
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa
File: 60932800BD1511F18D3189834911F970.roa (raw, json)
Hash identifier: 2xizNwLacLpLXkKi7DcjXrf8/LtXgbokhT/ESBr2+Ys=
Subject key identifier: 7A:C4:CA:A7:F2:2D:7A:B2:12:CB:6D:FB:BA:96:16:69:3D:F2:FC:BB
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 0898
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa
Signing time: Wed 30 Sep 2026 21:41:27 +0000
ROA not before: Wed 30 Sep 2026 21:41:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152605
IP address blocks: 103.12.196.0/24 maxlen: 24
103.12.197.0/24 maxlen: 24
103.12.198.0/24 maxlen: 24
103.12.199.0/24 maxlen: 24
103.73.100.0/24 maxlen: 24
103.73.101.0/24 maxlen: 24
103.73.102.0/24 maxlen: 24
103.73.103.0/24 maxlen: 24
103.125.176.0/24 maxlen: 24
103.125.177.0/24 maxlen: 24
103.125.178.0/24 maxlen: 24
103.125.179.0/24 maxlen: 24
103.150.208.0/24 maxlen: 24
103.150.209.0/24 maxlen: 24
103.151.236.0/24 maxlen: 24
103.151.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Sep 30 21:41:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abd8207-491c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:ad:d3:cf:77:09:ef:3e:f7:a0:74:27:85:
c9:95:9c:62:98:7a:cc:6d:23:8b:b0:2d:63:80:f4:
c1:24:98:0f:44:97:05:50:88:0e:20:43:34:d9:24:
fa:2f:e1:8f:79:16:2d:ba:17:9f:cd:14:23:5d:11:
6a:ad:66:8f:83:77:7f:66:d7:89:4a:56:f6:e7:cb:
0f:03:56:08:c5:4b:53:35:1b:36:cc:a4:a1:76:55:
ff:a4:2f:66:81:0c:22:ab:71:7d:ab:90:54:80:3f:
2f:9e:a3:cc:a3:34:7b:94:22:2b:6a:de:06:8f:60:
34:b0:67:c4:83:a4:f9:1a:9e:a5:38:56:24:c6:dd:
40:08:b2:ec:47:18:23:87:13:93:e4:f0:a0:ef:16:
55:bf:33:bb:90:0c:94:7f:a0:9c:33:13:85:4d:f2:
37:ec:e7:bf:b0:1a:2d:e5:91:93:90:02:cd:18:34:
79:bf:c8:a2:0b:6d:7f:b6:f5:1b:18:b5:76:85:bf:
8e:63:49:4f:a9:9d:a6:de:66:66:1d:1f:12:c0:5c:
6d:25:a3:bc:3f:40:33:12:2b:14:d4:ce:9c:74:f5:
86:09:99:ff:39:21:93:0c:62:e4:d3:8b:22:c5:1d:
0b:89:01:b1:21:48:e0:1e:78:68:3b:87:af:d0:9b:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:CA:A7:F2:2D:7A:B2:12:CB:6D:FB:BA:96:16:69:3D:F2:FC:BB
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/60932800BD1511F18D3189834911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.196.0/22
103.73.100.0/22
103.125.176.0/22
103.150.208.0/23
103.151.236.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:90:b7:85:00:7e:cd:38:9b:41:5d:e8:5c:32:3c:49:3b:cc:
2d:9d:4b:12:06:10:fd:ef:62:36:9e:46:e9:d0:7c:e3:4c:4b:
f5:e5:ad:de:bf:d9:c7:e3:a2:a5:4d:0a:32:14:af:24:3a:3b:
ad:39:21:c3:3d:90:a9:97:53:64:10:45:b8:52:12:12:e6:0e:
8a:d1:8e:7d:ca:26:6a:a7:c3:72:05:85:96:00:d4:40:c9:92:
9b:12:5b:f6:94:27:9f:a6:dc:d8:79:f7:9b:c4:19:77:c9:67:
aa:07:6a:68:78:2c:d0:0b:3a:17:45:23:84:58:9f:e9:aa:8e:
cc:ed:12:2a:e2:db:46:97:2b:f9:a5:70:1f:34:74:89:e7:10:
7a:4c:4c:0a:1b:4c:bb:fa:ea:e9:d7:de:61:95:de:75:a0:62:
ab:24:77:15:d6:ab:1c:e0:77:60:a3:05:26:ff:dc:ec:a0:e0:
ee:02:8f:79:54:54:27:e2:bb:ec:0a:b4:31:37:77:53:9a:b9:
cd:66:76:1d:71:44:2f:11:23:82:fa:d6:8b:17:8a:85:8e:a9:
24:e1:a5:63:df:d5:76:9e:11:7a:9c:83:5c:0e:4a:87:d9:2a:
4f:0c:69:c1:4b:f0:94:d4:e4:1a:f9:b9:71:7a:d7:c5:22:13:
f8:a4:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:22:42 2026 by rpki-client