
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/60258848232F11F1A5D005B1A3833773.roa
File: 60258848232F11F1A5D005B1A3833773.roa (raw, json)
Hash identifier: Nihi/qwVLuSv2EdjQJXKm6V9kEbeM4dBc82siJFhY2o=
Subject key identifier: 31:F7:8C:77:B3:D2:DD:0E:83:78:1A:5C:F9:C7:9A:92:E9:4B:A9:59
Certificate issuer: /CN=A91D08D8/serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Certificate serial: 02
Authority key identifier: 99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/60258848232F11F1A5D005B1A3833773.roa
Signing time: Thu 19 Mar 2026 01:03:01 +0000
ROA not before: Thu 19 Mar 2026 01:03:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140499
IP address blocks: 163.128.56.0/24 maxlen: 24
163.128.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D08D8, serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Validity
Not Before: Mar 19 01:03:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69bb4b45-8bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a1:d5:d4:e9:11:19:6e:84:29:ed:1f:a0:f5:
cc:f6:a8:85:82:39:7e:fb:72:b2:d2:a2:8a:47:3e:
44:c7:9e:fa:b0:3b:88:07:12:17:cf:e2:03:49:77:
c5:64:77:ee:17:f0:3a:48:a8:5c:d1:17:3d:40:04:
f7:52:ab:e7:05:eb:06:91:5c:e8:fa:3a:42:5c:e5:
77:37:ba:d6:17:a8:ab:ae:8b:de:0f:f2:95:6e:f7:
30:3b:c5:48:cb:6e:6b:40:f5:c6:53:69:64:be:15:
f7:76:9a:e7:7e:5e:3c:7e:9e:da:07:85:f8:dd:66:
7d:d1:55:36:a3:d6:b6:a2:13:dd:06:0e:23:27:ff:
16:a9:81:2d:17:00:33:7e:46:79:5c:7b:7c:e4:ee:
c3:c1:6d:37:c5:a1:ca:7a:7f:07:b2:7e:d5:f7:b8:
2e:13:0c:90:ec:fd:9e:33:0c:9c:c6:cd:17:5d:e2:
c1:2b:cd:e4:ce:2a:45:75:7f:68:d4:d8:36:a0:ce:
3d:fc:2b:b2:1c:76:48:de:e7:4d:3c:4a:f5:bb:c5:
42:c6:73:04:e9:27:82:f8:4e:41:a1:70:0c:43:d8:
90:73:ae:49:4e:fc:1c:b2:dc:1e:bd:c5:d9:92:ac:
3c:e2:97:a0:84:a2:36:f8:66:e3:d0:0a:e3:12:ca:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:8C:77:B3:D2:DD:0E:83:78:1A:5C:F9:C7:9A:92:E9:4B:A9:59
X509v3 Authority Key Identifier:
keyid:99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/60258848232F11F1A5D005B1A3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.56.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3a:71:b2:2f:cb:c6:a6:c8:cf:6c:19:02:8b:94:b7:f2:21:
c8:a7:da:68:d2:39:cf:35:72:8d:02:e3:06:00:ef:b4:c2:cf:
b3:d1:3e:2b:c7:79:2e:79:16:2e:39:d0:31:f9:67:d3:79:fa:
58:b2:ce:ae:77:5e:05:00:0a:a0:d0:33:55:5e:2c:6a:0c:03:
67:7f:3e:64:54:d4:69:4e:d1:c0:4a:9a:30:73:88:8d:29:63:
82:47:e5:a3:20:0b:68:f4:84:ce:17:56:07:de:ec:23:6e:69:
0f:6e:5d:36:b3:60:42:ee:98:9b:21:c9:04:e1:ce:4b:d9:7d:
f4:a0:3f:5b:78:b0:1c:a2:14:ad:c1:55:41:8a:eb:90:69:c5:
4c:f1:f6:fc:93:57:c1:a3:c7:d0:98:2e:2d:e1:57:2c:3e:10:
6a:79:58:c4:8b:d1:3f:a7:29:19:73:e0:06:83:5c:f8:1d:10:
14:97:35:20:60:c9:51:85:64:79:3b:c3:ea:df:99:8c:8b:df:
0f:d0:7a:2d:d2:38:6e:20:31:70:75:84:5f:4a:fe:22:90:01:
60:22:da:48:6d:e7:f7:b7:39:8d:c6:5a:f5:67:b4:4d:70:ba:
c6:ac:ac:07:98:15:d6:4d:99:b0:2b:7c:78:ae:7b:dc:bb:d7:
4c:c2:75:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:34 2026 by rpki-client