
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa
File: 4FB7C576376811E9847C6223C4F9AE02.roa (raw, json)
Hash identifier: 1u+zZ/Pou89y1x1QLPXS5dIvMqgz/yygx73Ft/LkrUI=
Subject key identifier: 77:3A:EF:9E:B3:6A:64:63:5C:F2:2B:56:08:FE:13:40:95:F6:BD:D2
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2A22
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa
Signing time: Sun 06 Sep 2026 16:23:50 +0000
ROA not before: Sun 06 Sep 2026 16:23:50 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138631
IP address blocks: 2402:9e80:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10786 (0x2a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 6 16:23:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9d9396-fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:bb:9c:d4:7e:fb:dc:dd:90:c0:13:85:ce:
70:20:95:bc:60:81:d8:0e:4b:ff:6b:87:fb:68:4b:
cd:bd:e4:3e:da:63:7d:92:c4:63:63:0c:ad:d6:c2:
fb:a1:f5:6b:bc:69:ea:37:6b:e3:66:4a:ef:b0:8f:
6b:78:34:c0:c1:57:4a:6b:8f:7f:05:27:ac:45:90:
76:24:14:99:c2:d8:c1:3d:47:42:68:8b:df:12:82:
5f:79:f7:3e:53:ad:ea:3d:4d:f5:1f:a2:a4:4f:99:
ac:67:71:44:8c:d3:17:63:c6:9d:f8:b5:8d:12:b7:
56:ec:5a:8c:ae:93:a3:c7:98:0a:57:4f:9e:03:f6:
bc:71:da:af:b5:08:69:35:9b:d4:1c:d1:5d:02:61:
f1:e9:57:2c:7b:a8:a9:33:c7:77:93:90:ba:c6:a2:
08:be:ca:a9:81:ee:fe:68:98:23:8f:ed:c7:e8:75:
ed:7c:2d:72:fa:ba:66:5a:f7:4b:35:2a:dc:c4:e6:
ac:7c:44:55:07:06:87:49:d6:7d:65:49:cd:36:10:
31:2b:e1:6b:48:d9:ad:75:3b:85:95:50:e6:84:6d:
0a:ec:fb:60:00:8b:2b:b4:0e:73:c0:c3:92:03:d1:
98:14:e8:91:ba:6f:02:54:a6:61:cf:37:5a:d9:92:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:EF:9E:B3:6A:64:63:5C:F2:2B:56:08:FE:13:40:95:F6:BD:D2
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:43::/48
Signature Algorithm: sha256WithRSAEncryption
3e:6d:31:e1:14:25:c8:77:01:48:84:3b:a2:fc:1b:be:69:f9:
82:ff:1a:5b:bb:c4:1b:c7:c3:7d:2b:ff:a7:db:08:a3:73:e0:
e3:b9:d8:85:97:23:61:ca:3a:34:9d:d5:e1:bd:36:fa:81:03:
71:96:53:61:cb:a5:8c:fe:2d:6d:ca:87:58:69:a6:db:e6:da:
b5:b5:78:e0:eb:54:78:a6:21:2c:f3:c7:79:56:68:0c:0a:c3:
36:b1:1a:45:d0:30:eb:d2:10:57:f8:bb:81:38:24:fc:e0:35:
ad:c9:99:31:82:00:8f:d7:72:d0:b9:ff:f3:92:07:c7:7b:04:
e8:7a:7a:95:a1:6a:95:f9:0a:a6:8b:bc:5e:52:71:e9:bb:2a:
bd:dc:fa:4a:60:b0:cd:cf:5f:48:e8:58:61:05:f9:ce:1c:6f:
a5:dd:16:19:b7:73:5c:08:e9:d4:82:9b:13:ad:e0:c9:d9:93:
f9:6c:29:05:fa:a9:bc:61:55:c9:17:b2:92:e5:02:dc:a5:aa:
83:c7:61:c5:c7:ba:0c:97:ae:54:69:77:b1:57:ce:dd:1d:ee:
c3:fc:bc:40:d7:a7:a4:fc:13:4e:ad:9f:f5:98:90:f3:aa:cf:
86:ca:ed:ee:fd:0d:10:76:3c:27:36:72:eb:f8:42:ae:b0:44:
0d:2f:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:48 2026 by rpki-client