
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
File: 5E34D78AB13A11F08347B23DC4F9AE02.roa (raw, json)
Hash identifier: 7VC7xLhtQRTwz/061p8yDCut4qIajVNwZJuM4A7Qe+M=
Subject key identifier: 70:D2:CC:24:B5:BF:3C:66:BC:44:FC:B5:70:6D:B6:D1:6E:3E:EF:98
Certificate issuer: /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial: 3F
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
Signing time: Sat 25 Oct 2025 00:34:30 +0000
ROA not before: Sat 25 Oct 2025 00:34:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 154317
IP address blocks: 2001:df5:d440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Validity
Not Before: Oct 25 00:34:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68fc1b15-42d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:aa:55:23:16:55:cd:27:8c:c8:84:1f:87:
e8:95:69:5b:65:9a:fa:ba:b5:a9:ae:c9:ff:d8:d9:
49:56:c6:66:0b:7b:e7:fa:e5:70:fa:80:cb:69:9b:
91:ac:f4:a8:23:f7:f5:3f:de:df:fe:7a:d6:75:1d:
19:05:ca:5f:58:6c:81:97:7f:08:7d:1d:3a:28:4a:
f6:e7:1f:a7:92:12:2c:ae:a9:72:4c:4a:93:08:45:
3c:5f:21:52:26:0f:60:7c:aa:18:8d:bf:f8:c9:1e:
3a:e5:cb:5e:c7:7a:db:da:06:16:be:a0:bd:96:7f:
c3:49:d6:3a:d6:24:19:43:07:fe:93:50:57:db:4f:
ec:46:c2:a8:fe:4c:bd:14:f4:6d:d4:d4:db:86:9f:
2f:a0:09:ef:25:72:32:d0:8c:26:21:41:6b:26:d4:
d5:9e:d1:5e:85:b4:c0:e7:12:e3:35:43:c2:90:61:
2c:68:fe:5b:7b:07:09:99:49:05:e9:cb:1d:43:e4:
21:94:1a:d7:24:09:09:16:23:4a:63:4e:ea:22:41:
bc:d0:bf:9a:3a:92:ae:e9:b5:b2:d4:bf:48:7a:85:
4a:05:00:db:ca:42:2a:87:45:12:84:d2:31:d6:28:
fb:7c:84:9e:46:a8:c2:2b:eb:fe:7c:97:36:90:ea:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:CC:24:B5:BF:3C:66:BC:44:FC:B5:70:6D:B6:D1:6E:3E:EF:98
X509v3 Authority Key Identifier:
keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:d440::/48
Signature Algorithm: sha256WithRSAEncryption
ac:6d:a7:99:29:98:91:bf:52:84:32:c3:5c:d6:ff:1a:f0:59:
30:a0:d2:8d:67:b5:0d:0c:c9:9d:3b:07:60:aa:4f:5c:ea:89:
75:a7:4d:14:49:fc:30:d3:1b:41:b1:aa:ba:1d:08:ac:e7:e7:
fc:86:9f:18:df:ca:3b:8a:75:63:b3:6d:05:c7:96:d3:a1:a8:
b8:a7:fd:1d:7f:fa:a0:78:c9:e0:58:1a:24:e5:36:8d:2d:da:
58:34:72:12:9b:04:78:01:ba:1e:58:82:d6:dd:62:94:2d:a5:
09:07:44:3c:5c:1a:a3:8e:fa:b4:0d:61:7d:1f:89:3d:7c:8b:
4e:47:d8:36:32:4f:3a:fb:af:b0:eb:b3:d2:c4:7f:3a:76:7f:
e0:79:17:45:07:be:7e:64:15:40:9d:5c:6f:d8:06:da:06:cf:
80:20:73:cd:09:91:17:c8:14:69:b3:48:a8:69:7a:58:2e:d6:
b8:60:6a:45:15:af:ac:bb:55:b5:33:ba:ef:b1:65:e7:53:f2:
e4:26:f4:68:65:72:cb:61:00:6a:00:fb:fa:e3:2d:6e:d9:0b:
44:a9:4a:36:6e:cd:99:00:58:13:2f:fa:4f:33:ae:22:14:75:
99:54:c1:54:51:be:d4:9d:85:4e:ec:bf:cf:16:44:cf:2f:a9:
c6:37:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:13:58 2025 by rpki-client