
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa
File: 60F50042A99411F0A4CF2116C4F9AE02.roa (raw, json)
Hash identifier: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=
Subject key identifier: 80:C0:14:FD:6F:CC:92:70:C0:6F:07:8E:A0:83:54:54:71:96:90:4F
Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial: 48
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:11:52 +0000
ROA not before: Wed 15 Oct 2025 06:58:40 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9484
IP address blocks: 2001:df6:32c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Validity
Not Before: Oct 15 06:58:40 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3d8a8-53e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:9a:31:da:9d:66:54:24:79:e7:78:75:37:
b1:5d:d6:6d:76:2e:57:36:4b:d5:ab:81:09:a4:3a:
2e:9e:1e:7a:51:72:a5:74:7d:69:43:c3:be:b3:e5:
82:4c:14:df:2a:88:2b:44:62:26:d0:01:13:92:2e:
4e:4d:cd:a8:ed:b7:70:d9:4b:d1:92:9e:ec:c8:40:
06:b2:23:0a:1b:62:8c:60:db:93:a8:f3:c6:c3:a4:
77:05:0a:a8:89:fd:ac:7e:b9:b3:2f:37:87:83:f3:
4f:b5:76:e8:16:82:66:69:c4:1b:e3:23:47:26:76:
7c:52:83:27:c1:c7:a3:cf:6a:5b:08:28:da:22:5f:
8a:ff:fc:9f:32:b1:50:ab:18:38:d2:9a:db:84:f5:
f5:cc:b4:49:77:ac:4a:75:03:2b:d4:3a:07:2a:e6:
c2:49:28:34:5b:54:82:fc:56:9c:b3:46:26:33:b6:
e0:a2:18:35:fd:22:db:d7:5b:b4:49:49:76:07:84:
52:ae:d8:c9:cc:7b:cd:3a:a1:96:2a:47:75:33:f5:
44:cf:29:4f:87:52:d3:5a:db:e2:72:8d:46:af:d3:
64:12:a2:8a:17:36:be:cd:ed:83:2f:0d:8c:3d:06:
1d:2d:a4:62:e9:f3:ab:c5:ba:aa:99:7f:6f:1b:70:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:14:FD:6F:CC:92:70:C0:6F:07:8E:A0:83:54:54:71:96:90:4F
X509v3 Authority Key Identifier:
keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:32c0::/48
Signature Algorithm: sha256WithRSAEncryption
63:11:83:87:3a:f3:a5:70:23:36:88:ee:cf:c5:0d:68:51:68:
52:96:a7:b5:10:ea:44:c9:4e:9e:de:e9:ff:09:85:8a:b5:91:
b3:ed:c5:b9:96:e1:6f:31:14:74:c3:a7:f9:16:88:56:53:94:
43:da:66:4b:f1:f6:22:2b:77:fc:8b:bc:76:60:9b:77:2e:db:
3e:8a:da:a0:e0:39:72:75:2c:ca:46:48:96:ec:ab:e4:6d:dc:
3c:52:21:c8:99:c4:d2:96:1e:ae:4f:43:ff:d9:06:fe:95:0f:
bd:8b:9a:98:b8:52:dc:b4:41:5b:7a:fa:d6:1f:42:6b:f0:26:
d8:20:5b:3c:43:ff:d2:90:d0:08:23:cc:40:ed:16:95:0d:98:
50:0c:fa:a7:56:b5:3c:9d:5c:31:e2:7b:56:0e:2f:98:e1:1c:
7a:8d:f6:fa:98:ce:dc:68:12:94:68:d2:03:65:d9:a2:84:9a:
a8:86:bd:7a:c8:2c:87:50:bb:92:f7:ad:74:a9:39:8c:9e:f5:
82:86:d6:39:50:a8:da:f6:2c:fd:45:fb:f6:ab:ba:12:b4:a2:
5d:f8:6b:81:d9:22:4c:a2:48:da:b0:9f:de:1b:55:42:b0:84:
d5:5a:c0:2d:4b:93:05:6a:fe:f7:56:24:02:31:e9:a9:a8:95:
5e:b0:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:06 2026 by rpki-client