
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
File: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (raw, json)
Hash identifier: 1ZjplIT3cgd+cosCI1JnL6/1YdmyRniKzJuka+Wx680=
Subject key identifier: E6:BF:91:10:44:4D:B9:4C:5B:D6:12:E2:CB:DB:D0:1D:ED:2F:28:D5
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0542
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
Signing time: Fri 03 Jul 2026 00:25:33 +0000
ROA not before: Fri 03 Jul 2026 00:25:33 +0000
ROA not after: Sun 01 Nov 2026 00:00:00 +0000
asID: 153038
IP address blocks: 116.204.140.0/22 maxlen: 22
116.204.140.0/23 maxlen: 23
116.204.140.0/24 maxlen: 24
116.204.141.0/24 maxlen: 24
116.204.142.0/23 maxlen: 23
116.204.142.0/24 maxlen: 24
116.204.143.0/24 maxlen: 24
2400:c7c0::/48 maxlen: 48
2400:c7c0:4000::/34 maxlen: 34
2400:c7c0:4000::/40 maxlen: 40
2400:c7c0:4000::/48 maxlen: 48
2400:c7c0:43c0::/43 maxlen: 43
2400:c7c0:43c0::/48 maxlen: 48
2400:c7c0:43e0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 00:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Jul 3 00:25:33 2026 GMT
Not After : Nov 1 00:00:00 2026 GMT
Subject: CN=6a47017c-7226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:d6:f8:62:81:d7:4a:b3:b0:45:9f:24:eb:
a5:58:d3:d6:01:67:fb:4c:53:ec:74:ab:2d:a2:7b:
3f:5e:c7:7e:9b:92:13:1c:c7:3a:18:35:a6:da:9a:
bf:83:27:03:bb:13:d8:00:92:9d:84:9d:ad:e8:ef:
46:7e:3c:b9:6d:a1:5f:f4:cf:cb:9a:d2:5d:6b:df:
bf:a0:64:12:d4:37:46:6a:2b:36:67:b7:b2:79:80:
b3:20:a6:4f:69:24:14:7c:58:eb:4f:a0:75:57:c7:
81:19:e7:9f:49:fc:b9:cd:84:1d:21:17:46:ac:e7:
03:08:fa:18:3e:64:49:77:87:91:7f:77:a3:5b:3c:
fc:b4:17:fa:6b:d5:c0:de:34:0d:9d:78:f0:62:3e:
04:13:71:4d:e7:c3:95:6b:e8:cd:04:aa:b6:8b:84:
4e:d4:b1:86:da:d8:a7:aa:39:92:5e:5d:c4:a7:35:
84:ac:04:09:e2:70:2a:10:98:0a:ce:92:21:77:c0:
85:f4:a9:65:a4:df:71:36:17:64:eb:e8:69:02:a3:
45:c0:6b:71:d5:49:4e:b0:c1:c3:ad:4d:b1:93:61:
da:ad:28:64:08:ab:74:d7:1a:a3:3f:04:b7:ce:79:
e7:4f:8a:69:41:18:a7:1d:fd:c7:5c:02:10:7d:91:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:91:10:44:4D:B9:4C:5B:D6:12:E2:CB:DB:D0:1D:ED:2F:28:D5
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/22
IPv6:
2400:c7c0::/48
2400:c7c0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
71:e2:43:83:bb:a3:d0:1c:3d:63:2c:9b:4f:25:ea:95:d7:86:
0c:4f:ef:74:94:bc:dd:39:6a:f8:45:0c:95:94:9f:17:ce:3d:
0c:a0:06:cf:93:a1:4d:ae:c0:8e:59:a6:69:24:f4:02:a1:f3:
19:ae:fb:fe:ba:67:3e:68:9f:69:68:77:48:f1:4a:aa:57:03:
4b:9d:5f:b3:9c:90:2a:47:1f:55:d7:05:74:4e:fc:fb:54:67:
b1:b1:6c:e7:39:67:be:50:5f:3d:5d:64:9a:3e:d3:cf:5f:48:
d3:db:b6:6f:5d:36:c0:41:c4:52:67:f6:14:28:8c:f8:fb:68:
63:81:fd:64:ab:37:28:64:f9:67:64:b3:bd:3c:95:ca:11:dd:
7a:94:7c:62:3a:ed:4d:22:c6:31:6d:96:dd:b2:ec:75:6d:91:
d3:31:a5:3d:f2:15:b6:a7:80:30:a9:f7:3a:2e:29:16:2e:24:
52:50:be:2c:4d:a6:c9:81:17:9e:7b:46:11:16:a1:a4:a0:70:
98:8f:9b:5b:d7:5e:47:ba:90:10:e1:a2:02:51:e9:2e:65:d2:
d2:fd:07:1e:ca:0f:c7:26:46:0b:cc:79:bd:68:25:02:99:68:
c8:cf:df:40:78:c0:56:a8:cb:1b:e6:86:f4:98:ac:d8:78:bd:
7f:71:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 11:03:32 2026 by rpki-client