
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
File: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (raw, json)
Hash identifier: kdFRNXxjRgZGt+XKW4jgp2QykvKoS0+45SQN11kAp98=
Subject key identifier: 92:B3:69:D6:8E:E1:A0:A3:B9:D2:78:C2:D8:BC:E8:85:82:61:D3:BC
Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial: 018A
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:27:29 +0000
ROA not before: Thu 27 Nov 2025 02:50:04 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150419
IP address blocks: 103.252.15.0/24 maxlen: 24
2001:df6:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Validity
Not Before: Nov 27 02:50:04 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59041-9d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:af:d7:c6:13:af:88:da:06:a5:3b:3c:db:
69:3a:ea:a6:b7:1e:74:98:ab:10:5c:44:f5:08:4d:
df:31:e5:97:ad:c8:fc:fd:09:39:0e:2b:e2:6a:24:
f0:01:4e:ce:0a:99:8a:48:e5:4c:b6:43:70:af:e6:
f8:5f:12:07:fc:da:65:63:a4:f4:38:da:b5:5a:aa:
ca:4a:c4:e2:7f:4b:67:fb:43:00:40:64:84:87:a0:
f6:e5:b2:31:9c:e5:58:e9:6b:b2:92:30:cc:80:50:
76:62:6d:72:e5:0c:dd:ed:c8:22:04:95:a1:de:52:
f3:c7:10:57:18:20:81:9f:ce:36:5a:4c:4a:59:c8:
40:ce:18:66:1d:21:df:85:6a:69:b0:40:d0:e3:b8:
ab:d7:ac:55:70:ef:5e:a6:89:1d:1d:ef:6a:7b:02:
fb:bf:40:f1:0c:b3:cb:b3:a9:af:cc:16:36:1c:39:
d9:0a:00:26:b7:8b:0a:38:a8:0e:fa:b8:71:13:fd:
87:30:1a:15:61:0e:11:91:d6:9a:60:1e:b3:38:e1:
6c:f4:40:39:e4:06:dd:d6:1b:24:d8:54:0c:2e:4e:
16:f1:ff:f2:38:0b:23:ca:ff:b9:db:1d:a8:16:ef:
f4:b6:84:55:fc:04:57:77:94:8c:0f:47:f2:56:66:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:69:D6:8E:E1:A0:A3:B9:D2:78:C2:D8:BC:E8:85:82:61:D3:BC
X509v3 Authority Key Identifier:
keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.15.0/24
IPv6:
2001:df6:5000::/48
Signature Algorithm: sha256WithRSAEncryption
57:48:27:c4:83:e7:b4:92:a4:e0:2c:0a:bc:07:ad:34:03:d2:
1e:c4:0c:04:2d:16:41:6d:66:4c:8f:79:d9:a1:6e:15:86:dd:
12:9e:6a:c9:17:4b:68:2d:30:d8:c4:69:ed:c5:4e:8a:ce:0c:
75:a0:51:72:86:3c:64:0b:6e:df:f1:12:8a:98:1a:94:1b:c7:
df:cf:fe:bc:ec:2e:3a:0c:f3:cb:c1:db:7d:42:06:db:db:7b:
1b:e6:cc:79:85:61:7e:04:b5:86:5f:32:4c:3a:e2:dc:fe:19:
71:d9:c9:e2:4d:50:e0:c4:d3:6f:d6:2b:f7:c3:16:e1:cf:4a:
60:56:2a:81:e0:12:b1:63:a9:c1:de:43:11:1a:4e:cd:8c:a7:
6a:e9:cd:7d:d0:48:2a:3c:a4:32:fa:3d:ee:6d:d5:85:ee:85:
42:a8:3b:df:29:56:01:31:44:5c:7b:72:07:e3:c9:f7:d7:b3:
75:0d:2e:db:92:38:7c:04:39:f4:5c:b1:26:94:42:53:68:ec:
2d:c8:2d:f2:77:17:77:23:07:e4:98:68:ee:af:9d:1f:eb:fc:
39:b4:e7:8d:b4:c0:6b:7c:40:77:79:39:0e:9f:13:36:17:53:
f8:7a:64:7c:13:f0:6c:ce:51:c8:0d:89:f0:82:a0:ce:6e:e1:
c3:29:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:31 2026 by rpki-client