
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
File: 648391F4DDD311E8B6169878C4F9AE02.roa (raw, json)
Hash identifier: vW/3LlTcPiRKNynwBvHGu0r3aF8Kq8TXUuM7r9PgA/M=
Subject key identifier: BA:7A:3B:0C:0D:C7:E8:77:0F:C8:9C:25:49:11:9A:F3:53:76:DA:F4
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2995
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:28 +0000
ROA not before: Tue 31 Dec 2024 15:53:28 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 55488
IP address blocks: 49.231.27.0/24 maxlen: 24
2405:9800:c910::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10645 (0x2995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Dec 31 15:53:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741378-2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:ed:5f:4c:ac:b9:77:38:a6:2b:b7:51:f1:
84:95:2c:6d:b6:0f:4f:e3:9a:4d:49:41:e0:a8:83:
30:50:5f:2d:17:46:53:fd:12:2a:23:39:07:6b:30:
cd:c4:a5:80:4d:6f:6e:2c:63:f0:97:e4:e5:5e:c4:
b1:a1:32:14:09:d9:85:17:34:7c:ac:a7:e3:8d:95:
54:aa:18:46:75:00:79:57:a7:1b:ce:13:49:35:99:
05:f5:ea:c2:12:69:5d:94:fb:71:9d:a7:ed:4e:dd:
da:f1:fb:1d:58:a2:77:07:12:12:c2:23:1c:52:f0:
3f:f9:e4:b4:0f:ea:96:93:cf:95:28:f3:6f:86:4f:
58:51:5b:5f:71:62:bb:5d:89:09:aa:34:98:a7:a5:
d1:e6:74:c3:e3:2e:33:3f:20:98:18:65:24:d6:8f:
48:a8:d6:22:13:f5:eb:4a:d8:60:26:e9:aa:f8:8d:
dc:68:42:ab:05:c1:c1:71:e5:df:95:a2:b8:c7:b5:
f2:27:95:f4:e1:01:e7:3f:79:18:95:3c:eb:90:48:
35:e8:03:52:ac:29:67:ed:90:c8:fc:ae:0e:b6:e9:
07:3e:23:f1:86:1c:33:58:7c:51:f2:90:9b:14:95:
f5:f5:3e:11:90:57:05:1e:a9:fb:85:17:7a:9b:3a:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:3B:0C:0D:C7:E8:77:0F:C8:9C:25:49:11:9A:F3:53:76:DA:F4
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.231.27.0/24
IPv6:
2405:9800:c910::/48
Signature Algorithm: sha256WithRSAEncryption
9e:53:bd:1f:9c:8d:d7:f4:fc:f8:96:c4:09:ef:56:94:ab:cb:
97:35:d2:c7:be:dc:d2:f4:96:45:e6:e6:10:5c:00:4c:42:70:
7e:5d:23:a5:7a:54:50:d6:2c:51:dd:9e:91:cd:e3:31:c4:d7:
03:11:be:0d:bf:d0:f5:90:ed:ad:1f:ed:29:1c:05:66:5a:ad:
49:7e:b7:a2:ff:24:7d:2b:58:7e:f4:ff:a2:3d:e5:7a:2d:3f:
ea:fa:7e:f5:58:c6:ec:6d:1d:73:f8:6a:f6:77:9b:2e:d2:41:
4d:42:53:d5:0e:40:b2:ab:ce:56:68:c3:38:f9:59:3b:a2:20:
53:c3:24:69:0e:94:3b:55:42:9e:c8:b7:56:e3:b2:c9:4d:11:
67:3b:23:98:6f:3f:14:87:9f:1d:4d:65:63:f9:0d:3f:1d:00:
dd:65:55:88:00:02:50:af:51:24:93:f3:f7:5e:33:c8:fa:70:
53:94:67:3e:01:48:36:2a:23:43:fb:e2:52:12:1e:e1:03:5b:
24:e0:78:b7:bd:8c:ee:7e:9e:fe:9a:a8:ce:ee:d1:09:0a:a3:
41:2e:c9:d3:86:44:70:22:ab:26:e9:fb:c3:6e:5e:54:34:d4:
12:77:9b:85:6b:90:af:85:cb:67:df:41:9d:8e:f1:b4:7d:74:
42:e7:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:39:31 2025 by rpki-client