
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File: EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier: M40kD4TonG66uQYOaNCDeRUYMjqNRbMx31D02gr8fIs=
Subject key identifier: D5:0F:19:7C:3D:2D:48:31:52:14:5F:64:3A:75:02:15:2B:A4:D3:15
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2882
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time: Sat 26 Jul 2025 15:54:01 +0000
ROA not before: Sat 26 Jul 2025 15:54:01 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142561
IP address blocks: 2402:9e80:200::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10370 (0x2882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:54:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6884fa18-54ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:3b:99:c6:ef:0f:48:06:dc:9d:51:27:21:
1f:6f:2e:9c:04:6b:44:3d:a8:bf:6e:80:47:45:c6:
e8:8a:77:56:17:88:a0:db:92:42:7c:7d:13:55:c5:
a0:a1:74:57:bf:42:a4:7b:ac:3a:1e:eb:f8:58:5d:
3f:05:47:c4:c2:6e:e4:88:90:a8:5f:9f:ee:2b:00:
8e:c8:26:ec:ee:d6:96:9d:14:62:37:69:44:46:94:
5e:83:df:2b:42:c0:52:e6:a3:cc:c1:91:26:76:c5:
68:42:a7:c0:b0:d7:35:38:45:02:3c:3c:f0:39:ae:
68:94:a1:74:af:cc:3b:0d:5c:1e:c6:10:a0:57:6a:
4b:90:22:90:c8:e6:60:59:de:f9:95:60:32:e8:35:
2b:e2:3d:e9:b9:31:74:bc:f3:30:78:6d:c4:62:bf:
23:2a:15:df:4f:f3:61:97:1f:0c:e4:a2:c0:1e:73:
70:f7:21:cc:33:55:33:ba:27:52:49:0d:c8:a6:1f:
09:07:40:75:9b:dc:0e:df:f3:44:d9:67:b7:22:cd:
ce:d3:8b:2e:75:85:86:9f:67:0a:26:df:e4:39:78:
c2:fc:24:e6:88:a8:46:76:37:9d:52:88:3f:33:0c:
c7:70:d2:03:e6:86:4f:64:bd:db:30:6c:78:00:e5:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:19:7C:3D:2D:48:31:52:14:5F:64:3A:75:02:15:2B:A4:D3:15
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:200::/44
Signature Algorithm: sha256WithRSAEncryption
2c:f9:5b:c4:39:47:cc:b3:38:8a:a7:7e:e7:d0:c7:06:9f:d1:
7a:52:fd:47:f8:b7:8f:d9:8e:7e:c3:0f:ec:92:21:3c:b5:24:
2c:c5:14:d3:38:64:b5:25:59:45:46:0d:db:5c:aa:63:49:ca:
dc:9c:8c:a4:b6:d0:08:3c:78:f2:58:8b:d5:f6:c3:ee:3e:ee:
80:aa:d9:13:52:33:8b:37:0e:7d:36:f4:dd:f9:22:b1:e2:cb:
77:1d:9c:ea:b9:5b:da:85:95:7d:3d:c6:2b:81:53:a6:ba:8c:
9a:e4:05:a7:5f:c4:0a:10:b6:09:b1:85:24:01:ce:9b:90:2e:
2d:a7:2e:2c:8c:76:e9:69:d8:00:eb:76:6e:1e:e4:bc:e8:78:
60:09:13:24:98:91:51:4f:c3:d8:e0:3c:5f:ee:2e:47:93:d7:
5f:87:5f:36:24:a8:82:f0:40:67:6a:35:f2:fe:0e:2b:f2:05:
9f:af:e3:99:58:6f:a4:e1:84:5a:18:87:97:ee:a8:79:70:c4:
e2:4f:e9:c7:01:36:30:05:4a:42:fa:22:57:e3:9f:1d:2d:54:
64:c6:8a:ed:ac:11:10:cd:9c:dc:c2:71:c9:fa:0a:cc:08:34:
c9:45:ad:96:28:4f:d9:ae:7d:00:8f:4b:b3:9d:1c:e6:e1:7a:
58:e2:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:36:12 2025 by rpki-client