
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa
File: 360B184E061911F1B00F359F223D8C67.roa (raw, json)
Hash identifier: rhazAhjFaM5Rj9hfb4dKJv0EkD//If3Ns4QMkbfwdkY=
Subject key identifier: FA:2D:09:CC:E1:25:86:F4:A3:C0:06:2C:14:6C:B8:7A:8A:37:3A:2F
Certificate issuer: /CN=A916E1C6/serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
Certificate serial: A7
Authority key identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa
Signing time: Fri 18 Sep 2026 18:13:44 +0000
ROA not before: Fri 18 Sep 2026 18:13:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133014
IP address blocks: 161.139.0.0/20 maxlen: 20
161.139.16.0/20 maxlen: 20
161.139.32.0/20 maxlen: 20
161.139.48.0/20 maxlen: 20
161.139.64.0/20 maxlen: 20
161.139.80.0/20 maxlen: 20
161.139.96.0/20 maxlen: 20
161.139.112.0/20 maxlen: 20
161.139.128.0/20 maxlen: 20
161.139.128.0/21 maxlen: 21
161.139.136.0/21 maxlen: 21
161.139.144.0/20 maxlen: 24
161.139.160.0/20 maxlen: 24
161.139.176.0/20 maxlen: 20
161.139.192.0/20 maxlen: 20
161.139.208.0/20 maxlen: 20
161.139.208.0/21 maxlen: 21
161.139.216.0/21 maxlen: 21
161.139.224.0/20 maxlen: 20
161.139.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl
rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E1C6, serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
Validity
Not Before: Sep 18 18:13:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aad7f58-6204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:c5:2c:d7:69:12:66:33:04:27:7e:0b:ba:
61:4a:9e:6e:81:a0:d2:91:c7:ac:9a:4f:45:50:7c:
8a:31:44:5c:bd:26:3a:d8:e4:a3:56:0d:d4:f2:24:
58:f1:41:b0:0b:77:1d:fd:84:f5:cb:5d:83:ae:6e:
8f:e0:ab:d0:db:c8:93:c3:42:20:fd:a2:cb:62:5a:
3e:fc:0e:9c:1d:31:34:47:37:20:f4:fd:51:d4:7d:
8f:f6:f8:8a:52:f0:b7:99:62:39:f7:4d:70:c7:44:
c9:6c:f0:ce:0e:52:6c:27:82:80:93:1e:13:c7:1d:
19:4f:da:3e:1c:2e:69:98:3a:8a:66:b2:88:f7:5d:
ca:06:58:7f:1f:9a:ef:aa:ed:f2:d0:1c:39:49:5e:
5d:a8:fa:0d:a7:c1:3e:3a:99:97:43:6d:39:e1:2b:
af:4a:bb:d4:86:6e:82:d6:9a:1b:21:36:6f:3a:22:
79:85:1b:f3:f1:43:d2:ba:0a:2e:5b:d7:8f:7e:c6:
e9:ad:67:02:7e:96:23:89:b9:fd:38:6f:0e:4e:14:
11:84:07:0c:f2:d8:52:e7:0e:6e:bf:52:96:97:fb:
f4:bd:ae:3a:5a:51:1b:f2:ff:28:42:e7:2f:d3:0a:
98:0f:3a:8f:77:82:b6:a7:41:33:10:ba:df:3a:5c:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2D:09:CC:E1:25:86:F4:A3:C0:06:2C:14:6C:B8:7A:8A:37:3A:2F
X509v3 Authority Key Identifier:
keyid:93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/360B184E061911F1B00F359F223D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
161.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:ac:f4:9f:4d:7a:65:55:90:28:4d:ff:47:ee:fe:c9:83:bf:
8d:72:f8:b2:59:5c:84:a3:34:45:40:2f:b4:c9:02:41:b9:be:
11:93:4c:60:f2:3a:21:a8:40:67:57:9c:94:f2:ff:93:f6:a1:
7d:81:2a:47:e7:9e:42:ec:f1:23:dc:cb:04:69:5e:be:d0:4c:
28:1f:18:a0:21:96:3c:48:9d:a9:c5:25:64:0b:4e:fc:40:b1:
57:e7:82:fe:b9:67:c9:13:ac:7e:45:bd:3e:0a:83:47:23:e8:
96:ea:59:72:ae:0a:22:40:04:d4:cf:76:98:fa:a1:8e:70:c0:
c1:85:d8:b9:68:b7:de:94:aa:d6:69:e4:7b:40:a8:8b:de:e0:
59:71:99:87:43:81:8c:d4:bc:6b:b0:b4:c9:ea:d6:3d:49:9b:
64:a8:7c:27:6e:2e:19:17:63:83:c0:e4:6e:ba:c1:7d:19:94:
1a:79:c6:fe:de:75:6c:1f:f6:49:be:fd:cc:fb:2c:39:2a:a4:
a0:b4:c9:87:61:82:c8:c9:2b:c4:dd:36:59:5d:8a:6c:20:f5:
12:e7:54:36:35:61:d0:2c:ec:14:fd:35:41:1e:e7:88:35:bb:
10:07:23:71:93:a1:bd:fb:97:a6:41:6f:23:dc:c4:38:bd:41:
e2:c2:00:9e
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUxQzYxMTAvBgNVBAUTKDkzMEVGMDk1QjBDNjhEQzhBMzdDOTFGRjhGMTMzNzA3
MEVBOUNBNDAwHhcNMjYwOTE4MTgxMzQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFkN2Y1OC02MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yfFLNdpEmYzBCd+C7phSp5ugaDSkcesmk9FUHyKMURcvSY62OSjVg3U8iRY
8UGwC3cd/YT1y12Drm6P4KvQ28iTw0Ig/aLLYlo+/A6cHTE0Rzcg9P1R1H2P9viK
UvC3mWI5901wx0TJbPDODlJsJ4KAkx4Txx0ZT9o+HC5pmDqKZrKI913KBlh/H5rv
qu3y0Bw5SV5dqPoNp8E+OpmXQ2054SuvSrvUhm6C1pobITZvOiJ5hRvz8UPSugou
W9ePfsbprWcCfpYjibn9OG8OThQRhAcM8thS5w5uv1KWl/v0va46WlEb8v8oQucv
0wqYDzqPd4K2p0EzELrfOlwbmwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFPotCczh
JYb0o8AGLBRsuHqKNzovMB8GA1UdIwQYMBaAFJMO8JWwxo3Io3yR/48TNwcOqcpA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTFDNi8zOTcxODQ2MkQ1
MUYxMUYwODdFOUI1N0RDNEY5QUUwMi9rdzd3bGJER2pjaWpmSkhfanhNM0J3NnB5
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2t3N3dsYkRHamNpamZKSF9qeE0zQnc2cHlrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkUxQzYvMzk3MTg0NjJENTFGMTFGMDg3RTlCNTdEQzRGOUFFMDIvMzYwQjE4NEUw
NjE5MTFGMUIwMEYzNTlGMjIzRDhDNjcucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAoYswDQYJKoZIhvcNAQELBQADggEBAA+s9J9NemVVkChN/0fu/smD
v41y+LJZXISjNEVAL7TJAkG5vhGTTGDyOiGoQGdXnJTy/5P2oX2BKkfnnkLs8SPc
ywRpXr7QTCgfGKAhljxInanFJWQLTvxAsVfngv65Z8kTrH5FvT4Kg0cj6JbqWXKu
CiJABNTPdpj6oY5wwMGF2Llot96UqtZp5HtAqIve4FlxmYdDgYzUvGuwtMnq1j1J
m2SofCduLhkXY4PA5G66wX0ZlBp5xv7edWwf9km+/cz7LDkqpKC0yYdhgsjJK8Td
Nlldimwg9RLnVDY1YdAs7BT9NUEe54g1uxAHI3GTob37l6ZBbyPcxDi9QeLCAJ4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:19:49 2026 by rpki-client