
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
File: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (raw, json)
Hash identifier: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=
Subject key identifier: 48:F7:B7:23:97:1D:17:F5:F7:87:7A:3C:F2:90:0D:15:02:F0:8A:7D
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 1744DDFE20A5E17D6FB9CABF39FA640F4203BBF9
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
Signing time: Sun 17 Aug 2025 22:21:33 +0000
ROA not before: Sun 17 Aug 2025 22:16:33 +0000
ROA not after: Sun 16 Aug 2026 22:21:33 +0000
asID: 24381
IP address blocks: 2401:2060:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:44:dd:fe:20:a5:e1:7d:6f:b9:ca:bf:39:fa:64:0f:42:03:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Aug 17 22:16:33 2025 GMT
Not After : Aug 16 22:21:33 2026 GMT
Subject: CN=48F7B723971D17F5F7877A3CF2900D1502F08A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:c4:d6:41:08:17:46:e9:8f:08:2e:43:0d:
80:f0:d4:85:10:ce:d8:f5:27:db:41:fd:8f:12:d5:
19:cd:66:6a:b0:49:70:51:d3:af:c7:7e:41:93:3f:
12:0f:27:8f:e5:e8:ed:d1:96:5a:b4:e0:27:8b:11:
60:5c:5f:65:77:82:26:62:71:fa:57:2f:e2:7d:53:
74:d9:a8:90:85:4d:b1:9f:09:57:a3:eb:15:a3:52:
db:77:a8:34:70:f6:a3:01:a1:68:d2:b9:a1:df:8d:
38:ae:e3:2d:e4:e1:a6:01:d7:eb:57:49:8f:33:97:
54:5c:13:04:52:e9:98:c8:63:e0:57:ac:ed:de:16:
e8:eb:ed:29:6c:ae:f2:ee:a6:ef:10:a8:01:80:bc:
bf:9d:6b:db:f5:c0:ee:76:85:83:2b:70:83:eb:36:
8f:c7:fa:06:d7:70:3b:8c:81:99:cf:9c:4d:1b:f6:
b9:4d:63:5f:9e:c2:65:37:c4:c2:d2:a8:d6:8f:ff:
b9:d6:2a:14:68:5c:43:95:9c:58:63:f2:e5:81:09:
c2:4c:ee:74:fa:bf:6d:fb:b3:7a:bb:1f:c3:71:ff:
15:9d:1d:4c:63:ce:96:d6:0f:df:9b:88:16:c5:1e:
d9:0a:99:fd:7d:27:48:db:08:0a:72:3b:63:aa:33:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:B7:23:97:1D:17:F5:F7:87:7A:3C:F2:90:0D:15:02:F0:8A:7D
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:b000::/48
Signature Algorithm: sha256WithRSAEncryption
e0:c8:c2:4c:9c:83:75:4e:52:63:58:d4:0c:96:87:93:9e:55:
3e:d8:a6:21:ba:1b:63:bf:53:90:d5:ff:a5:fe:c3:3d:af:00:
0b:00:16:08:56:4c:91:54:c0:ea:a4:a5:31:51:86:a2:03:f2:
6b:9b:e0:d3:ca:55:1c:14:83:fb:57:8e:a0:33:fb:74:fe:a7:
ed:08:32:45:5f:e1:cf:fa:22:87:a0:9e:40:12:3f:b8:5b:86:
5d:b2:ee:e3:42:35:1f:3c:6c:12:73:2b:8c:23:e1:6f:62:38:
c2:c2:53:a5:76:4f:fe:88:79:fb:cb:5d:cc:ac:8a:cf:7a:be:
28:a2:52:8f:49:5f:a1:20:b0:75:9f:37:63:9a:34:be:8d:13:
c1:4d:b5:24:41:c3:45:60:d2:dc:7d:b6:a9:e7:c5:2f:1c:9e:
a3:77:ca:7f:76:44:e2:fb:20:89:ba:58:72:9e:b7:3a:e2:9a:
a7:aa:f8:e1:7d:6d:ec:3a:81:6b:c0:24:21:b1:b4:10:0f:d8:
17:af:36:8b:da:e5:72:43:6d:4e:bc:5a:27:13:9b:ad:dd:d3:
fd:8a:be:b1:dd:b4:50:34:7e:1f:29:90:14:ec:ff:82:15:bc:
2b:ff:94:4a:65:f4:f1:42:82:a3:a6:5c:a3:26:20:a6:61:6b:
4b:9b:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:57 2025 by rpki-client