
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
File: A60C101AFB8411ECB7FF456FC4F9AE02.roa (raw, json)
Hash identifier: 8qsMfz3JHmHe0E9v9M1RcE+svnPYdju5b/dijzwDX2E=
Subject key identifier: 24:63:48:16:D1:D6:4C:B6:49:E9:D3:6A:A8:9A:65:E5:7A:84:EC:4D
Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Certificate serial: 033D
Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:04:27 +0000
ROA not before: Tue 18 Nov 2025 23:46:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38286
IP address blocks: 122.252.176.0/21 maxlen: 24
2401:cb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Validity
Not Before: Nov 18 23:46:09 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a42b4b-4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:da:3d:8e:47:6e:46:c9:40:0b:38:0f:67:
e0:82:a2:d6:27:6a:60:40:c9:51:c3:c4:a8:be:ab:
6e:90:9d:1f:67:f1:43:9e:21:79:eb:fc:fa:ca:18:
61:6d:2f:6d:66:83:f3:73:c1:ae:0c:f9:b4:85:f1:
d5:97:d4:71:03:60:d5:1d:81:70:64:0a:63:27:0d:
f3:d8:32:ef:71:22:84:26:ff:52:b2:2b:e0:2e:3d:
ed:21:22:7e:02:96:ba:a8:58:ce:76:94:29:d6:08:
f7:81:7d:3c:a8:50:5b:a9:01:0e:89:3c:cd:7e:93:
44:7a:28:36:e0:f9:d6:6f:73:15:ff:69:17:c0:90:
1f:f7:53:6f:8b:26:f3:17:b7:c5:12:54:17:4a:8b:
bb:20:4f:ee:fb:36:7b:1e:08:e4:6b:e5:21:e5:f4:
f1:82:ff:24:81:8c:42:77:a4:4e:66:f1:64:79:fc:
f2:48:3a:a0:91:3c:b5:ff:e0:f2:24:fd:23:4c:b2:
ea:84:d3:f2:3f:c2:93:75:b7:54:0d:cb:4c:db:c9:
2d:90:28:8b:46:ff:b0:ea:e9:c4:74:d0:f7:ec:98:
43:d7:8e:13:7d:05:45:d2:e8:51:56:4c:4e:2e:9e:
64:bd:98:22:a2:6f:6b:e3:dc:c0:64:f4:59:da:40:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:48:16:D1:D6:4C:B6:49:E9:D3:6A:A8:9A:65:E5:7A:84:EC:4D
X509v3 Authority Key Identifier:
keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.252.176.0/21
IPv6:
2401:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
77:ba:49:03:6b:90:e7:c7:68:f5:0b:78:61:44:b2:30:03:56:
66:cb:58:ac:59:21:08:74:39:81:42:0b:ac:c8:e1:c4:d2:72:
6e:df:25:b2:2d:1d:42:bd:16:f2:b7:fd:7b:af:4a:80:dd:f1:
9b:d3:16:fe:b1:58:e3:fa:59:0a:8f:60:10:44:38:8f:a2:e3:
81:43:98:cb:c2:5d:52:80:65:a3:25:ce:40:27:18:00:f1:64:
19:29:be:f6:57:fd:7a:c3:21:f4:76:df:d5:39:c9:75:57:ba:
f9:a6:19:31:7e:bc:ca:35:c5:1a:47:33:01:a5:23:34:59:a4:
ab:ad:06:d6:b1:f4:19:71:06:7d:ea:9c:f1:1b:88:2d:6b:51:
f5:fc:a7:b6:d6:44:be:6e:9e:96:bc:5b:28:2f:bb:cc:9a:cb:
e1:7f:60:2e:ee:fc:b5:c2:01:63:5e:d5:0b:f2:4a:f8:56:8b:
98:b1:4a:bc:31:70:91:78:a7:7e:9b:32:4b:19:4b:f0:90:9a:
4f:23:3d:b7:04:eb:d9:5c:a4:da:1c:3c:be:98:5b:ba:41:b2:
fb:5b:df:f9:6b:3a:8d:6a:1f:cd:b9:bc:bf:83:8c:1d:80:7b:
f7:1f:8b:ed:b8:2e:3d:34:38:97:8e:c9:bb:99:72:5f:34:54:
5a:9b:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:05 2026 by rpki-client