
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa
File: DCC9968641C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: nEK0r+vT+zlIhwx+euf2NsPHOKJUi6WYlFuBqgKLnDA=
Subject key identifier: 93:A9:F8:DC:8A:D0:E7:F8:B7:6A:79:82:53:65:4E:AC:F7:41:B3:32
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 293C
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:27 +0000
ROA not before: Sat 26 Jul 2025 15:53:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132362
IP address blocks: 2402:9e80:20::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10556 (0x293c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48ee7-4ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:53:31:9d:4b:12:1f:89:44:29:b5:84:c3:
56:1d:d0:ba:a5:d8:59:06:cd:b6:59:7f:17:5f:f9:
8c:3e:25:4f:34:3c:4c:0c:f3:ed:91:6a:98:bc:fb:
0b:13:d6:57:b9:3f:77:f2:3a:d9:80:a6:50:05:35:
c9:aa:82:f8:ec:cc:4f:1f:49:6a:3f:64:27:37:fa:
9b:86:34:3a:6e:4a:1b:b9:57:03:db:1b:b4:4f:b6:
27:c8:66:29:0c:80:43:ba:bb:03:f3:31:ff:b3:fa:
46:03:48:f7:28:5f:25:f3:94:02:4a:b2:12:31:a5:
cb:6f:67:d0:1e:b8:00:c6:04:57:1d:f9:57:16:c4:
86:3f:3f:6c:08:e8:1c:5a:81:cd:15:45:5c:31:d0:
55:80:0a:82:2b:ee:b2:c1:ac:69:d7:a0:81:a5:65:
d4:ef:67:02:6f:dc:a9:da:05:d5:4a:ad:cd:32:f4:
b5:a8:f7:09:f8:bd:e4:52:14:d6:20:4c:39:da:5a:
81:70:75:08:ca:be:f4:1d:c3:b3:ff:08:4e:14:0d:
b7:53:01:82:f3:d7:47:71:e0:dc:eb:b0:74:c5:96:
41:47:0c:6d:69:b6:40:3f:2a:60:b0:25:0d:a8:2f:
92:35:f7:ff:8d:06:f6:1c:5e:a1:f5:01:3d:ff:e7:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:F8:DC:8A:D0:E7:F8:B7:6A:79:82:53:65:4E:AC:F7:41:B3:32
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DCC9968641C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:20::/47
Signature Algorithm: sha256WithRSAEncryption
51:83:19:32:f8:a2:8d:b9:fb:5b:94:84:52:ed:7a:41:5e:46:
13:ae:3c:39:63:ba:77:b2:a4:6f:53:43:f7:12:59:50:d5:6e:
e5:e2:ee:fa:c9:a1:a4:47:cb:2f:c1:ae:71:1f:67:11:ab:02:
08:21:c6:1a:d4:14:bf:d3:da:b5:8b:6d:c7:b0:e6:0c:06:80:
a6:62:3d:7c:cf:6e:9c:3c:51:d1:82:42:4f:31:0a:11:2c:31:
00:05:7f:3f:7f:20:aa:a5:b8:f6:2f:ae:d3:98:5e:ff:c1:31:
8b:3d:26:61:d0:a9:79:07:35:1c:7d:66:e4:96:9f:48:8f:a7:
b4:15:0b:2e:ce:e8:e5:86:52:0a:ca:82:6c:37:c3:80:58:e6:
ea:02:ab:4d:74:ba:9f:fd:65:df:b3:d9:7c:c6:6b:7f:85:26:
69:0f:4c:b6:6d:3b:59:ff:55:21:02:51:7f:11:4e:67:ba:a0:
3b:ea:38:cb:ba:eb:66:47:a3:13:c4:dd:2e:3e:71:bd:04:c8:
58:49:91:07:1b:a7:96:d9:b4:67:fc:1a:6a:13:a2:a7:73:3e:
4c:45:09:3f:1c:a9:ef:ac:f3:d1:f0:b7:04:7c:d2:52:af:d0:
8b:8f:43:d7:eb:0a:75:06:3d:d7:e9:2d:61:3c:e7:ab:c2:b7:
0f:70:ae:0e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGVlNy00YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApsZTMZ1LEh+JRCm1hMNWHdC6pdhZBs22WX8XX/mMPiVPNDxMDPPtkWqYvPsL
E9ZXuT938jrZgKZQBTXJqoL47MxPH0lqP2QnN/qbhjQ6bkobuVcD2xu0T7YnyGYp
DIBDursD8zH/s/pGA0j3KF8l85QCSrISMaXLb2fQHrgAxgRXHflXFsSGPz9sCOgc
WoHNFUVcMdBVgAqCK+6ywaxp16CBpWXU72cCb9yp2gXVSq3NMvS1qPcJ+L3kUhTW
IEw52lqBcHUIyr70HcOz/whOFA23UwGC89dHceDc67B0xZZBRwxtabZAPypgsCUN
qC+SNff/jQb2HF6h9QE9/+evIwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJOp+NyK
0Of4t2p5glNlTqz3QbMyMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRENDOTk2ODY0
MUM1MTFFOEJFQzA2RDM2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBJAKegAAgMA0GCSqGSIb3DQEBCwUAA4IBAQBRgxky+KKNuftblIRS
7XpBXkYTrjw5Y7p3sqRvU0P3EllQ1W7l4u76yaGkR8svwa5xH2cRqwIIIcYa1BS/
09q1i23HsOYMBoCmYj18z26cPFHRgkJPMQoRLDEABX8/fyCqpbj2L67TmF7/wTGL
PSZh0Kl5BzUcfWbklp9Ij6e0FQsuzujlhlIKyoJsN8OAWObqAqtNdLqf/WXfs9l8
xmt/hSZpD0y2bTtZ/1UhAlF/EU5nuqA76jjLuutmR6MTxN0uPnG9BMhYSZEHG6eW
2bRn/BpqE6Kncz5MRQk/HKnvrPPR8LcEfNJSr9CLj0PX6wp1Bj3X6S1hPOerwrcP
cK4O
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:14 2026 by rpki-client