
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File: EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier: aolUGBMBuOiTQrabFR5p4Usnc+cD2G421hLPnzbONMM=
Subject key identifier: 1C:EC:DE:29:33:B8:02:CA:1F:F9:B0:A7:6A:F7:32:2C:29:65:7C:81
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 295B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:09:53 +0000
ROA not before: Sat 26 Jul 2025 15:54:01 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142561
IP address blocks: 2402:9e80:200::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10587 (0x295b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:54:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48f01-7864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:c5:14:d8:e4:aa:53:19:6e:c4:b6:aa:72:
ce:81:78:a9:36:81:ae:5a:72:65:54:ba:69:73:53:
91:40:5f:f3:62:83:67:ce:37:da:0b:8e:0c:96:0b:
9e:fa:0e:e0:f5:e3:e4:b6:c6:00:17:a6:37:7c:24:
e8:88:d7:8d:a2:12:0e:da:63:63:7a:a1:26:16:49:
90:d7:c2:8f:67:1b:65:64:e4:8b:8e:c9:35:17:63:
6f:0f:0e:99:80:99:d7:7c:49:c5:a0:cc:44:67:68:
65:e6:5c:e0:22:cb:cc:bb:d0:1a:be:6b:b3:9f:06:
a6:bf:6d:4c:74:a6:54:79:14:b6:ef:31:ee:82:2a:
c3:ef:92:f9:33:30:7a:3a:1e:19:c4:ea:19:b5:22:
d1:b0:02:e9:7a:eb:b5:75:bf:53:25:d0:a7:2f:0c:
4a:67:2e:39:64:ab:34:9c:e3:b7:ad:ca:af:e6:19:
79:32:91:30:47:77:44:98:27:51:52:33:4a:c0:3d:
df:94:20:4c:41:5e:fa:6f:48:e1:23:0f:1a:19:fb:
ec:b6:0d:62:4b:28:58:a2:1b:25:41:87:d1:cc:8c:
2b:23:02:32:29:6f:61:4f:e1:4a:6b:18:d7:8a:f8:
15:53:ed:4b:9e:ea:69:e3:53:5b:0c:7c:4a:d0:7f:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:DE:29:33:B8:02:CA:1F:F9:B0:A7:6A:F7:32:2C:29:65:7C:81
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:200::/44
Signature Algorithm: sha256WithRSAEncryption
64:64:51:04:b9:36:23:ce:46:61:05:33:c2:2c:aa:1f:94:9b:
dd:07:c2:74:8a:51:24:c8:6d:88:10:48:24:71:76:ff:c9:c1:
60:e6:4a:17:0f:8d:11:fc:75:33:75:50:8d:b0:83:ea:a5:52:
65:f6:32:de:49:99:e5:89:da:0c:d5:43:c2:ac:c6:e3:35:e4:
d9:8f:c7:f2:ef:7a:28:01:e8:c6:96:5e:ca:d6:1a:7d:72:df:
c9:30:0c:36:88:cb:68:65:b7:ef:09:53:f3:4f:11:48:57:27:
e7:33:9e:5f:c7:3e:4d:19:c8:42:d0:37:f6:aa:0e:90:48:52:
38:75:ea:84:30:58:23:aa:32:0c:ef:22:da:1f:01:44:fe:4f:
58:05:b0:84:d4:76:6f:59:df:de:82:cb:e3:90:21:b7:90:4a:
5e:37:e7:df:9f:e7:a4:94:e3:63:bb:24:3e:bf:3e:e9:41:24:
a8:69:9c:8c:f2:f2:76:3a:6d:91:1d:df:65:c4:f9:7e:86:75:
da:eb:24:4b:f7:22:40:d8:53:11:7f:56:c3:11:48:4b:79:2f:
97:5a:85:3e:52:a1:c2:9e:ab:81:d9:c7:8d:be:3c:b1:e5:df:
7b:b4:32:2b:9d:00:a8:6d:24:c6:06:bb:7f:b9:98:14:a2:8c:
e7:db:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:20 2026 by rpki-client