
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
File: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (raw, json)
Hash identifier: obTqIdU8CqBWYcQhFmX82GPkzKN1uHrMLlrdhUuCn5Q=
Subject key identifier: 8D:1F:43:C5:0B:B4:55:68:05:96:EB:AF:F0:AA:C9:7A:5C:8E:57:B7
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 295A
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:52 +0000
ROA not before: Sat 26 Jul 2025 15:54:00 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142540
IP address blocks: 2402:9e80:71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10586 (0x295a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:54:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48f00-54f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:2f:d2:a8:28:a6:5d:ed:52:d9:4c:04:32:
07:6f:65:bf:70:44:e1:8b:36:d5:ec:c6:24:84:2d:
d3:f6:94:a9:4d:0d:69:28:3c:5f:e4:b5:86:10:84:
2e:db:f3:c6:58:cb:fa:94:0a:d8:84:a3:06:fc:88:
8c:b4:77:be:ca:a4:12:dc:40:41:d5:59:33:6b:19:
98:e3:67:09:2d:fc:ca:72:20:e3:88:4f:32:93:13:
66:f6:5f:e1:aa:b4:10:20:c5:be:d7:aa:35:85:4e:
5c:98:2a:af:47:ba:a9:a0:3d:ac:d3:f0:2b:e6:e7:
98:b8:e6:06:98:2c:46:1f:54:8b:b6:31:06:98:40:
af:b6:15:77:e8:06:c5:53:24:36:c1:08:d3:81:de:
5b:a0:53:05:94:09:2e:01:57:fd:d0:2c:ad:6b:8c:
d2:df:db:e7:c4:72:90:ac:c2:5c:2c:90:15:bc:a5:
11:6c:c0:37:de:db:4a:6c:91:c4:94:b3:32:b1:56:
6c:24:ff:17:31:be:c9:9c:cb:e0:bf:ea:89:65:bb:
4f:0c:9a:07:7d:7e:6b:80:41:bb:98:5e:2a:41:19:
6a:9c:b3:f8:a2:37:05:11:17:b6:0b:9c:be:e4:d7:
dd:56:36:3d:5e:67:fe:a4:f4:d5:00:09:03:56:0a:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:43:C5:0B:B4:55:68:05:96:EB:AF:F0:AA:C9:7A:5C:8E:57:B7
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:71::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2e:e7:26:d6:dd:21:6f:b1:31:75:53:1c:b2:d2:22:c8:3a:
d7:44:db:24:6e:f4:2f:79:1b:a3:4c:d8:17:28:4b:6c:54:43:
0d:cd:c8:d3:75:68:eb:ac:ff:fb:4f:3c:81:ab:66:14:b9:60:
4b:84:43:0e:2b:d0:8a:ba:b9:eb:cf:dd:d9:4f:6e:38:2a:6f:
17:b2:75:2c:4c:68:ca:80:f0:79:3f:1c:ea:a1:97:47:5e:0f:
f2:d8:ba:4d:40:38:14:85:77:02:d4:84:3a:83:cc:5c:ed:74:
e4:7d:43:a8:22:e2:5b:4b:fb:69:a1:b4:4f:d7:ec:dc:08:d2:
b6:34:0f:87:e2:cd:3f:8f:98:e8:63:0e:e9:40:f5:0d:5d:fe:
4d:c2:b0:7e:aa:ba:61:21:c4:6e:fc:22:84:fc:3a:12:b7:9f:
da:6a:15:a9:68:05:97:aa:7f:86:f9:7a:fc:32:67:c0:97:fc:
bc:c3:86:20:8a:86:e4:5f:47:88:7b:b8:12:fd:94:e5:4b:3b:
1c:d9:13:a1:3b:d3:7d:1c:5c:f3:95:6e:7b:c1:ed:fb:17:fc:
df:ab:12:a9:0c:4d:58:39:01:12:9a:23:ec:e3:36:ce:e1:77:
0b:bc:20:e5:27:ad:07:9e:68:3c:bc:f8:df:3f:9a:8b:d3:b5:
5c:49:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:40 2026 by rpki-client