
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/60DB5E40835411F1B1AB651362A30FBC.roa
File: 60DB5E40835411F1B1AB651362A30FBC.roa (raw, json)
Hash identifier: QiwTuqsF+q6i3OyITXNa/EMVWTHfVE3WCTSJ5Pst84Y=
Subject key identifier: 62:85:0A:17:4C:C6:22:64:22:DE:6B:15:4E:B6:AF:47:78:31:81:77
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0286
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/60DB5E40835411F1B1AB651362A30FBC.roa
Signing time: Sun 19 Jul 2026 09:29:46 +0000
ROA not before: Sun 19 Jul 2026 09:29:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.231.206.0/24 maxlen: 24
103.72.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jul 19 09:29:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a5c9909-ea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:9c:06:1f:fa:9a:ea:4f:04:90:b9:4d:07:
7e:0f:92:80:48:03:01:b5:6a:ed:89:c6:28:2a:2b:
1f:f9:b2:59:08:38:03:2c:cc:a0:2a:c9:74:1c:0c:
27:87:40:97:81:28:f6:f7:e7:a4:69:0b:9b:99:39:
59:a0:8a:10:fa:50:49:7e:ee:da:f7:64:eb:8c:97:
57:5e:b1:cc:7b:5c:9c:57:6e:f6:7e:1e:71:60:df:
68:a8:cb:d5:68:df:4c:13:40:ca:75:1f:95:fc:00:
8f:4b:4f:5a:55:47:cd:08:19:67:b9:af:10:e4:93:
71:47:1c:7e:62:9b:3a:47:82:d4:a0:1f:95:f3:7f:
6b:cf:bc:4d:b9:08:d2:96:3c:a5:79:83:49:39:5b:
c4:e5:ae:30:01:b0:76:0d:9f:a6:0d:9f:ec:20:71:
d8:f8:45:38:c2:ae:d3:20:43:21:63:b3:ea:85:4b:
80:c5:a0:48:1f:88:ee:68:38:49:21:7e:bc:07:2c:
4d:f9:0c:1f:47:52:cb:16:bc:8c:b3:84:b2:70:fa:
ec:c7:f7:1e:8f:ad:de:e5:d7:8b:4d:84:f5:49:68:
89:b5:39:b5:74:b6:6e:a4:70:f0:d0:dd:ba:7b:b7:
87:2e:3c:24:4a:be:2a:c0:a8:d2:1c:c0:a6:e8:9a:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:0A:17:4C:C6:22:64:22:DE:6B:15:4E:B6:AF:47:78:31:81:77
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/60DB5E40835411F1B1AB651362A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.206.0/24
103.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f6:8f:cc:2a:df:0b:e1:6d:25:d9:14:3d:f3:a8:7f:e3:3a:
86:78:3f:99:27:80:c4:84:83:8e:21:48:a6:58:9c:41:94:f8:
b7:24:de:b4:c3:5b:70:36:cb:5d:c8:92:fc:4d:96:cf:9b:32:
58:21:a0:18:32:a3:59:9f:86:af:21:5c:5d:8e:c7:64:f7:39:
c8:33:55:0b:6e:f4:f1:75:75:8c:88:2f:3a:41:96:9a:2a:b1:
e9:bb:1c:47:86:29:5c:67:d6:e8:22:a4:93:07:28:60:26:43:
76:2d:91:18:c4:3f:e4:df:02:a6:28:61:1c:2f:c3:71:a5:68:
5a:82:20:01:2b:5e:98:11:b4:89:fd:f5:21:5b:b5:b4:19:a5:
84:73:e4:ac:5c:c6:6a:94:15:af:24:f1:5e:3f:d0:4a:32:13:
2f:85:3f:57:f8:3c:fc:35:7a:86:2c:d5:26:32:53:e4:22:3f:
87:17:2d:20:69:3f:11:55:eb:cf:40:49:96:26:e8:33:78:f9:
d9:68:b2:8f:fd:24:29:ed:1a:d3:c7:4b:89:78:c6:a6:a4:6e:
55:fc:1e:77:7b:e9:61:2a:88:52:a8:4e:5a:42:33:9c:a4:ca:
1d:03:89:74:07:17:00:6f:1f:f0:f3:66:51:cd:5c:12:ca:5b:
1e:6d:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:39 2026 by rpki-client