
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa
File: 323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier: e5LOlhZHnt+foZzN47ojsqOdIDCop8hHSrX4aAWovSU=
Subject key identifier: BF:D4:0C:7B:6D:0C:46:1A:8F:1C:F5:5F:25:99:45:EF:18:E4:A2:2A
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 11F65DC87635A0C307442A4A50AD3972066984BC
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa
Signing time: Tue 08 Sep 2026 00:03:30 +0000
ROA not before: Mon 07 Sep 2026 23:58:30 +0000
ROA not after: Tue 07 Sep 2027 00:03:30 +0000
asID: 147020
IP address blocks: 2401:2060:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Sep 2026 18:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f6:5d:c8:76:35:a0:c3:07:44:2a:4a:50:ad:39:72:06:69:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Sep 7 23:58:30 2026 GMT
Not After : Sep 7 00:03:30 2027 GMT
Subject: CN=BFD40C7B6D0C461A8F1CF55F259945EF18E4A22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:d3:c2:d7:ba:22:3c:c1:54:8c:56:df:c4:
41:8a:6a:bf:39:9e:e1:c6:fc:c9:3f:37:d6:b4:28:
b4:a2:95:05:97:34:3d:bc:88:a9:9e:15:8f:81:bb:
47:3f:46:3f:1f:95:64:97:ba:2f:f9:b5:88:15:40:
e7:06:a5:b7:57:8a:17:ca:a1:2d:c4:78:ac:54:08:
76:33:4d:51:79:3b:ef:c0:51:0e:95:e8:ee:d3:a2:
10:08:57:89:48:7e:00:42:2e:c2:10:e9:7d:b0:9e:
3e:ee:f8:b8:e9:f8:0c:f2:04:96:d9:d4:20:08:1a:
72:d2:61:4b:e5:12:94:7c:ac:8d:b2:ea:1a:2b:f6:
62:2e:6b:28:2a:48:91:3c:b0:56:b3:6e:d6:84:d0:
0b:2f:f9:ed:a2:18:36:f1:fb:f1:87:82:c7:be:b0:
e4:60:06:9c:dc:3c:b1:ec:cc:76:e6:99:ea:ab:6f:
8e:65:a3:c8:d9:f4:2f:a2:f0:bb:b4:8f:b9:a6:a0:
16:f7:9a:8b:86:66:60:a0:f2:4b:19:b6:f0:2c:8b:
14:08:e8:03:3a:ef:c6:c5:f8:b5:97:6d:63:8e:1b:
e2:e9:d4:0a:98:68:d7:99:58:49:05:fe:5e:aa:7e:
71:52:4e:3a:00:c0:3b:b2:e9:8c:39:e4:6f:79:24:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:0C:7B:6D:0C:46:1A:8F:1C:F5:5F:25:99:45:EF:18:E4:A2:2A
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:1337::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ff:50:13:64:dc:9d:67:9b:52:32:8d:36:e0:32:be:ac:46:
23:26:96:73:68:86:28:12:ef:e3:8e:f1:1e:09:60:7f:f6:69:
67:bc:b6:ee:3e:7f:96:53:10:13:45:47:0c:e9:e6:be:41:45:
b3:05:89:d9:bc:ce:15:99:a7:1d:af:df:98:28:c4:bd:6f:e1:
f4:b1:f7:a9:c2:d3:db:4b:9b:ca:c0:bf:47:c4:eb:a7:f6:4a:
ff:ed:c8:06:da:bf:7b:8a:f2:d1:ef:10:9c:4a:94:15:55:8c:
15:05:a8:72:ad:54:bc:93:99:5b:21:19:ac:ab:da:34:bc:d1:
30:3e:21:e8:0c:eb:1d:65:8f:55:08:5a:8c:f3:cb:35:8b:b5:
80:83:50:bc:c8:47:4e:44:d3:1e:12:14:f1:b6:81:53:14:cf:
1a:4a:38:45:f3:0b:3b:eb:cc:59:32:fe:ec:ab:39:13:ea:43:
79:ac:c9:f3:04:7e:fe:35:e9:55:f3:ab:52:67:b8:c9:ef:4d:
85:ba:a9:ec:25:15:bc:5b:65:1f:3d:d7:f1:31:a2:57:07:49:
e2:7b:c4:3e:70:71:e5:86:18:e6:0d:2f:3b:5d:c5:be:e4:10:
61:f6:35:3d:2e:c0:45:b4:01:f5:2e:6f:b6:d9:f9:9a:ab:2c:
3a:d3:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 01:19:34 2026 by rpki-client