
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
File: 5F92D6C0478F11E9A090265DC4F9AE02.roa (raw, json)
Hash identifier: kkd3iljXvgQGSyF4kDpi+M4poJA2wKc3N3yo1EiAAOU=
Subject key identifier: 42:B1:1F:16:C6:DF:E7:DD:68:91:F0:FF:9A:6B:24:FC:95:23:8C:2C
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A23
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:51 +0000
ROA not before: Sun 06 Sep 2026 16:23:51 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138685
IP address blocks: 2402:9e80:48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10787 (0x2a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:51 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d9397-a092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:c2:2d:b5:45:2f:e9:31:49:22:c5:e6:22:
f5:63:91:e8:f1:ce:33:b0:eb:11:33:b3:40:d7:fc:
0c:13:34:34:9e:65:42:ce:6c:39:d8:e0:16:c0:04:
f7:aa:eb:54:8f:ed:09:c8:f6:82:4f:e0:7f:6e:0c:
a0:5a:7b:51:f8:59:e3:f2:a2:ea:ec:84:10:93:6a:
40:22:03:69:e6:82:fb:38:ae:49:2b:e1:69:37:8f:
a6:e3:d6:7e:72:ca:9e:1a:5c:b1:10:47:3d:c1:02:
8c:92:4e:18:6b:09:a8:5b:00:26:dd:94:9d:f0:a7:
03:9a:a2:11:fb:79:b0:a9:b5:c2:a6:46:76:c3:e5:
dc:29:0d:98:63:25:69:4f:ed:1a:a9:c2:37:5d:e0:
a2:61:3a:4a:cd:dc:69:97:eb:3a:19:61:4b:ee:ab:
4a:5a:2b:d1:3c:b2:c9:a1:f1:d5:f9:94:6e:a7:66:
b5:45:f4:55:07:1d:ab:89:ea:09:e0:d2:58:7b:6c:
cb:71:06:c0:15:2e:c4:8b:bd:0f:c2:ee:6d:5e:ac:
62:62:ab:e1:22:1a:c1:3f:c8:95:0f:a4:5f:18:10:
0d:12:b7:fb:15:24:96:95:4a:2a:e8:59:e5:00:ef:
cc:6d:21:99:11:90:c5:99:9d:4a:81:a5:ac:b5:ae:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:1F:16:C6:DF:E7:DD:68:91:F0:FF:9A:6B:24:FC:95:23:8C:2C
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:48::/48
Signature Algorithm: sha256WithRSAEncryption
0a:74:37:e1:3f:22:cf:b3:5c:e2:25:9e:85:ea:c1:27:72:fa:
a9:66:0c:6e:c7:f7:f8:68:2b:4e:eb:6a:b7:94:4a:f7:ab:ea:
37:30:b2:6f:8f:51:5a:7f:f4:94:d0:23:22:84:ce:3d:54:11:
b5:c8:09:e4:aa:39:3c:37:d5:b0:27:ff:46:2a:3c:97:3d:ba:
e8:63:82:46:14:45:bf:58:16:01:33:10:bd:f5:d1:0f:51:80:
d8:b1:73:6f:98:db:8e:6c:c7:93:00:91:ad:36:4d:f8:58:65:
99:b1:18:aa:ea:20:00:7a:3b:bf:81:3a:ea:9b:e2:10:8c:32:
48:02:8c:c6:00:1b:49:e9:25:01:72:50:52:66:1e:59:2e:a6:
38:ef:be:6b:a6:53:45:01:97:b8:81:1d:77:85:44:15:cc:b4:
c6:44:26:24:d5:1b:76:e6:d9:24:d2:3f:2f:28:3e:a9:14:e2:
ca:bc:54:40:a3:db:8c:f2:51:da:ce:f8:33:f3:43:a1:1e:56:
3f:74:e5:62:2b:c6:a6:7c:f0:4d:d0:a9:03:07:5c:38:2e:61:
ec:25:5c:72:ee:7e:6f:e6:d1:c5:21:b0:16:57:2b:92:ea:f9:
0a:b8:ea:5d:21:cd:53:ea:a2:0a:25:47:7a:54:ee:e0:e3:5a:
10:f8:6c:68
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwOTA2MTYyMzUxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlkOTM5Ny1hMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkmvCLbVFL+kxSSLF5iL1Y5Ho8c4zsOsRM7NA1/wMEzQ0nmVCzmw52OAWwAT3
qutUj+0JyPaCT+B/bgygWntR+Fnj8qLq7IQQk2pAIgNp5oL7OK5JK+FpN4+m49Z+
csqeGlyxEEc9wQKMkk4YawmoWwAm3ZSd8KcDmqIR+3mwqbXCpkZ2w+XcKQ2YYyVp
T+0aqcI3XeCiYTpKzdxpl+s6GWFL7qtKWivRPLLJofHV+ZRup2a1RfRVBx2rieoJ
4NJYe2zLcQbAFS7Ei70Pwu5tXqxiYqvhIhrBP8iVD6RfGBANErf7FSSWlUoq6Fnl
AO/MbSGZEZDFmZ1KgaWsta7rVQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFEKxHxbG
3+fdaJHw/5prJPyVI4wsMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNUY5MkQ2QzA0
NzhGMTFFOUEwOTAyNjVEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAKegABIMA0GCSqGSIb3DQEBCwUAA4IBAQAKdDfhPyLPs1ziJZ6F
6sEncvqpZgxux/f4aCtO62q3lEr3q+o3MLJvj1Faf/SU0CMihM49VBG1yAnkqjk8
N9WwJ/9GKjyXPbroY4JGFEW/WBYBMxC99dEPUYDYsXNvmNuObMeTAJGtNk34WGWZ
sRiq6iAAeju/gTrqm+IQjDJIAozGABtJ6SUBclBSZh5ZLqY4775rplNFAZe4gR13
hUQVzLTGRCYk1Rt25tkk0j8vKD6pFOLKvFRAo9uM8lHazvgz80OhHlY/dOViK8am
fPBN0KkDB1w4LmHsJVxy7n5v5tHFIbAWVyuS6vkKuOpdIc1T6qIKJUd6VO7g41oQ
+Gxo
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:22:00 2026 by rpki-client