
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa
File: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (raw, json)
Hash identifier: ZPBt0egrhOJrKekibnVTE6GSDFlqHOpnvTM4pJu29Jg=
Subject key identifier: 63:F2:E0:F0:E8:15:EE:49:B6:DD:16:73:41:DF:0A:74:AD:7A:FD:16
Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial: 063D
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa
Signing time: Fri 24 Jul 2026 23:44:48 +0000
ROA not before: Fri 24 Jul 2026 23:44:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136793
IP address blocks: 103.96.60.0/22 maxlen: 22
103.96.60.0/24 maxlen: 24
103.96.61.0/24 maxlen: 24
103.96.62.0/24 maxlen: 24
103.96.63.0/24 maxlen: 24
123.253.200.0/22 maxlen: 22
123.253.200.0/23 maxlen: 23
123.253.202.0/23 maxlen: 23
2401:75c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Validity
Not Before: Jul 24 23:44:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a63f8f0-8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:c7:5a:c1:21:14:82:64:bc:aa:66:13:b9:
48:4e:d7:f0:f4:f3:bb:14:ce:8a:c7:9c:62:3a:46:
57:1d:84:6b:96:0d:ad:80:f4:07:a0:04:5f:4b:3a:
3a:c5:85:31:71:2d:31:e8:8a:db:21:82:6b:42:2d:
ad:30:21:48:75:b3:7e:e8:d7:4b:eb:2f:bc:d1:28:
5e:ac:f0:6a:47:0c:0a:5c:01:5a:dd:cf:fe:6b:b6:
8f:04:02:8e:b0:a3:65:b9:63:97:fe:35:55:3f:a3:
42:8d:55:3a:23:48:12:28:02:b2:93:90:ad:1c:ca:
61:c2:5c:3c:ba:ab:99:da:8c:9e:e9:33:0b:94:8b:
b5:f6:27:68:81:05:2c:b9:35:6e:d1:54:d0:90:3a:
47:14:fd:e5:fe:0a:42:95:3b:5a:74:72:72:4a:a9:
40:0f:e2:02:fb:e9:86:38:9b:43:7a:c7:58:31:71:
12:92:82:55:8c:4d:7b:2d:b6:dc:53:5d:84:15:3d:
9d:c3:56:8f:6b:29:92:e4:53:47:cc:9b:db:a7:93:
6d:2a:67:2e:f3:bb:9e:95:6a:8f:20:30:64:56:93:
0e:a4:1c:7f:66:17:10:2f:fe:08:16:1b:40:89:7d:
19:41:66:f9:a1:ea:60:29:22:36:4f:f0:19:fc:22:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F2:E0:F0:E8:15:EE:49:B6:DD:16:73:41:DF:0A:74:AD:7A:FD:16
X509v3 Authority Key Identifier:
keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/B6FC3096EB1611EBB525CD6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.60.0/22
123.253.200.0/22
IPv6:
2401:75c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:e0:df:18:38:93:55:87:36:d2:5e:f3:1d:83:41:50:f4:b5:
7b:c0:3d:3f:29:8b:6e:9f:5b:4c:cd:68:8b:d7:dc:17:d2:d2:
3b:b6:13:9d:3d:5f:d0:e0:2f:f6:60:f3:f0:8b:06:8c:d6:2f:
2b:89:76:e8:b3:99:13:3f:c9:96:5a:be:03:b9:02:13:d3:a3:
3b:32:cd:ca:aa:38:d9:c9:81:3b:08:12:be:b6:9a:1d:90:33:
23:1f:33:23:c6:48:04:5f:8b:55:fd:b3:44:04:3b:c9:65:65:
10:9f:2d:94:e3:63:0d:93:d2:51:ad:1c:c1:68:8d:1d:de:b9:
7e:8b:05:96:57:fe:fb:b2:42:4a:5b:1a:6e:1e:c5:5e:8f:54:
47:06:a6:c0:f0:ac:9b:98:a4:db:82:dc:d0:3d:39:0b:e0:c7:
47:77:1e:1f:07:ab:36:36:b7:15:a9:13:9d:7a:64:71:fc:58:
9d:b0:25:36:36:e8:74:8f:71:b1:52:e5:95:ef:3a:e0:db:a9:
9c:14:f8:80:ee:94:cf:4f:63:a2:ca:9b:7c:3a:3f:55:9c:4d:
0c:ab:f7:3c:4b:46:d3:de:97:f2:f9:8b:52:f8:f9:ef:cf:7b:
7a:5a:12:ec:76:b2:2d:2e:6e:a9:aa:8b:75:6a:f8:bf:78:e9:
ba:a5:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:58 2026 by rpki-client