
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
File: DC28826E41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: PI19ySy//cURMK9JrwMqJQfiAThXhjiB8UNhHkRKqPU=
Subject key identifier: A1:FA:E7:3E:34:DC:3F:41:D4:24:B3:B2:B8:85:F6:AA:C1:DA:9B:62
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A10
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:15 +0000
ROA not before: Sun 06 Sep 2026 16:23:15 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132352
IP address blocks: 2402:9e80:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10768 (0x2a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:15 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d9373-8c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:83:53:4f:07:2e:e2:c3:0c:c2:d7:b7:f7:
ad:6b:d6:27:af:45:3f:b4:f6:d3:e4:92:1c:1a:64:
c7:a0:5f:46:14:b6:5c:b5:0d:f7:0d:d2:56:32:cf:
42:da:27:21:a5:b0:3f:7d:ac:fa:9f:42:44:ba:b8:
49:c5:ef:8f:d2:82:4f:11:50:48:65:29:ec:eb:c4:
61:8e:a4:eb:d0:73:3d:fc:8e:a2:d3:7e:5f:11:05:
2f:9c:fc:a3:b3:8e:86:f5:11:dd:53:0c:0a:5f:75:
c3:ec:e7:14:78:34:c1:cb:20:fd:64:91:33:c0:d0:
0b:f6:91:f4:51:11:36:71:13:e5:4e:f0:bd:d8:ad:
f9:ac:d1:23:ea:d9:1c:1a:5e:62:fb:cb:00:1c:c4:
2a:a1:56:9f:16:d1:80:25:e8:d6:96:a2:32:f0:9f:
bb:e9:a2:6f:59:f1:1d:c5:b2:9a:73:67:1c:d0:56:
6f:af:09:86:ce:f0:f5:e6:49:af:0a:4f:1b:fe:4e:
04:0c:94:b9:05:69:2b:c5:45:e2:2f:32:6e:ae:24:
0d:01:00:10:21:4a:c3:1a:3f:7c:6c:42:0f:15:cd:
ef:1f:c3:44:45:8e:0e:ed:b0:d8:54:f0:ce:23:b1:
67:54:31:5f:a8:a2:aa:9c:e1:0c:c0:70:b1:fb:27:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:E7:3E:34:DC:3F:41:D4:24:B3:B2:B8:85:F6:AA:C1:DA:9B:62
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:22::/48
Signature Algorithm: sha256WithRSAEncryption
4e:13:25:79:5c:3d:e5:92:d5:63:06:70:88:6f:a8:63:ab:af:
01:66:e4:f6:9d:ef:79:b3:04:8e:11:44:40:79:9b:51:51:86:
95:ac:f0:c3:ec:a2:eb:02:98:90:47:5f:2a:87:8b:10:c2:05:
b9:44:3f:95:62:c4:a4:87:08:b9:7b:b5:61:fa:ef:f6:9e:0f:
bc:0a:d1:f5:cd:e0:0c:cf:c5:c6:12:0b:77:94:54:56:21:4d:
9b:c7:14:a9:0f:a9:39:b9:1e:ef:56:e1:af:8e:7a:61:78:63:
2e:9b:59:14:c3:bd:b0:85:72:e1:07:49:53:01:e8:46:21:32:
80:eb:76:19:16:56:ce:28:76:a3:2c:46:3c:7a:fc:7d:0e:bd:
5b:66:b3:9d:a2:d6:e8:05:cf:2e:e8:43:48:39:f5:86:b0:9e:
aa:45:b3:44:a1:0f:d5:7f:09:7b:03:1e:f2:8d:af:19:b3:41:
b8:a7:90:41:02:eb:f7:0d:c9:2a:f6:1c:f1:92:bf:f7:19:94:
2e:f9:47:b7:12:60:b2:f7:f8:a0:02:9f:4a:77:eb:7e:ed:48:
01:46:3b:0c:c0:e1:d3:d3:49:cb:f7:51:22:8d:ab:02:bf:0c:
ab:d0:6a:05:22:02:c8:49:d1:3d:0f:0c:bc:cb:a7:5d:3b:60:
5f:1b:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:07:15 2026 by rpki-client