
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
File: 60377A8C695311EEB599BD23C4F9AE02.roa (raw, json)
Hash identifier: tVBR6nv+Wa6lZyjGAKO8lfOoX0W/tb6WbJqBAEHgIOo=
Subject key identifier: 24:B5:AB:BC:87:45:1A:D6:64:EE:2C:E8:67:AA:6A:56:8A:3C:99:CE
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 02AA
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
Signing time: Thu 03 Sep 2026 02:51:20 +0000
ROA not before: Thu 03 Sep 2026 02:51:20 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55850
IP address blocks: 103.96.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Sep 3 02:51:20 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98e0a8-9a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:0b:bd:70:f8:84:f3:89:50:62:34:e2:5f:
10:9f:5a:4d:92:f4:c9:77:5e:a6:d0:25:ed:40:9c:
42:bc:06:1e:6b:df:9f:c9:1d:a0:55:cc:63:12:76:
fc:00:f2:22:67:c3:f9:95:01:01:c7:cd:cf:b6:41:
f4:54:34:61:22:e5:e3:43:4c:79:f4:0d:8d:66:05:
af:6c:b7:ec:8d:2c:33:36:12:8f:6a:13:25:7a:81:
5b:fa:7c:81:93:bb:e4:1e:56:4a:53:2a:da:85:b6:
7b:ab:43:f0:b4:48:fb:39:74:f9:c9:36:3f:29:ac:
e5:23:01:b2:8f:cd:62:f5:dd:21:7b:e5:5a:bd:ca:
da:47:09:f3:86:aa:1b:95:cf:e8:03:67:21:f0:fd:
04:ac:2c:aa:02:ea:ba:8f:fc:79:cc:ce:d2:72:a3:
dd:50:06:aa:bd:5c:ef:a2:7d:45:e8:f6:16:1a:43:
91:6f:84:d7:83:65:d2:d8:85:87:7d:95:69:f3:3e:
f0:b1:49:f2:2c:59:38:26:c3:19:65:8c:2c:ca:53:
68:32:e5:57:26:3b:b9:88:52:1f:24:09:8f:d5:f5:
27:19:a9:17:f0:97:79:40:27:ec:fa:67:54:49:4a:
37:6d:dd:4d:9e:8d:a8:b4:69:15:85:79:c6:00:92:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:AB:BC:87:45:1A:D6:64:EE:2C:E8:67:AA:6A:56:8A:3C:99:CE
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2e:26:4c:90:75:77:54:be:c4:a9:e3:bf:f1:2f:e6:bd:c6:
1d:80:03:b4:0a:f9:38:0f:69:36:43:69:5e:1a:d1:66:c7:13:
ec:b2:69:4b:21:06:e0:c6:23:c4:71:f5:55:16:a3:e3:ba:f6:
e8:c3:8d:9f:1b:29:59:3d:45:a7:67:66:a6:97:da:8e:5f:a0:
b8:86:cd:b8:b2:ba:3e:54:de:6a:96:ba:bc:f0:2f:24:e8:27:
e7:f8:2c:3a:57:e8:35:4c:95:71:66:0d:74:b6:0a:20:d3:df:
c6:e1:b3:c9:1c:84:8b:ea:f4:55:a5:b3:eb:b8:5f:97:a5:5e:
98:e9:e5:2a:c8:aa:c9:4d:8b:c1:ec:54:98:1d:27:47:98:7b:
a4:5f:cf:ce:de:19:e4:18:22:a6:90:f4:75:7c:a4:c7:41:17:
67:2a:ad:77:e1:0f:18:0d:29:3e:3d:6d:59:c3:1e:b9:07:ee:
88:f3:f6:80:5e:35:9e:21:a0:95:f2:33:90:f6:8c:84:ec:e3:
6b:61:2d:d0:a4:df:47:32:8f:7d:98:76:3c:5a:ee:47:1c:21:
88:4b:c0:42:57:2d:eb:03:04:b6:48:f5:b9:03:a7:80:eb:2c:
1a:f6:03:5b:17:bf:73:b6:d9:0a:3f:52:7a:1b:d9:00:77:78:
2c:03:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:14:30 2026 by rpki-client