
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa
File: 60C72042052911F0A2361C50C4F9AE02.roa (raw, json)
Hash identifier: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=
Subject key identifier: 48:BA:AC:F6:47:AD:A6:97:77:47:0D:96:1B:96:67:34:24:18:52:32
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 020F
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:08:58 +0000
ROA not before: Mon 29 Dec 2025 02:22:20 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138077
IP address blocks: 101.1.4.0/24 maxlen: 24
2401:44c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Validity
Not Before: Dec 29 02:22:20 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4568a-e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:cb:30:ae:1e:00:df:01:60:46:c3:4a:67:
59:e5:8d:9f:5c:9d:b6:27:76:01:50:41:33:a4:95:
d8:13:6f:fb:dc:6b:fb:64:42:ed:b2:60:79:23:54:
bc:6c:24:a5:0c:e7:f5:87:d3:7d:37:70:13:fe:e8:
f9:3a:a6:60:26:ba:30:3c:df:25:7f:10:13:7b:9a:
3c:5b:db:eb:6c:3a:7f:c7:aa:74:a9:f0:8f:41:74:
6e:f3:e4:88:26:ef:18:0f:ab:57:91:32:6e:b0:7d:
1f:3f:80:78:76:09:c1:fe:ed:f5:84:9e:42:11:7d:
3f:80:26:f7:2a:49:a7:de:8c:f2:88:39:75:03:3b:
e4:7b:b8:f0:9a:4e:57:0a:f5:8d:ad:90:9d:b4:aa:
64:19:ed:10:dc:35:ea:74:1f:0f:ce:68:cb:5f:aa:
3c:28:83:eb:62:7e:26:32:a4:f6:1b:da:51:68:94:
e8:cb:4a:8a:71:37:6c:c3:80:ae:2b:44:a5:71:02:
b8:d0:c3:63:be:e6:81:3d:e6:3f:6e:8b:68:5c:31:
4e:66:b9:98:ab:e8:47:4b:1f:6e:fe:f5:be:36:27:
93:ec:76:b6:3b:ba:26:8e:90:75:93:7d:6f:7a:c5:
0f:76:2b:17:0b:a1:97:9d:74:25:77:95:3f:ed:3c:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:AC:F6:47:AD:A6:97:77:47:0D:96:1B:96:67:34:24:18:52:32
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.1.4.0/24
IPv6:
2401:44c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
59:1c:53:b3:64:88:68:40:8f:c9:39:e1:cc:6f:13:ec:37:16:
3d:7c:63:41:17:f7:fe:52:72:83:69:9c:72:33:dc:d3:9c:cd:
58:73:95:aa:46:cc:b6:37:20:e4:a4:c6:04:8a:ec:21:28:60:
22:09:cd:ea:7c:18:94:a5:ae:3c:9d:94:b7:57:a3:5a:b5:b3:
bf:64:5a:9e:c0:14:d1:65:fc:84:49:a3:cd:9c:f9:18:fa:4b:
18:e5:d7:8b:da:a4:2c:7e:95:17:40:e1:db:a8:75:59:d8:f4:
56:f3:e6:74:3b:66:d7:74:cd:ae:19:04:85:94:5d:07:fb:f7:
4c:22:67:66:6f:06:93:b1:0d:bc:30:0a:11:08:4e:9f:02:19:
82:ad:de:2a:e7:af:b1:5d:8a:df:96:73:c6:19:ea:b2:f6:27:
15:69:44:9b:b3:c1:e5:70:ba:aa:4b:20:42:ab:ce:c7:c2:f6:
01:64:14:fc:c1:aa:a4:94:97:d8:b7:64:cd:d0:a6:1d:cd:7b:
40:6f:8a:5d:b4:4c:d4:b0:e4:ae:3d:b8:0b:84:0d:23:f4:b8:
4e:d1:2e:f9:62:78:7f:ec:ac:27:f8:2d:ed:f8:82:b6:54:21:
8a:89:bb:7a:0e:c0:df:4c:15:48:dd:80:8d:8a:a6:0e:6f:5f:
2f:f5:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:18 2026 by rpki-client