
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
File: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (raw, json)
Hash identifier: w0Hz1xEyaaeT8fM/VlAC5paMSOyji1pbohc8Oz8Jqjg=
Subject key identifier: EC:71:C6:66:C2:61:3A:1D:BF:DC:F6:E6:0E:38:A4:60:0F:1F:45:DC
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0551
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
Signing time: Sat 25 Jul 2026 00:48:19 +0000
ROA not before: Sat 25 Jul 2026 00:48:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153038
IP address blocks: 116.204.140.0/22 maxlen: 22
116.204.140.0/23 maxlen: 23
116.204.140.0/24 maxlen: 24
116.204.141.0/24 maxlen: 24
116.204.142.0/23 maxlen: 23
116.204.142.0/24 maxlen: 24
116.204.143.0/24 maxlen: 24
2400:c7c0::/48 maxlen: 48
2400:c7c0:4000::/34 maxlen: 34
2400:c7c0:4000::/40 maxlen: 40
2400:c7c0:4000::/48 maxlen: 48
2400:c7c0:43c0::/43 maxlen: 43
2400:c7c0:43c0::/48 maxlen: 48
2400:c7c0:43e0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Jul 25 00:48:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a6407d3-bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:bc:1d:f3:0e:86:1b:0a:1d:f2:70:b5:57:
61:4e:9a:20:57:60:44:d1:3c:9e:41:ee:45:61:e3:
b0:ad:9f:b8:57:42:1f:7d:71:33:1f:d4:59:e4:f1:
c0:71:24:3a:9a:29:f8:f8:4b:63:3e:93:24:c3:a8:
24:96:67:01:c2:98:d4:a2:0e:66:02:90:e6:5f:b5:
ac:c2:7b:93:d9:41:66:93:10:46:ff:f1:41:e2:26:
5a:2b:71:ca:63:49:d1:71:5b:ad:ec:38:a8:26:88:
ab:cb:51:f1:6e:25:0b:22:41:e9:e6:03:8e:b5:93:
7f:17:8d:ee:b6:9b:b2:d9:63:0d:5a:86:34:e1:ef:
eb:c7:1d:8b:5a:79:1d:fe:93:7b:05:e5:70:8f:8b:
c5:36:3c:4a:69:44:57:79:ea:81:0f:f5:48:42:83:
d3:98:9d:5a:48:3d:73:3c:b6:04:7f:4b:78:62:0d:
e9:69:7f:a4:9f:48:62:5f:6a:2d:f5:20:94:c5:ba:
67:1d:dc:58:f1:a1:7e:8f:e9:52:c5:c6:5b:dd:b6:
65:ae:b6:cc:95:90:81:23:b1:52:c6:aa:93:4d:0f:
22:cd:1f:10:ae:a0:a0:19:59:6d:c2:0a:9c:e3:b1:
9a:6c:77:f4:48:a8:af:50:97:9e:68:8b:32:7f:1d:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:C6:66:C2:61:3A:1D:BF:DC:F6:E6:0E:38:A4:60:0F:1F:45:DC
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/22
IPv6:
2400:c7c0::/48
2400:c7c0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
80:f0:22:2b:06:da:d4:8a:89:26:05:4f:a8:ef:c9:6a:7f:87:
93:3a:4c:38:b3:29:2d:ef:69:2c:61:a5:51:59:83:eb:23:2e:
db:af:2a:fd:a0:b9:7d:ba:5f:fd:33:f3:19:5f:90:d9:26:ad:
b9:90:e2:0f:dc:bc:48:4e:1c:f3:6c:8c:26:80:00:5e:2b:2c:
cb:a3:75:6e:ca:b0:d0:c1:f8:79:14:c2:99:5b:57:e2:6f:09:
ff:c6:33:49:c8:4f:0a:d2:44:54:d2:d2:a8:32:90:9f:8d:35:
84:f4:b9:68:fe:5f:81:85:51:6a:f7:7e:a8:73:1b:b8:36:8f:
29:8d:06:04:8d:6b:0c:bf:6d:dc:b5:57:b4:ab:a1:33:1e:fa:
c4:85:54:38:44:22:18:2d:83:b5:7d:59:26:eb:95:7d:2d:d1:
00:fe:17:0a:b4:78:f6:99:3b:21:81:fb:f0:8d:6b:fc:68:cc:
e0:4f:89:1b:36:d9:3f:53:d2:2e:53:30:48:cb:d4:c6:56:d2:
8c:f0:66:dd:80:a1:13:a7:ba:cc:f4:47:71:04:aa:f7:0c:1a:
21:7f:4e:5d:40:f1:7c:43:23:ad:7b:7f:c1:e0:81:71:48:7d:
74:7f:87:b7:8d:df:6f:66:cf:60:3a:3a:57:8d:6b:c1:7a:d0:
fb:63:43:48
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3
ODNFODJDN0YwHhcNMjYwNzI1MDA0ODE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY0MDdkMy1iYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdi8HfMOhhsKHfJwtVdhTpogV2BE0TyeQe5FYeOwrZ+4V0IffXEzH9RZ5PHA
cSQ6min4+EtjPpMkw6gklmcBwpjUog5mApDmX7WswnuT2UFmkxBG//FB4iZaK3HK
Y0nRcVut7DioJoiry1HxbiULIkHp5gOOtZN/F43utpuy2WMNWoY04e/rxx2LWnkd
/pN7BeVwj4vFNjxKaURXeeqBD/VIQoPTmJ1aSD1zPLYEf0t4Yg3paX+kn0hiX2ot
9SCUxbpnHdxY8aF+j+lSxcZb3bZlrrbMlZCBI7FSxqqTTQ8izR8QrqCgGVltwgqc
47GabHf0SKivUJeeaIsyfx0qVwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFOxxxmbC
YTodv9z25g44pGAPH0XcMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy
NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM2MUIvNTFFRkZBMzA4MjY5MTFFQ0FEMkU5NTI0QzRGOUFFMDIvMDZCNDc2NTZF
MzhBMTFFRkE0RERCQzFFQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM
BAIAATAGAwQCdMyMMBcEAgACMBEDBwAkAMfAAAADBgYkAMfAQDANBgkqhkiG9w0B
AQsFAAOCAQEAgPAiKwba1IqJJgVPqO/Jan+HkzpMOLMpLe9pLGGlUVmD6yMu268q
/aC5fbpf/TPzGV+Q2SatuZDiD9y8SE4c82yMJoAAXissy6N1bsqw0MH4eRTCmVtX
4m8J/8YzSchPCtJEVNLSqDKQn401hPS5aP5fgYVRavd+qHMbuDaPKY0GBI1rDL9t
3LVXtKuhMx76xIVUOEQiGC2DtX1ZJuuVfS3RAP4XCrR49pk7IYH78I1r/GjM4E+J
GzbZP1PSLlMwSMvUxlbSjPBm3YChE6e6zPRHcQSq9wwaIX9OXUDxfEMjrXt/weCB
cUh9dH+Ht43fb2bPYDo6V41rwXrQ+2NDSA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:42:57 2026 by rpki-client