
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C60C2764185011F1A18A69DF283D8C67.roa
File: C60C2764185011F1A18A69DF283D8C67.roa (raw, json)
Hash identifier: x7Zs7pSCb+U63TMEM4hCQmd10mXGSqdOk1O00nA57sA=
Subject key identifier: DC:96:94:D4:4D:3C:46:5B:DC:7A:0C:DA:44:2B:78:3E:A9:DC:25:54
Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial: 0B29
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C60C2764185011F1A18A69DF283D8C67.roa
Signing time: Wed 22 Jul 2026 20:20:27 +0000
ROA not before: Wed 22 Jul 2026 20:20:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135590
IP address blocks: 103.95.208.0/23 maxlen: 23
103.95.208.0/24 maxlen: 24
103.95.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Validity
Not Before: Jul 22 20:20:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a61260a-1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:5d:32:d6:d2:d1:63:6c:ed:fc:3a:97:51:
a1:09:61:a4:5c:f9:3b:bf:89:de:d6:dd:77:66:dc:
9e:70:3a:37:e0:81:cd:70:8c:6b:95:50:da:7c:0a:
19:ba:78:78:4e:1b:e8:7b:01:ed:ef:d3:79:b5:31:
2e:6c:fd:6b:32:32:23:8f:bf:65:32:94:dd:b2:19:
a3:81:87:4a:15:21:bc:57:ec:fd:81:9f:e0:4c:4d:
85:d4:85:e9:27:a8:b2:a6:d9:0f:67:f8:b8:5f:f7:
cd:82:05:43:f4:fe:e8:2b:66:94:ca:04:ed:98:29:
7a:af:ea:58:df:fb:94:67:e4:5c:0c:2a:b8:c3:1e:
5d:e1:61:82:14:91:d2:f8:86:5b:bc:d4:07:9f:31:
71:f1:ff:f0:82:fc:6d:1b:67:7f:dd:b6:5c:bd:68:
b8:e7:01:78:b3:3d:92:7e:f1:d9:b3:03:97:ff:7b:
35:ed:09:65:d8:f0:10:a0:7a:69:05:f9:c7:2e:7e:
e7:55:5f:f8:66:d1:9c:04:a1:c5:fc:2a:40:9a:e0:
8d:0d:ed:32:85:62:b4:4b:4d:40:90:97:84:49:b1:
a0:c4:e3:78:a9:10:e4:ad:8a:df:5f:af:48:1e:bd:
82:2c:45:99:39:78:bf:c7:65:db:e6:d3:56:67:b0:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:94:D4:4D:3C:46:5B:DC:7A:0C:DA:44:2B:78:3E:A9:DC:25:54
X509v3 Authority Key Identifier:
keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C60C2764185011F1A18A69DF283D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.208.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:87:7a:b2:10:f0:0d:70:59:90:29:1e:81:bf:c7:e0:dd:09:
db:07:96:cb:d2:df:9c:ff:b3:f0:4e:7a:c4:e6:e4:cc:89:93:
c1:ee:4b:7b:eb:f5:66:18:4a:3a:1b:7c:e9:2a:34:fc:cf:41:
8d:ac:d0:9a:8e:b1:d1:6e:57:a3:a8:1e:36:03:fe:4e:ea:ef:
fc:11:5b:97:2f:89:aa:2f:56:ea:a8:90:8b:f6:4c:e0:0a:c5:
e6:07:3a:a1:6e:61:f7:3d:48:21:83:b1:7f:67:8d:1a:58:79:
07:f9:55:cd:0a:a1:4b:c8:72:60:55:a1:ab:98:da:ff:41:5c:
6a:27:f5:63:ce:ca:f5:3f:fd:57:29:98:32:ca:56:fe:ce:d6:
64:3b:0a:30:17:30:db:75:10:1e:82:08:cd:c8:07:5f:dc:19:
43:bf:f4:54:67:a7:4a:2b:d3:32:8f:8b:4c:a2:ce:d3:85:03:
d7:b4:af:09:f5:07:79:a8:78:60:1c:8f:4f:3a:4e:32:f2:6b:
43:d7:27:18:29:4a:fb:eb:3c:6c:91:df:9c:d7:d9:d3:cf:93:
3f:df:f4:92:f7:1a:d6:d2:da:61:11:11:58:f3:25:4a:7e:9d:
c2:f2:bc:b7:01:30:ea:1f:27:11:60:18:e4:3e:2a:8d:c9:2c:
ff:7a:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:42 2026 by rpki-client