
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
File: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (raw, json)
Hash identifier: 2lN9TZyMZQ2nA/0ZjWsmAb0k5NO201OchSvoC733B7I=
Subject key identifier: 54:EC:60:17:E5:7B:9E:56:12:DC:58:70:14:70:4B:3A:91:E7:4D:BC
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2959
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:51 +0000
ROA not before: Sat 26 Jul 2025 15:53:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142420
IP address blocks: 2402:9e80:72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10585 (0x2959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48eff-fcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:50:f1:ab:d1:e4:e4:76:19:b7:50:8a:46:
09:31:d4:6a:bf:4f:ad:da:26:3c:0d:4e:41:ce:a4:
2d:31:02:a3:eb:0d:5f:fc:3c:56:a7:5b:14:e9:99:
f2:f1:3d:ca:c7:70:72:fc:55:5d:1b:c8:24:be:09:
d8:84:6d:cd:82:21:7f:2a:c4:94:d9:44:38:4d:73:
d7:cc:c9:68:97:dc:d5:99:a3:92:87:6d:1d:0e:26:
a6:9f:46:58:5a:32:73:90:c8:5a:c4:55:63:66:1d:
08:c8:88:91:d9:f8:6e:2c:32:ab:77:bd:3b:c1:fb:
32:04:61:16:57:c3:db:ad:7d:dc:c4:87:c2:fa:7d:
f4:93:4c:bc:c6:92:20:33:fa:2e:98:47:ee:16:e6:
d9:70:a4:cf:2a:e5:be:19:ac:7b:51:f8:c4:b5:d3:
1f:8c:90:18:34:3f:e8:7e:46:6f:34:cc:4a:f8:f0:
bd:de:12:80:2b:ba:fe:31:9a:bb:c1:67:94:23:09:
17:91:38:51:f4:f6:d8:60:9e:82:b8:52:76:a3:63:
ef:f2:2b:b3:d9:c2:a6:a3:ac:06:45:46:f1:12:2b:
be:ac:f5:74:c5:1c:29:4b:1e:89:e5:67:6c:3a:db:
96:84:77:fc:d9:90:80:fc:d8:26:1d:ea:a3:14:fc:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:60:17:E5:7B:9E:56:12:DC:58:70:14:70:4B:3A:91:E7:4D:BC
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:72::/48
Signature Algorithm: sha256WithRSAEncryption
2e:27:00:b4:4c:6d:b8:21:40:c0:ac:d5:2e:7b:6a:f0:14:05:
2a:76:76:5a:f4:68:aa:db:69:aa:dc:c2:ef:8d:97:fc:8e:00:
09:99:e8:8a:67:a0:99:b2:8c:af:55:30:e5:81:99:b9:ea:63:
19:f8:a8:da:c4:cd:e2:f2:40:a2:48:d0:1c:3c:19:59:55:64:
dc:73:40:7c:83:6f:df:3c:8e:ae:79:4d:85:20:01:a1:41:23:
07:a3:30:55:c6:a3:3b:95:25:49:5f:8e:a5:2e:c7:4b:c3:fa:
e3:6c:c3:f0:68:3c:3a:43:76:4d:4b:4f:81:aa:61:82:68:e7:
75:12:4e:a3:29:dc:b1:c5:11:4a:96:5e:19:b0:12:91:a1:c4:
1a:18:28:ab:2a:2e:fd:f4:67:c6:fa:26:34:51:5a:39:ce:bf:
9b:55:8e:2f:d0:d9:4c:a8:38:f6:0d:e4:c9:e9:b8:7f:3a:99:
73:7a:16:5c:e8:e4:c3:47:64:20:25:d7:76:7a:3c:1d:8a:a9:
1c:83:ef:8c:3b:d6:0a:32:2a:2b:84:c2:d0:8f:58:29:8d:31:
b8:b8:5e:68:5a:9b:63:7f:a8:25:39:62:7c:fe:ca:c9:43:9c:
3a:34:f3:87:bd:93:b9:e5:65:68:ec:4d:d2:e4:ce:4f:b7:33:
fc:fb:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:58 2026 by rpki-client