
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
File: E1944C7441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: CZ32Q8No023uizSujAVT5gEdxeIVS3ket6kb1kcRzIY=
Subject key identifier: F2:EA:11:EB:AC:D0:C8:2D:59:12:61:B7:92:59:B8:5B:51:1F:F7:D8
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2943
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:33 +0000
ROA not before: Sat 26 Jul 2025 15:53:38 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136559
IP address blocks: 2402:9e80:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10563 (0x2943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:53:38 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48eed-67ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:a7:e1:37:4d:0c:c9:72:a8:1f:ad:13:a8:
33:6c:49:9e:95:cd:f0:51:7f:87:a8:d0:f7:be:5d:
8c:df:32:df:40:1b:29:59:b8:bc:3a:4a:7f:19:5c:
da:db:b0:ee:75:d7:8f:2d:f9:4c:3a:c3:db:66:56:
1b:eb:f6:46:19:30:a0:10:e5:59:40:84:4f:ff:8d:
02:dd:2b:46:a8:c6:30:df:09:5c:a2:d6:aa:e1:43:
0f:6b:ce:e6:8b:0d:9c:23:83:b3:b1:bf:b7:b5:50:
85:ad:8c:e0:9d:a5:2c:30:d7:df:c6:89:1c:e5:55:
eb:65:94:d4:e0:0a:d8:a3:37:af:ad:15:89:88:cf:
6d:95:ec:9b:28:e7:7c:63:f7:14:51:56:3f:8a:e0:
f9:8a:59:b8:33:2a:76:dd:fb:79:79:6c:b9:44:07:
0f:67:30:18:ee:17:26:b0:4a:df:94:db:d9:7b:6c:
7b:57:1e:4f:03:94:ab:a3:7d:e2:8f:cf:bd:c6:f9:
3e:a0:dd:c1:a2:69:d7:12:e0:f0:33:8c:ab:c1:bd:
18:d2:6f:0b:6a:90:a5:d9:32:7b:e0:e2:22:ea:b2:
1f:6e:e6:a1:93:49:3f:27:25:a3:f5:28:1e:b6:da:
74:4e:a8:44:8a:02:11:b9:03:14:e3:61:bb:39:d3:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:11:EB:AC:D0:C8:2D:59:12:61:B7:92:59:B8:5B:51:1F:F7:D8
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:16::/48
Signature Algorithm: sha256WithRSAEncryption
d2:9c:29:78:33:1c:33:a7:15:21:ed:7d:d0:ee:bb:50:42:4b:
75:48:60:f5:a9:d3:11:02:67:36:0a:b2:80:f1:ac:68:ec:45:
5e:5c:7b:5f:37:b2:1a:f3:43:e9:72:c9:10:73:4d:40:1a:b1:
35:70:89:f6:81:5d:78:3d:76:9a:b8:ab:23:37:50:90:85:5a:
97:3c:ed:9a:66:53:20:68:25:98:03:97:d4:84:97:b9:db:92:
54:b9:b5:1e:f3:f5:a4:28:ca:24:ad:c5:d1:c7:d6:bd:dc:2a:
42:dc:8b:e3:ca:5a:22:9c:22:d9:a3:82:70:fe:63:19:6c:f3:
59:4d:0d:6b:e7:0c:45:42:c6:da:11:90:60:9a:a9:86:bc:c5:
4d:88:9f:dc:53:e2:2d:f4:be:77:97:fd:b7:2b:ee:a0:1f:9a:
31:09:86:95:42:fe:b4:12:0e:d3:33:18:e6:6c:69:03:2c:b5:
b5:5d:bc:79:46:c1:a9:4a:67:33:61:c8:ca:9f:1f:9d:d5:de:
ab:aa:b2:dc:36:25:8a:a3:f7:fc:26:f2:4d:dd:c3:77:d8:ff:
6c:fa:57:83:b0:3d:a6:5f:32:6e:fd:57:c1:79:6a:7b:12:18:
78:62:06:1b:96:e7:e7:eb:20:25:7f:55:5c:08:bf:7d:b5:1b:
21:3b:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:41 2026 by rpki-client