
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa
File: C6856EE29AF711F195C781C55811F970.roa (raw, json)
Hash identifier: 8P5MvFhnnZ5D3PPJut60FkX7BxkqwS/H/o8JDXdmUzg=
Subject key identifier: 1F:5F:BF:B9:9D:8E:30:99:34:EF:5F:C9:E7:FD:58:8D:30:A2:C1:1B
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 056B
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa
Signing time: Tue 18 Aug 2026 11:42:31 +0000
ROA not before: Tue 18 Aug 2026 11:42:31 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153038
IP address blocks: 116.204.140.0/22 maxlen: 22
116.204.140.0/23 maxlen: 23
116.204.140.0/24 maxlen: 24
116.204.141.0/24 maxlen: 24
116.204.142.0/23 maxlen: 23
116.204.142.0/24 maxlen: 24
116.204.143.0/24 maxlen: 24
2400:c7c0::/32 maxlen: 32
2400:c7c0::/48 maxlen: 48
2400:c7c0:4000::/34 maxlen: 34
2400:c7c0:4000::/40 maxlen: 40
2400:c7c0:4000::/48 maxlen: 48
2400:c7c0:43c0::/43 maxlen: 43
2400:c7c0:43c0::/48 maxlen: 48
2400:c7c0:43e0::/43 maxlen: 43
2400:c7c0:43e0::/48 maxlen: 48
2400:c7c0:43e1::/48 maxlen: 48
2400:c7c0:43e2::/48 maxlen: 48
2400:c7c0:43e3::/48 maxlen: 48
2400:c7c0:43e4::/48 maxlen: 48
2400:c7c0:43e5::/48 maxlen: 48
2400:c7c0:43e6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 23:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Aug 18 11:42:31 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a844527-9aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:f4:56:87:9c:13:b6:0e:f2:e4:5b:31:0e:
d3:93:13:6f:07:5b:cd:52:97:0c:b8:9e:16:20:33:
82:8e:6b:5b:2b:30:39:52:d6:e0:1c:c2:89:f9:9d:
74:fd:69:6b:f4:c1:53:52:62:57:78:7d:c0:b8:fb:
97:f8:ac:89:ae:a6:12:56:a6:9d:d0:50:53:83:51:
f7:0e:b5:b6:97:74:59:4d:e2:f8:c6:e8:7d:7f:f3:
c3:20:30:91:4c:79:c1:1a:f8:90:f1:ce:c3:6d:a3:
c7:0e:86:e4:a1:31:7b:69:eb:bf:01:30:2e:5d:05:
2d:c1:de:26:7a:d2:3e:cf:f1:08:e9:80:8f:02:23:
57:6b:4c:ba:72:d9:a6:76:ba:30:82:a5:6f:8b:7f:
4d:50:77:1a:77:2d:f1:6a:b0:9d:a6:75:04:3d:3f:
d0:4a:88:9c:22:54:e6:42:3e:32:98:85:f7:82:28:
3b:5f:57:4e:ca:15:03:7d:0c:34:61:fe:87:94:29:
23:38:55:5f:63:f3:74:ee:de:6a:87:1d:b8:4e:5e:
33:c0:c2:25:43:96:61:ef:a8:43:b6:57:f2:29:03:
d2:4d:ca:37:18:7e:cc:31:b8:d2:30:d6:82:69:be:
bc:f7:7f:d5:bb:ec:d9:93:df:48:d0:f7:31:4e:e3:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:BF:B9:9D:8E:30:99:34:EF:5F:C9:E7:FD:58:8D:30:A2:C1:1B
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/22
IPv6:
2400:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:76:a4:88:49:b8:c3:d7:45:55:86:94:9c:fb:82:29:16:33:
d9:0b:37:7d:38:7c:84:78:98:be:e2:f1:f9:9d:38:58:6d:65:
cd:99:42:52:92:ee:71:65:3a:5e:35:90:45:a4:ac:fe:21:23:
72:18:f3:e1:db:26:5f:31:96:ef:a7:55:40:15:77:58:8e:14:
fb:04:8c:3c:34:a7:14:74:06:51:89:28:43:4a:7d:9b:8a:20:
b5:b7:b7:3b:54:16:90:d1:be:a9:85:c0:70:96:97:1f:63:b8:
68:c2:c5:bc:c6:a2:d2:2a:e2:a0:a5:cc:71:67:58:de:43:84:
3b:17:6b:0b:4e:bc:02:25:4b:d5:d6:99:b4:eb:00:d1:66:e5:
e2:66:44:61:57:f1:5a:df:8e:99:a8:a8:8a:92:2b:a3:59:33:
22:40:e4:b9:10:58:93:89:2a:fe:b0:d2:1c:6b:03:72:75:16:
3f:c1:7f:53:de:74:94:f8:31:10:4e:69:46:21:ce:1b:24:37:
b1:23:ee:24:7c:df:a6:21:77:16:82:2c:ca:4f:6d:5e:26:f8:
94:f1:4c:6b:8d:a6:49:b7:d9:10:46:d5:6c:fd:ed:04:ab:7b:
f0:a4:22:d2:53:7d:b6:64:31:92:d5:a4:ba:2d:78:57:66:64:
97:1a:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:04:48 2026 by rpki-client