
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
File: DC28826E41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: +DBRmDmnRfAEqmxpp4ZREEdyR9Gr2sCzQnv98zVFFmY=
Subject key identifier: AC:7F:7B:EB:D0:5A:A3:07:21:BD:6E:81:AC:4F:E1:01:2F:71:E1:AC
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 293B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:26 +0000
ROA not before: Sat 26 Jul 2025 15:53:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132352
IP address blocks: 2402:9e80:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10555 (0x293b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ee6-3cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:a4:85:66:e4:91:22:5d:84:cf:72:0c:80:
10:aa:51:1c:25:80:8e:1d:00:7f:84:d0:8e:c3:e5:
92:c2:48:46:3c:b7:33:31:69:37:89:cc:04:9a:bf:
f4:25:fd:bc:42:5a:3f:c9:2b:f3:34:50:a6:6e:7b:
32:8c:7f:2a:38:24:da:f1:2f:7d:40:fa:57:1b:86:
97:36:23:d0:1b:5e:48:f8:12:c9:b9:61:7e:47:67:
95:78:76:2f:04:b8:0c:b2:c7:b1:53:d0:a1:a7:47:
54:ab:ed:77:b0:5b:a7:0c:41:c8:9d:c9:bd:c9:10:
5f:30:9b:ff:95:0d:34:f0:36:b5:62:c4:2e:5e:e1:
78:08:b5:34:6d:ae:15:5b:38:60:d6:9d:9f:50:27:
9f:ca:66:5d:e8:24:50:78:d4:e7:3e:1a:52:2c:64:
9c:6b:1b:10:fd:95:d7:e7:4b:75:22:fd:6f:1f:d9:
dc:6e:a4:fe:fc:52:83:e5:f0:f4:ad:5c:f6:43:47:
7c:16:88:80:29:be:88:11:d6:88:f9:a1:43:2e:de:
8d:91:d4:56:44:c2:41:07:ef:07:a6:43:98:5b:32:
ca:19:11:89:b2:45:58:71:75:bd:d8:82:75:30:e6:
cf:9f:3b:02:a0:ca:48:5b:54:f8:3e:e6:36:de:55:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:7B:EB:D0:5A:A3:07:21:BD:6E:81:AC:4F:E1:01:2F:71:E1:AC
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:22::/48
Signature Algorithm: sha256WithRSAEncryption
6c:52:ff:1a:7c:f1:5e:ce:7d:49:52:5e:95:4b:4c:30:83:34:
5a:85:e8:80:23:53:5b:27:53:fa:16:7c:c0:53:3a:33:49:62:
68:ca:ad:6f:29:73:e2:0b:75:79:b2:48:bf:c5:ae:4c:98:e2:
9c:a0:ba:4c:53:c0:0d:27:2b:ca:d7:01:b3:36:56:7c:dd:66:
2d:1d:19:63:43:66:4a:b1:9c:49:2f:23:0a:01:41:71:c9:97:
00:cb:52:eb:5c:82:4c:db:01:f5:25:d9:b8:26:53:86:7b:8b:
f2:71:15:17:8f:51:e1:6d:94:99:1e:96:15:0a:6b:4a:1f:0c:
00:4b:e0:21:3b:88:c9:eb:99:b7:bb:0d:ec:63:e4:e4:1e:9c:
51:1a:ec:c0:72:22:86:73:2f:99:29:a8:b4:12:2c:67:f3:07:
8b:c6:d8:1d:0f:8e:18:33:5a:00:1c:ff:50:c1:a6:46:c4:f2:
a1:5c:a8:45:e2:9b:d6:3e:42:ec:b7:d1:16:fc:3e:11:13:e5:
06:6b:1a:4f:0c:65:97:b6:1b:dd:06:33:28:05:04:22:56:89:
f9:87:01:37:c5:3c:87:ef:d6:99:19:d3:da:24:43:f2:1e:f6:
22:ef:f3:a7:e9:87:f0:67:55:4e:b8:b2:fa:00:6b:bb:99:aa:
91:5a:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:55 2026 by rpki-client