
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa
File: 60DA0694D9E111EA82120960C4F9AE02.roa (raw, json)
Hash identifier: 0IxRPzUz6sCXIYvNIoP9r9+q38vSREeCr1KuWRJA/O4=
Subject key identifier: 0F:5C:2B:50:78:7F:70:30:F1:27:A1:F8:E5:20:78:56:0A:9E:07:C4
Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial: 35D4
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:40:50 +0000
ROA not before: Fri 02 Oct 2026 15:40:50 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 135168
IP address blocks: 103.136.122.0/24 maxlen: 24
103.136.123.0/24 maxlen: 24
103.195.14.0/24 maxlen: 24
103.195.15.0/24 maxlen: 24
2404:8e80:1::/48 maxlen: 48
2404:8e80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Validity
Not Before: Oct 2 15:40:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abfd081-ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:62:3b:87:d3:ba:b5:79:f2:fa:be:b9:9f:
77:0f:e1:9a:db:c7:05:6a:08:a0:93:d5:2a:d8:35:
4c:1b:6c:72:7b:69:4b:21:2a:12:8d:56:41:0d:0c:
a5:af:70:d7:81:e7:a9:b5:ce:96:8e:eb:52:4f:12:
47:49:fe:c9:bf:11:9a:10:a7:ab:2c:e6:91:0b:c7:
dc:66:2c:c2:99:c4:e1:23:53:61:a7:06:1f:67:57:
24:2d:5a:49:f8:60:6e:dc:d3:57:8d:c3:bc:d8:a7:
01:2f:82:d1:61:4a:78:50:63:be:07:42:fa:96:61:
48:70:e8:6e:9c:d4:aa:b0:11:d2:21:7b:47:94:7e:
ce:6f:b2:3e:f2:25:9b:cf:19:32:34:29:08:55:ea:
ea:f5:43:bc:4a:2a:74:cb:88:65:bb:4e:80:f8:28:
7c:5e:ff:9a:a8:40:c3:81:bc:0c:94:bb:43:5e:50:
ed:99:57:13:f4:8e:c5:88:19:8b:89:67:ac:6c:77:
9d:d2:81:ed:c4:1c:95:62:45:0d:0e:51:bd:1d:06:
fa:ea:ca:fd:d4:26:d9:19:a9:cc:a0:b8:5e:1e:0c:
ea:c0:b4:f4:1e:9a:38:8f:4e:be:e5:92:28:09:b6:
a5:61:d7:fa:ea:d4:0b:76:41:1a:21:ff:4a:7e:40:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:2B:50:78:7F:70:30:F1:27:A1:F8:E5:20:78:56:0A:9E:07:C4
X509v3 Authority Key Identifier:
keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.122.0/23
103.195.14.0/23
IPv6:
2404:8e80:1::/48
2404:8e80:3::/48
Signature Algorithm: sha256WithRSAEncryption
2b:b4:c9:b2:24:1f:8d:2f:6e:a5:cf:7e:e5:5e:06:c2:af:c6:
e1:7c:35:5c:1d:01:ab:fd:5c:b1:8c:da:f0:07:e2:75:c3:cd:
ce:9d:d6:7f:7d:5b:60:70:19:e6:9b:43:6b:67:ca:4b:f2:89:
eb:f4:4e:ad:f7:33:45:bb:53:9f:3d:27:1e:ac:37:ab:34:61:
20:62:a6:0d:8b:f1:07:ba:7d:aa:c4:87:62:a4:f6:5c:15:ff:
c3:40:40:c2:1b:c2:d9:20:28:26:37:b9:f9:b3:04:cf:0c:52:
d9:ba:c7:09:24:b8:a5:d7:df:74:c0:39:68:a5:d5:3f:18:75:
5d:d6:20:96:08:0e:11:a5:28:d3:fd:b3:ca:af:a9:7d:39:ca:
3b:e1:56:49:77:df:4d:c2:bc:4a:17:e2:ba:7a:85:47:ef:3b:
5b:ae:c5:11:1e:a1:64:c5:d8:b7:d9:e9:32:66:c7:da:1f:2b:
21:d5:a1:65:09:e5:ea:6d:2a:12:8f:e4:c1:e7:1f:9d:3a:9f:
65:6e:9d:f1:31:ad:06:f8:7c:ad:ea:0a:9f:a8:3a:22:35:de:
e1:c3:78:3e:2e:4f:83:c1:92:ef:ab:1e:07:db:bf:5d:03:47:
0c:dd:ba:0e:9c:51:b8:75:df:39:d9:e4:ab:cf:25:c1:5a:42:
d2:eb:9b:67
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC
NTUxQkI5MzAwHhcNMjYxMDAyMTU0MDUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZDA4MS1hZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk55iO4fTurV58vq+uZ93D+Ga28cFagigk9Uq2DVMG2xye2lLISoSjVZBDQyl
r3DXgeeptc6WjutSTxJHSf7JvxGaEKerLOaRC8fcZizCmcThI1NhpwYfZ1ckLVpJ
+GBu3NNXjcO82KcBL4LRYUp4UGO+B0L6lmFIcOhunNSqsBHSIXtHlH7Ob7I+8iWb
zxkyNCkIVerq9UO8Sip0y4hlu06A+Ch8Xv+aqEDDgbwMlLtDXlDtmVcT9I7FiBmL
iWesbHed0oHtxByVYkUNDlG9HQb66sr91CbZGanMoLheHgzqwLT0Hpo4j06+5ZIo
CbalYdf66tQLdkEaIf9KfkDwXQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFA9cK1B4
f3Aw8Seh+OUgeFYKngfEMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE
QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvNjBEQTA2OTRE
OUUxMTFFQTgyMTIwOTYwQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS
BAIAATAMAwQBZ4h6AwQBZ8MOMBgEAgACMBIDBwAkBI6AAAEDBwAkBI6AAAMwDQYJ
KoZIhvcNAQELBQADggEBACu0ybIkH40vbqXPfuVeBsKvxuF8NVwdAav9XLGM2vAH
4nXDzc6d1n99W2BwGeabQ2tnykvyiev0Tq33M0W7U589Jx6sN6s0YSBipg2L8Qe6
farEh2Kk9lwV/8NAQMIbwtkgKCY3ufmzBM8MUtm6xwkkuKXX33TAOWil1T8YdV3W
IJYIDhGlKNP9s8qvqX05yjvhVkl3303CvEoX4rp6hUfvO1uuxREeoWTF2LfZ6TJm
x9ofKyHVoWUJ5eptKhKP5MHnH506n2VunfExrQb4fK3qCp+oOiI13uHDeD4uT4PB
ku+rHgfbv10DRwzdug6cUbh13znZ5KvPJcFaQtLrm2c=
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:03:20 2026 by rpki-client