
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
File: 47854B9031DB11EEA02CF647C4F9AE02.roa (raw, json)
Hash identifier: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=
Subject key identifier: D6:2D:8E:56:47:34:35:5F:BA:47:1D:73:80:A6:7F:C1:66:F5:F8:FD
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: F8
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
Signing time: Sun 03 Nov 2024 03:37:07 +0000
ROA not before: Sun 03 Nov 2024 03:37:07 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 149778
IP address blocks: 2405:4cc1:300::/40 maxlen: 40
2405:4cc1:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Nov 3 03:37:07 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726efe3-0b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:03:00:cf:13:dd:bf:93:ef:27:8d:db:d8:
29:92:95:32:53:5f:20:5f:75:3a:aa:81:1c:a1:7f:
a1:0f:b2:08:43:b4:89:f0:67:5a:61:9c:6f:cf:e4:
3a:3e:0e:f5:9a:28:f5:37:80:45:52:2d:33:be:f3:
fb:13:2b:6d:0b:07:d9:23:b8:15:c4:e9:0f:44:e6:
ce:70:2b:89:3c:4c:17:73:61:9d:99:45:a4:41:2c:
cb:c8:ac:87:c1:0c:c1:ca:8c:79:74:3e:65:e0:57:
14:8f:1c:87:94:43:80:1b:7e:9f:0a:91:d6:35:8c:
90:53:3c:e2:ae:ea:53:89:ae:c3:98:f0:2d:3a:fc:
ac:a8:75:a4:45:31:3b:b5:5f:fe:9e:c9:ee:97:64:
54:89:f5:d1:56:7a:e4:04:77:8d:6a:2b:c0:96:33:
b4:b0:98:58:bd:66:b1:f1:bb:77:bd:53:85:1d:1d:
7a:d2:9f:7d:82:5f:33:ca:7c:ce:af:f0:d0:0c:9e:
c4:85:54:30:dd:0a:03:2c:2d:bc:f9:f4:d4:2e:3c:
d7:16:d2:86:8f:bb:73:6d:d9:c5:35:5e:67:fb:f6:
50:e6:12:1b:4c:14:56:51:ad:71:b0:29:56:e8:28:
77:4b:87:a1:1c:4a:2d:06:43:46:5f:bd:90:55:de:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:8E:56:47:34:35:5F:BA:47:1D:73:80:A6:7F:C1:66:F5:F8:FD
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:4cc1:300::/40
2405:4cc1:c00::/40
Signature Algorithm: sha256WithRSAEncryption
21:3d:75:34:c1:36:49:48:6a:8a:a4:f4:ce:00:d9:40:e9:ab:
d8:66:bb:9f:0c:1a:86:6e:09:8a:3f:56:97:dc:51:b0:70:8d:
bf:e4:c2:2a:8e:0a:8c:bd:93:5f:a3:b2:0c:1c:25:c6:26:13:
55:6e:cb:9f:97:22:2c:ae:19:ca:f1:e5:bf:0a:48:b9:36:14:
bd:d7:7e:7f:78:b0:c3:1a:2d:44:3d:18:1d:04:f1:cb:6a:cb:
31:38:1d:e1:4e:83:dc:6d:e8:95:2a:db:ab:79:7e:4a:f0:46:
cd:e1:cf:2f:58:3b:d7:ac:0b:c8:32:13:4a:1e:cf:92:9e:d5:
85:b3:6e:6e:b6:ae:8b:2e:74:42:1d:34:61:3a:00:7c:2a:d0:
1a:17:f7:2c:db:6a:00:aa:47:2e:c6:19:74:a3:75:83:09:4b:
9e:6e:e1:04:01:13:4e:85:e9:98:cb:eb:46:01:58:b4:8c:a9:
10:78:cf:7c:5f:fd:9b:fa:53:9b:1b:5e:87:71:ff:6a:70:59:
48:59:e2:9b:05:15:58:34:3d:ec:19:e0:2e:96:3a:59:a9:6f:
54:7e:3a:4b:7c:1a:50:c1:4d:39:f7:5e:40:82:da:a0:25:06:
bb:49:03:9e:4b:b4:7f:f9:e6:36:4a:34:bb:ec:d8:47:84:fa:
32:38:1f:e1
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjQxMTAzMDMzNzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2ZWZlMy0wYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+YDAM8T3b+T7yeN29gpkpUyU18gX3U6qoEcoX+hD7IIQ7SJ8GdaYZxvz+Q6
Pg71mij1N4BFUi0zvvP7EyttCwfZI7gVxOkPRObOcCuJPEwXc2GdmUWkQSzLyKyH
wQzByox5dD5l4FcUjxyHlEOAG36fCpHWNYyQUzzirupTia7DmPAtOvysqHWkRTE7
tV/+nsnul2RUifXRVnrkBHeNaivAljO0sJhYvWax8bt3vVOFHR160p99gl8zynzO
r/DQDJ7EhVQw3QoDLC28+fTULjzXFtKGj7tzbdnFNV5n+/ZQ5hIbTBRWUa1xsClW
6Ch3S4ehHEotBkNGX72QVd62KQIDAQABo4ICnzCCApswHQYDVR0OBBYEFNYtjlZH
NDVfukcdc4Cmf8Fm9fj9MB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhBQzAvRTRFRDUzOTQzMUQ4MTFFRTgzMDA2QTQxQzRGOUFFMDIvNDc4NTRCOTAz
MURCMTFFRUEwMkNGNjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E
GjAYMBYEAgACMBADBgAkBUzBAwMGACQFTMEMMA0GCSqGSIb3DQEBCwUAA4IBAQAh
PXU0wTZJSGqKpPTOANlA6avYZrufDBqGbgmKP1aX3FGwcI2/5MIqjgqMvZNfo7IM
HCXGJhNVbsuflyIsrhnK8eW/Cki5NhS9135/eLDDGi1EPRgdBPHLassxOB3hToPc
beiVKtureX5K8EbN4c8vWDvXrAvIMhNKHs+SntWFs25utq6LLnRCHTRhOgB8KtAa
F/cs22oAqkcuxhl0o3WDCUuebuEEARNOhemYy+tGAVi0jKkQeM98X/2b+lObG16H
cf9qcFlIWeKbBRVYND3sGeAuljpZqW9UfjpLfBpQwU05915AgtqgJQa7SQOeS7R/
+eY2SjS77NhHhPoyOB/h
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:31:32 2025 by rpki-client