
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa
File: 0F1061D0868911EDA888A96CC4F9AE02.roa (raw, json)
Hash identifier: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=
Subject key identifier: 2F:58:7A:A8:94:9E:CE:E0:9B:B1:34:AE:2E:9B:C6:34:5E:2F:35:7C
Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial: 025A
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:06:18 +0000
ROA not before: Wed 07 Jan 2026 01:20:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150699
IP address blocks: 103.60.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Validity
Not Before: Jan 7 01:20:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a40f9a-5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:fb:5d:f0:d5:74:c7:d8:7d:59:19:c8:b3:
cd:a6:29:ba:d7:fd:17:ad:d6:e5:eb:da:28:b3:7d:
c1:cd:b6:ad:44:01:0c:10:81:92:84:69:3b:88:c5:
38:b9:af:42:fa:d5:f2:50:2d:ba:8a:7c:91:01:37:
ff:26:ce:c0:7f:d3:ec:53:17:e7:80:91:0d:82:07:
ab:30:27:a5:b9:a9:d8:95:f7:91:f5:b8:45:f4:3e:
46:fa:99:cd:18:0a:42:39:49:af:db:37:2b:37:4d:
68:e1:19:a1:e6:d0:a5:2f:1d:d3:f0:74:e6:4a:fb:
c2:a9:50:cc:33:66:8b:dc:a7:40:c0:1d:bb:b9:77:
6b:52:8a:f8:b5:d7:51:f1:37:e6:0b:08:d4:74:4c:
c8:a5:bc:c2:69:41:00:90:b9:b8:bd:0f:cf:6e:03:
7c:0c:11:26:ca:31:ed:ee:5d:86:67:a1:05:a0:b6:
9d:fe:17:b9:fa:eb:0f:77:d5:a2:79:74:60:a9:dc:
23:b1:44:cb:14:c6:3e:7f:6f:ad:64:b6:8c:aa:b3:
39:e6:87:75:6e:48:64:25:a2:a2:fd:28:9e:a0:59:
8a:86:6d:b3:91:17:e2:74:0f:4b:cb:f5:b0:53:fc:
ce:02:cd:47:1a:14:53:f3:45:2a:b1:ce:31:40:b4:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:7A:A8:94:9E:CE:E0:9B:B1:34:AE:2E:9B:C6:34:5E:2F:35:7C
X509v3 Authority Key Identifier:
keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/0F1061D0868911EDA888A96CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.188.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0a:3f:c6:2f:fa:a3:34:03:37:ae:3e:8c:e4:bb:f5:f9:ed:
1b:95:5d:42:10:a2:13:55:e2:18:17:ee:58:e1:00:42:d2:63:
fe:aa:5d:07:5d:0c:18:1e:97:de:11:95:f3:72:23:71:ff:18:
00:8f:94:a4:85:74:51:cd:99:9c:b4:32:86:02:c5:39:a7:da:
75:3e:a4:fb:58:fd:f1:04:79:82:f7:19:ca:76:39:d5:5f:df:
24:75:55:b6:c5:ab:e4:4e:2a:26:b1:b6:67:b4:9b:8b:de:c5:
b8:83:41:fc:94:b2:20:52:f9:4e:2f:e6:b1:4c:be:89:96:9f:
c0:61:ba:f5:ee:12:41:e0:16:19:07:ea:12:ad:06:26:56:65:
5a:cd:5b:15:00:18:6c:46:aa:8b:f6:29:21:93:d3:9d:c7:17:
84:6e:e2:1a:1c:88:be:4c:f2:bf:11:2a:98:9e:6d:c5:f0:ba:
54:30:63:d4:3a:1c:e7:da:75:d5:12:09:40:ad:f7:96:e3:54:
01:b5:5d:f9:7a:e8:1d:6f:29:c7:b7:c9:3e:05:71:4d:f1:da:
30:f4:2a:49:50:98:ab:7d:97:3b:11:2f:b1:ef:10:2a:cc:2b:
63:d7:23:67:ff:c9:57:b6:47:e5:b7:df:2e:b9:51:87:da:b8:
76:49:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:06 2026 by rpki-client