
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/527D3BB463E411F1852A190B8947A888.roa
File: 527D3BB463E411F1852A190B8947A888.roa (raw, json)
Hash identifier: iDxWkJ5QRFwiuNVMkjCLwxLUuB5H5rg9SQmLC6otr2Y=
Subject key identifier: 4C:28:00:68:6D:D2:FE:21:1E:BD:1B:C0:6D:B2:D4:11:C6:37:F4:BA
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3BC2
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/527D3BB463E411F1852A190B8947A888.roa
Signing time: Tue 09 Jun 2026 09:19:31 +0000
ROA not before: Tue 09 Jun 2026 09:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132165
IP address blocks: 111.88.4.0/24 maxlen: 30
111.88.5.0/24 maxlen: 24
111.88.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15298 (0x3bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 9 09:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a27daa3-05bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:6f:8b:d0:35:6a:c8:33:67:f1:45:cd:3a:
81:18:e5:a9:3d:16:03:f2:02:67:46:bf:09:b3:2d:
8d:f7:63:6d:69:bd:75:e4:63:1e:94:f5:94:e0:9e:
23:3a:6d:66:25:05:0e:1d:49:41:0d:27:a6:8f:a4:
1c:e7:d4:ea:31:8b:00:5f:aa:b4:42:d7:d0:53:8a:
ab:98:80:15:65:27:f5:c1:51:65:70:e0:29:f2:ab:
bd:98:09:1e:8a:26:5c:5f:cb:65:cd:fb:ac:23:7c:
7c:61:fa:f2:b4:05:03:16:d9:d5:06:3b:31:34:c9:
2a:e7:23:d7:72:56:b0:80:6f:7d:1f:4d:a9:93:2c:
75:7f:e5:12:87:f7:a6:e1:a7:04:7a:eb:1e:68:7d:
6a:ee:b0:08:38:a2:b0:80:59:d2:e0:bb:0e:cf:1e:
d0:b8:a2:6d:9e:97:90:76:5c:51:9e:c4:a9:dc:b3:
ae:b5:1f:ce:df:ea:c3:5f:06:45:0c:d5:fa:a2:47:
f0:e0:1e:42:cb:44:3a:f3:b5:a0:bd:bf:7b:e0:de:
08:09:7f:31:b7:54:13:89:39:dd:87:69:c9:fe:c3:
3f:52:01:8a:38:6a:44:7e:e6:99:61:5c:56:6b:71:
99:d4:02:6a:cd:bc:aa:38:31:a0:9c:76:b5:9d:4b:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:28:00:68:6D:D2:FE:21:1E:BD:1B:C0:6D:B2:D4:11:C6:37:F4:BA
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/527D3BB463E411F1852A190B8947A888.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:b0:b7:eb:7e:6f:f4:d5:6b:89:5c:8a:e3:ab:bb:aa:60:c5:
5a:b5:01:57:33:53:de:7e:ce:c1:bc:8b:05:37:44:b4:c0:b9:
55:45:d1:d9:66:68:86:f2:b2:1a:71:e0:b2:fe:a9:89:46:48:
ad:4f:2c:56:b4:53:78:65:70:ec:89:f7:93:9b:55:16:f3:69:
3b:95:aa:36:04:42:c7:b3:c4:44:63:7e:62:a4:48:b8:47:5f:
83:21:23:58:05:7a:63:15:d1:bc:08:88:bf:b9:65:6b:1c:92:
5c:e8:2f:f1:48:39:e9:3a:1a:1a:85:1f:26:bf:b4:fe:43:71:
ea:1a:cc:ba:43:77:93:06:7e:cc:75:0d:28:87:56:e9:43:ac:
9b:0c:b4:9e:c1:08:1c:5b:7c:43:4d:60:04:cc:29:47:77:68:
96:20:19:0d:89:e5:84:d5:17:54:33:2c:d6:4d:9e:03:4e:79:
37:b0:35:0a:19:21:57:35:7d:2e:78:72:e6:11:6a:af:d3:84:
9f:02:3d:f8:2e:39:8c:9e:58:de:0a:ec:6b:16:57:1c:e8:ff:
09:bb:c6:ec:a1:15:4d:36:c1:33:8e:29:3f:02:b3:16:b2:07:
8a:ee:59:46:dd:a7:f4:be:89:d6:2c:9b:82:28:e3:eb:55:66:
45:24:6a:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICO8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwNjA5MDkxOTMxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI3ZGFhMy0wNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhVvi9A1asgzZ/FFzTqBGOWpPRYD8gJnRr8Jsy2N92Ntab115GMelPWU4J4j
Om1mJQUOHUlBDSemj6Qc59TqMYsAX6q0QtfQU4qrmIAVZSf1wVFlcOAp8qu9mAke
iiZcX8tlzfusI3x8YfrytAUDFtnVBjsxNMkq5yPXclawgG99H02pkyx1f+USh/em
4acEeuseaH1q7rAIOKKwgFnS4LsOzx7QuKJtnpeQdlxRnsSp3LOutR/O3+rDXwZF
DNX6okfw4B5Cy0Q687Wgvb974N4ICX8xt1QTiTndh2nJ/sM/UgGKOGpEfuaZYVxW
a3GZ1AJqzbyqODGgnHa1nUvn9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEwoAGht
0v4hHr0bwG2y1BHGN/S6MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNTI3RDNCQjQ2
M0U0MTFGMTg1MkExOTBCODk0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCb1gEMA0GCSqGSIb3DQEBCwUAA4IBAQA8sLfrfm/01WuJXIrjq7uq
YMVatQFXM1Pefs7BvIsFN0S0wLlVRdHZZmiG8rIaceCy/qmJRkitTyxWtFN4ZXDs
ifeTm1UW82k7lao2BELHs8REY35ipEi4R1+DISNYBXpjFdG8CIi/uWVrHJJc6C/x
SDnpOhoahR8mv7T+Q3HqGsy6Q3eTBn7MdQ0oh1bpQ6ybDLSewQgcW3xDTWAEzClH
d2iWIBkNieWE1RdUMyzWTZ4DTnk3sDUKGSFXNX0ueHLmEWqv04SfAj34LjmMnlje
CuxrFlcc6P8Ju8bsoRVNNsEzjik/ArMWsgeK7llG3af0vonWLJuCKOPrVWZFJGqY
-----END CERTIFICATE-----
Generated at Fri Jun 12 16:32:23 2026 by rpki-client