
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/F75AEA8A13F111EB950DBC4EC4F9AE02.roa
File: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (raw, json)
Hash identifier: jOVkHlbZCBgwXHvRYiey/5/5qsAljK9sG8lXCEjLe4U=
Subject key identifier: 98:EE:D0:69:4E:79:F8:8B:A4:15:4E:FF:41:3D:DE:2E:2F:3B:6C:91
Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial: 080E
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/F75AEA8A13F111EB950DBC4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:39:14 +0000
ROA not before: Mon 04 Aug 2025 22:03:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.60.108.0/24 maxlen: 24
103.60.109.0/24 maxlen: 24
103.60.110.0/24 maxlen: 24
103.60.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Validity
Not Before: Aug 4 22:03:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40941-a32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:39:68:5a:9c:26:67:06:f6:d9:6d:e0:ac:
b2:36:96:d7:7e:51:05:94:0f:9b:4d:dc:f6:9e:52:
17:19:b9:4f:dc:32:07:c2:1f:7a:5e:32:e6:04:21:
e2:b4:10:9a:e1:0f:41:e3:b8:e7:24:bb:ad:ae:45:
99:f0:88:37:db:05:16:72:d8:c8:97:3a:0e:ae:b9:
9e:b0:e5:f2:54:a4:6c:a3:93:bf:ce:b9:83:bc:23:
c2:f7:2d:42:fb:5f:26:30:63:fc:5c:70:4d:6b:df:
dc:8a:80:b5:42:57:bc:08:ab:0d:23:ba:c4:7c:ae:
2b:83:c8:c6:6e:42:86:1a:8e:f7:c3:51:6f:d3:75:
e8:26:fc:a8:39:77:98:82:34:27:e9:70:b1:a4:4a:
60:3d:7d:1e:99:30:7a:4f:ac:b3:52:c2:9d:d3:f2:
9b:db:2c:11:1d:61:02:a0:0b:b4:2c:cd:9e:ab:6f:
96:45:f9:43:60:34:85:ca:11:91:65:39:8d:e8:5a:
40:a9:ac:37:9a:0f:83:57:ef:a8:f1:f3:b7:93:ac:
d3:3e:9d:5e:95:85:37:aa:ed:cb:e6:98:1a:ec:1e:
21:a3:6d:60:d9:65:1d:53:79:81:35:78:2c:fb:23:
ff:b8:c6:a4:41:0f:76:ec:d2:42:d4:7a:e6:3f:ee:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:D0:69:4E:79:F8:8B:A4:15:4E:FF:41:3D:DE:2E:2F:3B:6C:91
X509v3 Authority Key Identifier:
keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/F75AEA8A13F111EB950DBC4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:36:94:e3:41:3d:1b:2f:c3:f4:64:45:91:dd:5d:38:22:df:
cd:f6:fc:d6:4d:d0:31:ce:81:38:b2:dd:c8:b0:ff:9e:20:45:
0e:7a:11:f7:8c:26:6a:cf:73:22:c7:8c:f8:82:a9:17:5d:a9:
e5:21:6d:be:5b:74:d4:42:db:c0:e5:41:5c:17:5a:b0:27:66:
72:f9:03:04:c6:9c:83:f3:7f:59:2e:f3:a0:72:65:76:1e:84:
88:c7:01:20:b5:b0:4a:63:68:e1:0e:05:7f:6d:9d:d3:96:f2:
b7:04:fd:e8:ed:78:9c:39:92:8f:84:9e:4a:38:c6:67:34:d1:
e2:42:0f:d6:38:a9:19:ae:5a:35:55:80:1a:a6:61:e8:5d:93:
eb:dc:f2:0b:95:dd:5a:16:da:da:2b:2d:95:9f:f7:4e:b0:0d:
4e:b8:0e:8e:22:2e:60:58:e8:f4:09:9b:ac:ea:28:2d:40:5b:
ea:3e:14:50:a9:e7:4a:79:6d:e0:a0:ce:16:0c:8b:72:89:41:
d4:81:9f:ac:8a:a5:76:fa:2f:66:af:e4:3b:a8:41:7b:4b:f4:
23:fc:05:15:fb:ca:bb:95:7c:32:c4:7d:ec:21:8c:f0:e8:42:
fd:14:df:c9:1d:57:f5:27:c5:8b:3e:1c:00:22:31:02:f1:1c:
3d:58:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:27 2026 by rpki-client