
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa
File: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (raw, json)
Hash identifier: 1f2phcqQmmi3QewwHTntymoXxlY1vaGBHZf4d83qpRc=
Subject key identifier: 1A:F8:A3:1D:B0:03:AC:E6:5F:04:E1:13:B9:D6:81:A1:66:44:04:6B
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0F9B
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa
Signing time: Wed 02 Sep 2026 18:35:47 +0000
ROA not before: Wed 02 Sep 2026 18:35:47 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23077
IP address blocks: 2405:84c0:3000::/36 maxlen: 40
2405:84c0:5e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3995 (0xf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Sep 2 18:35:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a986c83-ee68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:06:87:98:ee:0e:38:41:57:70:c6:ee:92:
73:04:cb:f8:d1:25:23:37:38:f7:ed:7a:aa:5b:d0:
17:10:62:21:f0:e6:34:92:b3:9d:4b:bf:f6:6d:37:
6f:16:23:ed:f3:0f:fa:b0:3a:40:fc:5d:cc:fd:e9:
3d:90:20:85:62:41:23:a5:ec:99:14:82:df:97:13:
9a:09:ad:4c:60:50:a9:fa:f1:63:70:13:76:ac:f3:
6d:d9:ce:a7:10:8d:97:49:d8:a2:5e:25:a2:66:21:
8a:26:dc:7d:d5:5a:19:ba:b2:75:48:4c:c5:1c:8a:
ab:16:29:aa:47:f0:ab:28:25:36:e6:dc:ba:65:d3:
62:1c:72:a4:15:71:0c:94:83:9c:16:e0:5c:46:a7:
eb:92:c4:2a:71:fb:12:62:6e:4a:41:e8:47:4a:ee:
4c:55:bb:5c:73:e7:4c:7e:ae:b5:4c:46:53:f2:b9:
01:cf:a8:a2:23:cc:de:29:18:04:a3:1f:38:74:18:
b7:65:c9:aa:2c:c5:bc:fa:1e:de:93:c6:15:3b:e1:
57:32:4a:4a:58:a2:76:c9:d1:0f:02:6a:9d:36:db:
1f:60:6b:6d:3b:89:6c:8f:40:1f:f7:de:6f:e3:b1:
e7:54:6e:b6:49:21:9a:67:81:fe:cb:9b:bc:09:4b:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F8:A3:1D:B0:03:AC:E6:5F:04:E1:13:B9:D6:81:A1:66:44:04:6B
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:84c0:3000::/36
2405:84c0:5e00::/40
Signature Algorithm: sha256WithRSAEncryption
00:c7:91:97:62:9b:14:fa:23:a5:45:8a:6d:04:08:bd:6b:0c:
15:6d:53:06:5c:19:98:ba:0b:c8:00:19:e6:99:b6:e9:44:eb:
a8:4d:0d:a5:d2:65:69:3f:91:3e:5d:87:73:ee:35:b8:ef:0b:
19:f8:f7:f8:dc:11:3a:80:e2:4d:78:35:0c:23:7c:44:fc:ff:
48:16:5c:6f:e9:78:30:7a:8a:d5:e0:19:15:fe:80:71:f4:ab:
8f:9d:ae:ea:8e:3c:9a:12:df:0d:f5:97:d1:ed:b9:e8:c6:a0:
61:04:2e:bc:8b:ae:c9:a2:6c:57:27:67:ba:1f:18:6f:5e:eb:
b5:de:a8:18:b5:44:b4:c8:86:33:a5:fc:2d:69:8b:7e:fd:92:
57:2f:cc:63:d7:6d:6d:23:99:d5:f2:96:b2:55:df:2c:a3:2e:
23:f7:49:24:3c:4e:b5:06:28:3c:c3:4c:b5:fe:6c:2c:4a:3f:
68:8a:96:00:12:59:c9:98:b6:82:c4:2f:bd:e8:f6:a1:ab:49:
2c:4a:38:52:b3:9a:65:a3:b0:50:42:68:ff:c8:84:ff:77:6d:
2e:62:44:4f:13:90:1b:70:9d:9f:49:df:e7:71:87:6d:5d:67:
b8:06:96:16:4e:ea:ea:35:ce:07:f7:7f:0e:18:d4:03:ae:09:
2d:d3:fd:fc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgICD5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC
NzBBRjgwOTkwHhcNMjYwOTAyMTgzNTQ3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4NmM4My1lZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IsGh5juDjhBV3DG7pJzBMv40SUjNzj37XqqW9AXEGIh8OY0krOdS7/2bTdv
FiPt8w/6sDpA/F3M/ek9kCCFYkEjpeyZFILflxOaCa1MYFCp+vFjcBN2rPNt2c6n
EI2XSdiiXiWiZiGKJtx91VoZurJ1SEzFHIqrFimqR/CrKCU25ty6ZdNiHHKkFXEM
lIOcFuBcRqfrksQqcfsSYm5KQehHSu5MVbtcc+dMfq61TEZT8rkBz6iiI8zeKRgE
ox84dBi3ZcmqLMW8+h7ek8YVO+FXMkpKWKJ2ydEPAmqdNtsfYGttO4lsj0Af995v
47HnVG62SSGaZ4H+y5u8CUvKowIDAQABo4ICajCCAmYwHQYDVR0OBBYEFBr4ox2w
A6zmXwThE7nWgaFmRARrMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4
NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvNjBCM0NENkVB
RjJFMTFFRUJGMTJERjQ1QzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW
BAIAAjAQAwYEJAWEwDADBgAkBYTAXjANBgkqhkiG9w0BAQsFAAOCAQEAAMeRl2Kb
FPojpUWKbQQIvWsMFW1TBlwZmLoLyAAZ5pm26UTrqE0NpdJlaT+RPl2Hc+41uO8L
Gfj3+NwROoDiTXg1DCN8RPz/SBZcb+l4MHqK1eAZFf6AcfSrj52u6o48mhLfDfWX
0e256MagYQQuvIuuyaJsVydnuh8Yb17rtd6oGLVEtMiGM6X8LWmLfv2SVy/MY9dt
bSOZ1fKWslXfLKMuI/dJJDxOtQYoPMNMtf5sLEo/aIqWABJZyZi2gsQvvej2oatJ
LEo4UrOaZaOwUEJo/8iE/3dtLmJETxOQG3Cdn0nf53GHbV1nuAaWFk7q6jXOB/d/
DhjUA64JLdP9/A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:19 2026 by rpki-client