
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
File: 60377A8C695311EEB599BD23C4F9AE02.roa (raw, json)
Hash identifier: 6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=
Subject key identifier: 84:48:C2:9B:C9:CE:2E:6F:3A:4E:7A:54:8D:AA:7E:8E:6E:63:38:B2
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 023C
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:58:09 +0000
ROA not before: Fri 29 Aug 2025 03:51:42 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55850
IP address blocks: 103.96.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Aug 29 03:51:42 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59771-9712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:17:80:69:c7:78:fa:df:e1:fd:0d:38:dc:
54:c1:72:60:ea:17:ad:10:da:b0:b9:3d:bb:1d:55:
d8:b2:29:1e:7e:ac:86:1f:0c:3a:2c:20:7a:1b:4c:
84:4c:1a:e8:f4:7f:ec:a2:94:76:0e:8a:3f:99:9c:
df:60:f0:1b:27:b6:b2:0c:32:40:8f:c5:80:8d:6e:
9c:76:7b:d0:96:33:13:77:c1:cd:2d:a9:30:0d:04:
58:01:52:84:ad:e3:f8:88:b0:4b:7a:53:69:9b:97:
43:58:1d:b9:f8:60:25:fb:19:94:c7:9f:7f:11:69:
39:de:be:df:63:ba:9b:f7:6f:d7:a9:c8:60:39:07:
48:76:88:71:7e:a9:c5:7d:ed:1f:f5:78:a8:c4:e9:
90:d3:bc:73:7b:58:91:1d:bf:34:4e:68:ad:b1:08:
06:18:57:0f:42:41:2e:10:e7:28:59:13:31:77:52:
14:d4:28:08:96:f6:17:5d:05:4a:f6:c8:95:72:78:
4b:33:ec:5f:75:20:5d:58:32:90:96:55:20:f7:36:
c5:e5:62:07:07:b4:9a:cb:fc:74:ac:00:53:9b:b9:
16:57:91:56:3d:18:cb:e8:0e:5d:54:18:a1:5d:eb:
80:bd:f9:df:28:4c:2f:9b:f4:11:fd:7a:f2:7f:8e:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:C2:9B:C9:CE:2E:6F:3A:4E:7A:54:8D:AA:7E:8E:6E:63:38:B2
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:25:72:0f:93:6b:67:d0:0e:ee:1e:cb:e6:f1:61:7f:72:52:
5b:82:81:7e:af:f4:44:34:2a:7c:8e:83:6e:2e:20:c7:d8:0a:
a3:78:4a:f8:44:6b:46:eb:1e:6a:c2:fa:03:33:c3:f0:58:64:
6d:26:19:fd:29:22:1e:20:a8:f0:9d:b6:51:64:7a:f7:56:36:
c9:33:bf:f1:71:59:30:8c:d2:0b:ac:31:c9:09:8e:b6:3d:d4:
d0:30:a7:d9:b1:6d:d3:f0:0d:4d:e9:0d:d8:ec:3c:98:31:c5:
c2:76:61:8b:21:fc:fe:23:54:d5:53:0f:65:5d:a5:9c:0f:c0:
01:ce:5b:8a:c1:ed:9e:2e:f2:a9:1c:d8:aa:b3:de:f4:0b:c6:
ca:5c:87:fb:77:cb:ca:64:62:cc:88:a1:66:c5:1a:e9:4c:17:
17:70:b5:05:f3:bc:25:d1:4d:73:73:87:21:96:15:a0:e0:9c:
2c:1f:5e:8f:93:5d:d9:ae:43:d5:ff:a1:1d:fd:fc:a1:41:1f:
54:71:a9:87:48:31:ce:f6:b4:89:da:18:d3:05:87:91:04:e3:
84:b7:57:5c:f5:95:ab:e5:3b:06:f5:30:ab:51:ba:a5:64:69:
50:2f:83:b3:ce:b8:75:c6:ca:03:5a:a9:60:de:09:d5:66:ab:
a1:01:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:55 2026 by rpki-client