
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60A4BC6A34D411F1ABB90DBBCB833773.roa
File: 60A4BC6A34D411F1ABB90DBBCB833773.roa (raw, json)
Hash identifier: 14N75mnDJ3s0NQ4TJI4v0olFuKtaEoJP7cPxkYdRun4=
Subject key identifier: A9:72:99:D1:57:E9:0E:CC:3C:7D:A4:0B:B2:65:3D:7B:02:70:BD:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB97
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60A4BC6A34D411F1ABB90DBBCB833773.roa
Signing time: Sun 31 May 2026 17:53:16 +0000
ROA not before: Sun 31 May 2026 17:53:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 59173
IP address blocks: 103.41.88.0/24 maxlen: 24
103.41.89.0/24 maxlen: 24
103.41.91.0/24 maxlen: 24
2001:df0:fc00::/48 maxlen: 48
2001:df0:fc01::/48 maxlen: 48
2400:daa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60311 (0xeb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:53:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c758c-3361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:0b:d7:95:f9:30:45:0a:8d:25:9e:46:ba:
9a:4f:23:da:a7:05:59:16:11:d1:9d:d9:2b:87:9b:
4a:34:f2:88:c9:b0:53:b5:fe:be:d7:51:85:c4:c5:
50:45:25:13:35:b4:14:5d:8a:49:44:79:4a:15:f3:
d5:81:2c:09:ca:8c:09:7c:a8:3a:30:ed:82:22:13:
d2:c7:73:34:57:cc:d6:9b:b3:a4:89:3d:0f:a3:1c:
b6:8d:4d:c9:f8:83:c0:60:06:06:2f:b2:96:fa:90:
7a:1a:ad:23:f3:7c:c5:13:88:3e:30:e1:3e:ce:95:
6b:86:2f:52:9c:fd:60:6d:8d:60:fd:23:92:3f:5a:
67:96:32:8c:30:9d:66:18:d7:59:2a:a3:3b:ac:1d:
92:0c:c5:34:ae:ee:70:45:d5:56:59:63:c3:b4:43:
07:cb:3c:40:6e:6d:15:aa:26:39:68:a1:cb:50:33:
fe:47:b2:22:70:87:5d:e3:c9:bd:30:33:f2:5c:e9:
f8:a7:72:b7:0b:67:59:60:17:76:f1:59:9c:95:e2:
79:e9:ce:32:7c:a2:16:8c:76:6a:20:c3:6a:bf:d8:
4c:f8:1a:1c:2d:70:a3:d4:76:f7:ae:83:4f:3c:ac:
1f:ae:04:92:66:ce:83:35:35:1c:c6:1f:f1:64:0c:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:99:D1:57:E9:0E:CC:3C:7D:A4:0B:B2:65:3D:7B:02:70:BD:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60A4BC6A34D411F1ABB90DBBCB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.41.88.0/23
103.41.91.0/24
IPv6:
2001:df0:fc00::/47
2400:daa0::/32
Signature Algorithm: sha256WithRSAEncryption
74:8f:b0:64:02:cd:f9:89:f7:0d:17:80:be:47:4b:56:76:dd:
cc:98:81:88:63:d2:c3:c4:9a:1d:5f:2b:5a:74:7c:69:d2:34:
70:cc:a6:71:80:29:7f:54:66:27:09:b1:48:4d:c7:c7:a0:e1:
2b:bf:20:1a:b6:01:93:61:ac:de:b3:cd:4a:fc:7f:71:96:c3:
0b:79:43:f5:6f:3d:1a:dc:02:3e:e2:d0:4b:ba:c2:b9:7d:f9:
62:5a:38:64:5c:92:d6:ff:c6:56:77:cd:55:37:c3:fc:0e:b0:
b1:b3:f8:d1:54:05:bc:3b:79:1b:ee:a7:b7:da:97:9b:2b:5a:
c5:ce:8c:ee:4a:2d:bb:c6:bc:5e:59:b6:ea:76:ec:c4:7e:59:
12:9a:7d:3c:e8:c4:10:ad:86:a0:78:51:50:47:2a:b3:1f:dd:
53:06:98:f6:d8:8c:3a:b3:68:e4:38:7f:69:16:ee:65:2d:fd:
63:8d:15:bf:b3:12:16:76:1c:8d:d8:09:ea:61:4a:63:7a:9d:
68:03:f7:a8:bf:e1:a9:55:97:ba:e8:9a:8e:74:e6:b7:8a:a5:
9b:2d:38:a9:80:90:b5:3d:1d:94:a7:53:76:7a:ee:32:39:8f:
07:8c:ab:2d:1f:f2:ab:e9:80:5d:7e:46:f7:eb:6b:d8:c8:d1:
f3:97:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:03 2026 by rpki-client