
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
File: 282CA82C023F11EEB716134FC4F9AE02.roa (raw, json)
Hash identifier: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=
Subject key identifier: 0D:B2:17:34:97:9A:6E:E3:DC:74:EA:0C:4E:76:3D:36:6A:76:FE:A7
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0197
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
Signing time: Tue 03 Jun 2025 04:01:32 +0000
ROA not before: Tue 03 Jun 2025 04:01:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 203472
IP address blocks: 2401:5a0:bbb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Jun 3 04:01:32 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=683e739c-0f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:21:df:86:e1:94:30:a0:af:20:44:19:70:86:
20:ec:45:8f:34:2f:52:46:06:fa:38:25:a2:50:4b:
e3:8a:36:c6:a3:df:f2:f9:83:6f:83:c3:1a:00:03:
db:a5:9b:a0:94:04:5f:02:aa:dd:b2:c0:f7:87:d7:
bf:d5:4c:90:9b:1a:52:5d:36:c7:f6:76:e8:a2:14:
56:79:b4:f7:4b:8c:dd:b2:af:97:20:54:e7:70:f4:
3b:ad:02:96:d9:94:ae:27:62:96:9b:e5:33:6f:30:
d1:a3:bb:18:23:1b:54:92:36:7c:37:66:b2:8e:fa:
b1:cc:8e:b4:c0:48:37:df:78:88:dd:3e:e3:c4:ec:
62:a2:00:03:0e:5e:ad:4f:ec:fa:19:82:01:d4:fb:
ba:1b:a6:25:a9:23:02:ff:ce:18:50:c7:5a:2d:05:
f8:f1:bd:eb:4e:a1:cb:f5:69:87:40:bc:83:e1:c9:
36:8c:18:66:c7:29:e7:00:c0:67:84:c5:34:b0:d7:
a6:4d:4f:b9:a1:9c:74:8e:b1:1a:93:0f:a8:85:96:
3f:53:25:c3:cf:48:22:33:69:9d:af:e8:5a:5c:3f:
b2:22:f6:a7:d0:94:36:f9:eb:45:79:f3:6e:38:f4:
46:63:37:41:de:64:5b:5c:22:9b:1d:18:9b:a6:cd:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:17:34:97:9A:6E:E3:DC:74:EA:0C:4E:76:3D:36:6A:76:FE:A7
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5a0:bbb0::/44
Signature Algorithm: sha256WithRSAEncryption
c9:5e:2f:0d:db:dc:e6:d1:15:0d:5b:44:bc:27:86:37:a9:68:
64:e2:58:a0:1c:3a:75:f5:8d:4d:ea:69:1a:2f:df:71:80:fa:
0e:91:ce:a2:01:45:c6:1a:17:73:b9:a2:f6:79:f3:28:a4:e7:
cb:ce:20:46:f6:4f:6f:83:8a:b5:79:c8:04:ad:b5:42:c5:95:
24:b6:5f:c9:c9:15:9b:08:3b:83:b9:72:b0:43:cd:f3:26:ff:
d6:bc:aa:06:b8:d8:ff:54:0b:f9:7a:74:c9:c1:70:79:00:d0:
96:24:14:60:46:19:eb:42:b4:30:10:fc:f5:01:fe:39:df:68:
c3:da:7b:e6:c5:45:09:e6:b5:c0:d0:5a:62:16:1f:3d:da:9c:
b8:bf:d4:ad:99:67:0a:77:22:55:b3:0c:44:f4:82:57:21:0d:
2f:d2:e9:6b:60:35:11:4c:31:e1:6c:1b:22:a1:2c:26:f8:e6:
c2:66:88:24:5a:40:1d:5d:6c:a6:60:ba:0f:27:86:fa:bf:dd:
5f:e0:51:ec:80:4d:00:01:d6:a8:9a:21:ac:13:3a:33:b0:00:
d9:4d:54:b4:06:f2:46:4b:dd:5b:27:bf:74:aa:76:16:0c:b8:
a3:3c:00:75:9c:fa:cd:bd:ec:75:e7:e1:d9:2b:ca:b1:6c:a9:
70:e8:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:32:55 2025 by rpki-client