6:22:7d:e8:14:70:64:29:bc:5d:e9:
83:d1:f9:9c:9e:00:c5:a6:77:8a:6c:e9:73:a6:28:
58:18:dd:86:39:06:99:23:3b:54:c1:f3:21:2a:f2:
fd:51:cf:17:f1:ca:a2:54:4c:3b:e9:b5:c0:5c:74:
56:7d:31:62:3f:50:e3:b2:ab:a7:36:78:99:4a:60:
72:b4:04:46:b4:49:09:eb:0a:94:d8:a0:36:ea:c0:
9d:c4:0c:88:24:4f:05:dd:b6:9c:5c:cd:18:38:df:
74:54:39:8f:7b:24:45:40:31:bf:1a:a9:2e:62:af:
20:d0:f6:39:99:af:f6:e5:6f:a2:af:dd:5a:73:39:
2a:64:6c:cf:7f:02:6e:a8:98:35:7c:43:11:7c:ae:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:23:C8:CB:CC:03:2B:DB:D0:AC:9A:28:1B:D8:5D:7E:E7:F2:3F
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:100::/40
Signature Algorithm: sha256WithRSAEncryption
61:2a:d5:77:7e:61:b6:26:e5:b9:4f:e6:7e:bb:06:ac:c6:bb:
af:0a:ec:d9:03:5e:b0:b8:8f:02:ec:92:61:05:2e:fd:e6:12:
00:4b:60:02:4d:3b:e9:aa:ad:f4:7a:da:af:d7:d1:3e:d0:1a:
85:a0:b9:a8:9f:f2:be:e0:74:df:19:b7:dc:c7:03:9f:9e:e3:
f8:2e:5a:a4:38:d0:74:91:79:21:96:bd:5b:8a:64:a6:f2:65:
67:01:b8:13:1e:a7:ca:9f:f9:27:35:fc:57:42:3c:da:03:e9:
22:a7:d3:2b:76:db:41:67:9f:d1:e3:25:32:2a:c5:34:c7:61:
9f:9f:ee:5d:ba:96:43:38:77:b6:10:16:59:4e:4a:0a:0f:2a:
c4:83:cf:10:32:83:ee:03:45:45:27:8d:0f:4d:1f:44:09:0e:
cd:bd:25:dd:0e:fc:70:11:a6:62:ec:38:f1:a6:6b:63:94:f6:
bb:5a:ee:46:27:59:62:7b:af:94:a4:e7:fe:c7:ef:cb:8e:8e:
59:ae:3d:7e:4e:a2:97:de:77:4b:bd:23:dc:a2:c9:fd:60:54:
6b:6c:be:e0:5d:d6:21:c2:b6:9b:10:21:d5:6d:ff:8b:6d:cc:
39:80:4e:d5:b7:de:57:d3:c1:aa:de:41:e5:ec:bd:e7:9b:81:
cd:0b:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:35 2026 by rpki-client