
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
File: 44A19870784F11E8A84DBE2EC4F9AE02.roa (raw, json)
Hash identifier: 8MdfToCmTrb/49sqyI2eT3gHkmnbmaQhxSaC+MJjj7o=
Subject key identifier: 2A:EF:8F:B4:A7:A3:3C:D3:F1:6E:0C:22:5B:DE:09:58:3A:C2:3C:BB
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2985
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:13 +0000
ROA not before: Tue 31 Dec 2024 15:53:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38443
IP address blocks: 2405:9800:9c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 15:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10629 (0x2985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Dec 31 15:53:13 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741369-13ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:bc:1b:36:1a:eb:df:a1:03:ef:b3:64:71:
dd:cd:cc:0b:a7:a5:6a:b5:85:e4:67:73:29:43:20:
2e:05:a4:a6:82:70:f9:8e:06:d1:54:16:7a:9e:e5:
85:cf:c2:71:0f:04:c0:c8:e2:35:b4:06:21:d9:79:
a2:7a:20:d4:5e:ab:1e:fa:ff:3d:87:54:3c:0e:1c:
94:b1:52:bd:ba:23:67:a9:88:cb:a0:f0:82:42:b3:
25:dd:94:66:f2:b3:46:d4:5d:e1:2f:17:52:32:e3:
ee:1a:e7:62:c3:f0:c5:06:0b:7e:62:a1:42:c7:35:
bc:07:89:48:27:da:95:2e:ac:35:4e:e6:5a:d0:f5:
64:db:0c:ec:d4:1c:0e:28:90:98:0a:19:c9:6a:81:
65:d8:e1:d6:a2:64:87:3c:f9:75:6f:0d:47:df:da:
fc:26:7a:da:e5:24:41:3e:a5:6e:ca:2e:03:c8:37:
00:c2:3d:ec:ef:95:68:23:4f:69:3f:cf:76:cd:06:
11:af:83:c0:ca:a2:80:fd:fc:fa:df:47:cf:eb:f5:
14:11:f6:f9:f6:f2:9e:6e:bf:e3:ca:f5:ca:f8:18:
d8:10:2a:b0:91:e2:07:70:30:db:03:90:09:af:f4:
06:78:da:ee:95:55:6c:90:c7:fd:72:14:2e:5a:cf:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EF:8F:B4:A7:A3:3C:D3:F1:6E:0C:22:5B:DE:09:58:3A:C2:3C:BB
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:9800:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
ac:56:38:85:ad:7b:d4:cc:3d:cf:00:2e:47:76:53:9e:91:c3:
c2:61:34:66:73:f8:7d:a9:b4:3a:c2:6a:00:0d:97:09:b3:be:
30:97:c4:d4:f6:3d:8d:81:eb:46:ac:30:66:dd:0e:04:ef:60:
60:da:08:06:c1:01:c7:26:07:88:76:03:e8:22:c5:a1:86:09:
54:ae:c2:44:2e:2c:53:5f:0a:ff:3d:d8:c5:85:0a:5f:ad:db:
0a:f3:89:b3:57:4a:3f:ea:58:06:8e:3a:74:07:0c:bb:de:39:
96:3e:5e:1f:7e:58:6e:f4:e2:be:ba:78:9e:9b:91:8f:7d:24:
44:42:cb:b4:06:57:39:50:f0:c0:19:02:85:ec:ba:59:29:07:
26:f4:27:61:1f:27:af:6a:e6:93:ff:8d:c4:c4:c2:31:40:38:
76:30:c3:ba:96:8b:71:be:3b:e2:83:9b:81:2b:50:6e:13:f2:
5f:cc:73:aa:41:82:9e:e9:dd:e8:7e:bc:af:09:7c:3e:71:10:
85:11:18:39:91:72:78:cb:7e:77:0f:f3:8c:b1:0f:a0:c1:41:
91:06:be:12:d9:07:9d:1b:d5:e0:d0:43:3f:dd:86:83:65:67:
29:49:4e:e0:19:54:15:4b:85:df:3c:82:9a:9b:1e:b7:eb:71:
24:18:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:42:48 2025 by rpki-client