
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
File: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (raw, json)
Hash identifier: /NNyu/GMJvDrGEYwtUyGw++t/gs8gXnDYggNxPePaXw=
Subject key identifier: CE:45:B8:3D:7A:8F:EE:BE:DD:F7:80:8A:27:A9:E2:3F:4D:9C:6B:30
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A21
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:48 +0000
ROA not before: Sun 06 Sep 2026 16:23:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138564
IP address blocks: 2402:9e80:42::/48 maxlen: 48
2402:9e80:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10785 (0x2a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d9394-1acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:47:9f:de:f8:64:75:63:68:c9:bf:e6:21:
65:08:3a:30:7f:52:ff:f6:f6:83:bd:94:7d:b5:b5:
85:4c:5f:8b:98:1a:ac:76:96:d7:76:e1:3b:22:04:
62:6f:a3:4a:df:e9:1d:a5:85:1d:ce:aa:c6:3d:53:
83:7d:87:3f:60:2e:11:d2:7f:ac:27:e5:d3:3b:65:
e1:82:6a:67:4c:5f:00:78:6f:95:83:9b:06:54:b4:
e2:3e:af:66:3a:b1:c2:c7:1a:e7:59:f4:9f:58:ca:
04:19:05:fa:2b:99:5c:50:e7:89:5e:82:00:3d:a7:
8b:01:47:b3:c2:ec:a3:90:d3:cb:56:c9:8e:35:85:
2a:e2:fa:b8:a2:03:29:0d:92:0c:a9:fa:83:ad:f8:
84:3d:6d:ba:29:6f:47:9b:cc:f9:fe:30:68:20:8d:
ab:f7:53:93:06:99:4a:17:eb:5b:d5:13:04:2c:f8:
9c:f9:b2:40:5a:a6:20:b5:20:6d:74:9b:4e:a2:a0:
83:af:b8:00:4f:b9:2f:09:09:22:cd:4e:cc:b2:a0:
f0:23:dd:41:ac:4f:94:5c:fa:c6:98:7c:26:d5:22:
ea:dc:f8:39:fb:52:cb:01:cd:9c:5d:85:ae:5d:12:
a4:2a:b0:35:ab:a6:e1:e1:a1:40:66:93:86:62:21:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:B8:3D:7A:8F:EE:BE:DD:F7:80:8A:27:A9:E2:3F:4D:9C:6B:30
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:42::/48
2402:9e80:a00::/40
Signature Algorithm: sha256WithRSAEncryption
4f:0b:b7:66:ee:6d:df:81:89:4a:0f:26:21:59:12:7d:1e:91:
1d:07:8c:d2:5c:6d:02:a8:a9:8d:dd:9d:9d:f4:8e:a2:4c:3e:
ab:c0:30:c1:c9:1a:98:a9:96:5d:98:f9:9a:e3:21:50:a6:5f:
34:a8:01:0d:a1:82:04:9d:c3:46:b5:9a:ac:89:64:71:28:8c:
07:2e:4b:bf:4b:11:36:f5:58:11:bd:53:99:70:b5:e2:5c:1a:
87:31:6e:53:b1:95:e8:61:f3:4f:02:91:c8:a4:8a:0e:e1:bf:
05:5c:8c:e6:83:af:e6:ca:22:bd:69:af:7f:dc:91:a3:b7:10:
29:2d:a8:1a:aa:64:56:85:33:ff:08:3b:55:42:77:f5:ee:66:
18:62:0a:9d:76:28:da:6f:5d:14:45:04:19:35:8c:c1:bc:44:
ba:fa:fa:5f:ab:81:a9:58:4f:bb:a3:64:47:49:81:78:d0:98:
df:31:6b:54:71:89:86:48:13:9a:81:23:8f:a2:57:f9:02:a7:
39:5c:b3:64:e7:d8:02:cb:21:3d:7f:70:77:98:f5:3d:bc:3d:
c2:8a:09:6d:4c:bf:ff:a8:da:11:dc:76:a1:c4:36:6f:3e:25:
85:1b:b3:1e:ae:ba:b1:3c:e9:3a:7e:6a:f9:91:52:8d:e1:d1:
d9:36:d3:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICKiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwOTA2MTYyMzQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlkOTM5NC0xYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh65Hn974ZHVjaMm/5iFlCDowf1L/9vaDvZR9tbWFTF+LmBqsdpbXduE7IgRi
b6NK3+kdpYUdzqrGPVODfYc/YC4R0n+sJ+XTO2XhgmpnTF8AeG+Vg5sGVLTiPq9m
OrHCxxrnWfSfWMoEGQX6K5lcUOeJXoIAPaeLAUezwuyjkNPLVsmONYUq4vq4ogMp
DZIMqfqDrfiEPW26KW9Hm8z5/jBoII2r91OTBplKF+tb1RMELPic+bJAWqYgtSBt
dJtOoqCDr7gAT7kvCQkizU7MsqDwI91BrE+UXPrGmHwm1SLq3Pg5+1LLAc2cXYWu
XRKkKrA1q6bh4aFAZpOGYiHpOQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFM5FuD16
j+6+3feAiiep4j9NnGswMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNzdDOThENDZD
OEUwMTFFQTlGRjgwMjdBQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAAjARAwcAJAKegABCAwYAJAKegAowDQYJKoZIhvcNAQELBQADggEBAE8Lt2bu
bd+BiUoPJiFZEn0ekR0HjNJcbQKoqY3dnZ30jqJMPqvAMMHJGpipll2Y+ZrjIVCm
XzSoAQ2hggSdw0a1mqyJZHEojAcuS79LETb1WBG9U5lwteJcGocxblOxlehh808C
kcikig7hvwVcjOaDr+bKIr1pr3/ckaO3ECktqBqqZFaFM/8IO1VCd/XuZhhiCp12
KNpvXRRFBBk1jMG8RLr6+l+rgalYT7ujZEdJgXjQmN8xa1RxiYZIE5qBI4+iV/kC
pzlcs2Tn2ALLIT1/cHeY9T28PcKKCW1Mv/+o2hHcdqHENm8+JYUbsx6uurE86Tp+
avmRUo3h0dk2068=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:41:47 2026 by rpki-client