$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa File: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (raw, json) Hash identifier: u0c/ssX6kgjutUTfkpYiIa/njPV333A0PDmB5szLVqQ= Subject key identifier: 2B:9E:53:60:2F:24:83:0A:E4:08:88:B6:06:B2:D9:1B:90:78:29:E3 Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 04FA Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:00:19 +0000 ROA not before: Thu 27 Mar 2025 01:06:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153038 IP address blocks: 116.204.140.0/22 maxlen: 22 116.204.140.0/23 maxlen: 23 116.204.140.0/24 maxlen: 24 116.204.141.0/24 maxlen: 24 116.204.142.0/23 maxlen: 23 116.204.142.0/24 maxlen: 24 116.204.143.0/24 maxlen: 24 2400:c7c0::/48 maxlen: 48 2400:c7c0:4000::/34 maxlen: 34 2400:c7c0:4000::/40 maxlen: 40 2400:c7c0:4000::/48 maxlen: 48 2400:c7c0:43c0::/43 maxlen: 43 2400:c7c0:43c0::/48 maxlen: 48 2400:c7c0:43e0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Mar 27 01:06:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a40e32-dce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:6c:71:db:cf:95:ee:bd:36:a2:a0:b1:39: 63:a0:f6:b9:10:6c:cd:b1:f9:1b:7e:f6:4f:7a:b6: 16:7d:d1:9d:b6:43:53:6f:ca:23:7e:03:5b:0d:df: a0:47:f7:20:0d:60:18:c1:9a:21:f2:a9:61:5c:89: 2d:cf:88:4a:98:dc:d4:3a:26:7c:6d:b6:5b:8d:de: b2:bd:3d:ca:f1:d5:d8:ef:06:e1:bb:f1:ab:8f:43: 5c:dc:a5:d1:90:f9:12:03:91:dc:1d:8c:8b:de:a6: b1:43:d8:b3:25:c1:f7:42:67:4d:bf:a6:29:ce:9d: ce:11:2c:9c:b7:2c:e8:3a:33:86:67:ea:49:c9:a8: 67:60:22:e0:eb:f3:ca:3b:2b:a2:82:3a:ab:24:15: c8:c8:cd:a4:e3:0a:41:cf:4f:80:62:4b:97:9d:dd: 7e:d9:b5:95:e4:33:45:29:79:d8:02:ae:1d:0c:f0: 07:90:57:b8:22:cb:54:14:51:13:55:7b:d6:62:44: c3:28:67:12:15:a6:2c:eb:eb:9a:0c:0c:d8:76:b4: 55:17:cc:fd:69:b2:6a:a2:1a:ca:ab:d5:a9:ef:fb: e8:76:89:4d:c0:84:77:10:3a:f4:b5:73:a1:5b:50: 41:2a:08:92:58:36:d0:8a:ee:6a:a7:f3:ab:2c:4b: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9E:53:60:2F:24:83:0A:E4:08:88:B6:06:B2:D9:1B:90:78:29:E3 X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.204.140.0/22 IPv6: 2400:c7c0::/48 2400:c7c0:4000::/34 Signature Algorithm: sha256WithRSAEncryption 47:05:8b:ea:d1:6f:0b:15:41:87:1a:62:02:63:95:ca:32:24: 0b:f2:a5:37:68:3d:1e:a4:b3:d1:3d:81:5b:82:53:33:4c:cd: ef:21:9d:b6:fd:07:15:da:5b:51:c9:48:18:6f:68:ce:98:c2: 3f:54:a9:6e:13:fa:68:93:2c:ef:b0:66:37:f7:1d:5d:56:08: 40:c4:22:0f:c3:0a:9a:b7:d4:9e:21:00:7f:0a:26:8c:94:4c: 81:c5:68:33:f6:92:2a:07:10:4a:c3:d1:ec:67:fc:0b:f8:f5: 90:95:21:20:1b:1f:f3:8a:82:23:1c:c4:be:8f:7a:a5:eb:05: 46:ca:d9:1a:18:40:51:b0:76:6c:25:0a:f4:73:4b:c2:c7:d5: b7:20:2e:88:a1:0c:f3:7b:76:4c:9f:8c:01:7a:eb:d7:67:5f: aa:5a:b6:e3:4d:51:41:7c:f7:1f:c8:3f:41:40:8b:48:e6:91: 2a:60:33:46:8a:bc:e6:f8:36:b6:7a:36:7a:f0:d0:5b:84:f1: e5:91:5a:6f:fc:27:8f:41:1d:02:c0:71:da:bb:10:4c:92:1c: db:f2:ca:05:d3:44:d0:6c:2e:f8:98:00:a6:dd:ca:33:79:96: 52:77:67:cd:be:3d:84:1d:38:7c:fa:58:e9:69:f0:be:87:2b: ed:a1:03:76 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwMzI3MDEwNjI5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGUzMi1kY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaVscdvPle69NqKgsTljoPa5EGzNsfkbfvZPerYWfdGdtkNTb8ojfgNbDd+g R/cgDWAYwZoh8qlhXIktz4hKmNzUOiZ8bbZbjd6yvT3K8dXY7wbhu/Grj0Nc3KXR kPkSA5HcHYyL3qaxQ9izJcH3QmdNv6Ypzp3OESyctyzoOjOGZ+pJyahnYCLg6/PK OyuigjqrJBXIyM2k4wpBz0+AYkuXnd1+2bWV5DNFKXnYAq4dDPAHkFe4IstUFFET VXvWYkTDKGcSFaYs6+uaDAzYdrRVF8z9abJqohrKq9Wp7/vodolNwIR3EDr0tXOh W1BBKgiSWDbQiu5qp/OrLEtykQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFCueU2Av JIMK5AiItgay2RuQeCnjMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2MUIvNTFFRkZBMzA4MjY5MTFFQ0FEMkU5NTI0QzRGOUFFMDIvMDZCNDc2NTZF MzhBMTFFRkE0RERCQzFFQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM BAIAATAGAwQCdMyMMBcEAgACMBEDBwAkAMfAAAADBgYkAMfAQDANBgkqhkiG9w0B AQsFAAOCAQEARwWL6tFvCxVBhxpiAmOVyjIkC/KlN2g9HqSz0T2BW4JTM0zN7yGd tv0HFdpbUclIGG9ozpjCP1SpbhP6aJMs77BmN/cdXVYIQMQiD8MKmrfUniEAfwom jJRMgcVoM/aSKgcQSsPR7Gf8C/j1kJUhIBsf84qCIxzEvo96pesFRsrZGhhAUbB2 bCUK9HNLwsfVtyAuiKEM83t2TJ+MAXrr12dfqlq2401RQXz3H8g/QUCLSOaRKmAz Roq85vg2tno2evDQW4Tx5ZFab/wnj0EdAsBx2rsQTJIc2/LKBdNE0Gwu+JgApt3K M3mWUndnzb49hB04fPpY6Wnwvocr7aEDdg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:48 2026 by rpki-client