
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
File: E03999C441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: +rg/VnppS4uJLDBg+HiOWcILfvWOt6Ee2nNtlxKk0OM=
Subject key identifier: 25:30:07:B0:AF:DE:D3:8B:34:6B:7F:3F:C3:88:D7:C5:FC:83:29:0E
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A15
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:25 +0000
ROA not before: Sun 06 Sep 2026 16:23:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135605
IP address blocks: 2402:9e80:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10773 (0x2a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d937d-5a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:3c:f3:44:d4:ef:0c:62:73:ed:d4:b7:b5:
f1:6b:4b:90:56:e5:89:4d:5b:37:e6:ac:bd:05:80:
cc:7c:f2:c9:73:ee:65:26:fc:f6:7f:ce:18:8d:a4:
88:ae:f9:50:98:0f:2f:4d:d4:7f:fc:b6:9d:3f:2b:
48:cd:dc:cf:d6:3d:d2:16:b5:ea:b9:a2:e6:2e:69:
aa:07:40:d0:36:f2:16:62:96:3e:8a:b4:0a:f7:1a:
97:3b:32:b0:d2:c2:94:e9:8a:b9:e0:c3:e2:21:0f:
8c:3d:df:32:23:d0:0c:17:0c:d1:93:32:bd:94:8a:
a5:cc:4c:f7:36:53:17:09:d7:2d:08:bb:56:1a:51:
ce:66:ba:12:91:fc:6f:26:98:97:62:3b:78:16:d3:
41:ce:78:71:34:e9:4b:ce:f5:70:43:19:23:85:41:
11:67:fc:e0:f8:1e:cb:29:94:43:8b:6a:e6:28:3f:
56:3f:47:fd:9b:c7:5c:78:a8:43:bf:4c:81:21:93:
e3:f4:99:58:13:92:b4:e4:68:a4:cc:cf:60:23:dd:
61:e5:0f:5d:22:37:9b:75:03:20:56:1b:fe:e8:71:
7a:18:7e:17:08:d3:ce:ce:16:17:3a:68:b6:13:66:
ad:8e:07:02:81:d1:d8:be:06:08:d1:11:52:84:e0:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:07:B0:AF:DE:D3:8B:34:6B:7F:3F:C3:88:D7:C5:FC:83:29:0E
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:19::/48
Signature Algorithm: sha256WithRSAEncryption
96:0f:45:36:79:0e:7b:d9:0b:f0:37:48:53:fd:65:b9:12:c8:
a8:e4:bc:fb:03:37:5b:de:d6:a7:14:32:b6:f1:56:0a:6a:59:
33:bc:ff:b3:e0:0a:a6:b3:bf:09:29:59:ab:ec:14:6f:b4:ff:
5e:be:93:57:ed:20:d3:41:3d:ee:36:95:ea:e3:4f:f8:27:1d:
84:fa:a8:a4:dc:1b:a0:ab:b3:19:cf:9c:cd:24:c6:4e:23:87:
de:1c:72:58:f9:1c:75:6b:a3:19:4e:36:13:5c:f6:44:bd:1f:
be:4a:06:c3:50:c3:ad:d1:19:63:5c:b6:74:ef:81:47:1e:96:
33:4b:92:fb:22:c4:b8:cb:bc:9a:5a:ca:9f:79:c6:71:6c:94:
2c:5f:13:1e:58:92:42:1f:41:37:f8:02:a9:2c:74:8c:38:2e:
ab:59:e8:ac:8d:ee:c9:01:6d:c8:05:82:81:c9:83:43:2c:69:
3a:a0:94:77:be:5c:da:d1:ef:77:9d:b6:9b:40:e7:cd:4c:a6:
6f:86:cf:4f:da:a4:ce:e7:97:36:b4:48:0d:25:ba:c2:92:72:
27:08:3d:20:ad:44:c8:9f:9a:3a:97:83:16:8c:25:d3:d1:fc:
7f:b3:c2:a5:9f:32:b2:00:2b:d0:cc:36:e1:b3:64:12:03:62:
3f:12:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:35:17 2026 by rpki-client