
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/A4D647F8420A11F19BB08D67C6833773.roa
File: A4D647F8420A11F19BB08D67C6833773.roa (raw, json)
Hash identifier: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=
Subject key identifier: EF:F8:F1:7B:C8:68:FD:3E:98:97:4C:D7:40:93:44:5C:F9:A4:FF:DC
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: E1
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/A4D647F8420A11F19BB08D67C6833773.roa
Signing time: Mon 27 Apr 2026 07:28:11 +0000
ROA not before: Mon 27 Apr 2026 07:28:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 402436
IP address blocks: 103.60.56.0/24 maxlen: 24
103.60.57.0/24 maxlen: 24
103.60.58.0/24 maxlen: 24
103.60.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 07:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Apr 27 07:28:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69ef100b-2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:fa:ab:f9:c4:18:4d:f6:28:bc:c8:f0:ff:
90:f4:d7:c9:1a:03:e3:38:a1:0b:90:a9:ff:5f:b6:
30:04:e3:e4:ad:01:70:67:12:a5:05:da:97:b3:93:
38:db:f9:9f:76:60:47:c6:9c:66:4f:85:d1:93:0f:
61:33:64:3e:75:51:04:a8:6b:28:a3:8b:fb:9d:7d:
48:fe:eb:a0:04:35:1b:94:67:f1:e8:b2:d6:9a:d2:
2e:db:ac:42:c0:45:60:fb:ed:c9:35:78:7d:ab:76:
63:8a:07:3d:b2:34:d1:65:58:c9:06:cb:5e:4c:d1:
fd:c1:24:9f:0d:eb:e0:29:c8:d2:b8:74:99:94:9c:
2e:68:e1:9c:23:c4:5a:90:5c:00:91:14:c8:d2:bb:
09:a4:1a:d7:47:3b:6b:3f:5c:9e:5d:56:c9:30:47:
30:e6:74:62:21:d4:c9:0d:c0:b6:02:24:77:1c:3a:
1b:3a:fd:2c:06:cb:3d:97:15:e7:29:4a:d6:e0:b2:
fe:62:48:4e:53:3c:d7:48:63:27:81:85:7a:24:84:
47:70:59:64:01:8b:9c:7e:a8:3c:76:67:2f:d1:b8:
34:ab:10:71:a1:98:6a:5e:28:42:42:6c:4b:e9:4a:
f4:1a:73:21:9b:8d:f7:7f:5c:60:03:af:10:d1:14:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:F1:7B:C8:68:FD:3E:98:97:4C:D7:40:93:44:5C:F9:A4:FF:DC
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/A4D647F8420A11F19BB08D67C6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:36:e2:d0:05:0c:b6:d6:5e:18:ba:40:59:e1:a3:54:73:3d:
42:7e:c0:e6:00:cc:b8:21:c1:80:ca:53:ea:cb:90:b3:fd:fb:
98:f6:25:ea:87:a4:de:00:ce:94:74:a3:72:61:0a:43:b6:2f:
8c:ee:e5:cb:03:c9:ed:7c:e4:2b:d4:a9:01:cc:56:46:91:83:
d7:55:84:3b:d3:34:66:d6:94:f0:75:09:9d:53:d1:96:e9:48:
df:1f:ca:a3:1d:5d:4e:e7:46:c6:29:7e:d3:ef:a2:92:39:72:
1f:8f:da:88:e0:a9:9f:4e:ef:9d:43:53:a4:6b:d4:28:fe:61:
80:b5:3a:5e:9e:12:a8:14:65:63:f4:10:a6:b7:cd:43:62:19:
12:17:9d:18:31:a9:a4:37:c0:f2:92:96:fa:62:b9:fe:3c:3c:
a6:a3:ce:dd:e6:89:8d:f7:62:ee:72:58:54:c5:80:b3:9d:25:
34:4b:27:4d:7f:e3:7e:62:5d:c6:1e:b1:e7:80:31:98:cf:22:
a8:da:a7:5a:21:dc:3f:ca:69:6f:d1:f2:ed:88:7c:33:82:d6:
20:ba:bd:e6:84:8d:a2:29:6c:26:e8:7f:a5:e4:5d:bf:76:ba:
ab:ac:55:9b:38:a0:1c:6c:dd:12:83:ec:0e:35:1f:f7:41:ac:
05:77:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 15:09:31 2026 by rpki-client