$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa File: 39C6EF3688BF11EABC04973FC4F9AE02.roa (raw, json) Hash identifier: 5ml9uPc8uMuL0GuHpS5bB1PAJRBicj+ravnTT1fBrO0= Subject key identifier: 28:6A:41:3E:38:7A:4A:10:29:53:94:BE:7B:B2:59:24:89:94:DC:E3 Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3 Certificate serial: 1163 Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa Signing time: Tue 18 Aug 2026 04:19:58 +0000 ROA not before: Tue 18 Aug 2026 04:19:58 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 137945 IP address blocks: 203.9.40.0/21 maxlen: 21 203.9.40.0/24 maxlen: 24 203.9.41.0/24 maxlen: 24 203.9.42.0/24 maxlen: 24 203.9.43.0/24 maxlen: 24 203.9.44.0/24 maxlen: 24 203.9.45.0/24 maxlen: 24 203.9.46.0/24 maxlen: 24 203.9.47.0/24 maxlen: 24 203.15.249.0/24 maxlen: 24 203.22.203.0/24 maxlen: 24 203.62.177.0/24 maxlen: 24 2403:20c0:2::/48 maxlen: 48 2403:20c0:3::/48 maxlen: 48 2403:20c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4451 (0x1163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3 Validity Not Before: Aug 18 04:19:58 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a83dd6d-3b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:23:8c:ed:30:bc:8b:c6:9e:ca:4b:9b:ec: 1c:d8:6f:cc:ef:18:47:b2:13:1e:3e:2f:37:1f:44: cd:30:aa:02:1b:bb:53:27:9c:f3:e2:07:d8:eb:00: cb:97:2d:25:2f:c4:ce:3b:a4:b7:1b:a4:19:df:0c: 0b:d8:2d:25:d3:69:08:0c:7c:0e:c6:0b:3f:e1:a1: dd:43:eb:ac:7f:d1:cb:a7:d8:b9:50:cf:8f:d1:81: 75:55:83:fc:45:42:78:a7:61:ff:ff:9b:d3:1d:2e: 3b:df:18:c1:8c:3e:12:93:82:b0:c3:20:25:a7:24: 02:b0:40:b8:a0:5a:fb:a4:c4:3a:f2:f2:71:d5:09: a2:3d:07:30:8e:58:94:89:4f:73:19:24:e3:6b:40: 89:9c:c5:3a:b0:72:cc:7a:69:88:70:20:aa:27:06: 37:b0:31:6f:f1:19:a6:dd:45:c8:bb:c3:4d:d0:47: 8d:65:21:fd:5e:e0:c3:d6:17:8d:95:ec:f1:6c:59: fe:c8:b8:f0:12:84:35:73:82:3b:50:31:aa:4a:82: f9:47:c4:98:bf:c5:17:15:1c:54:8f:11:31:f9:27: 31:e6:26:25:e1:4a:19:96:a0:84:c6:ec:c7:f7:ba: 10:81:fe:03:cd:2b:87:81:c0:f3:9a:6e:ad:bc:a1: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6A:41:3E:38:7A:4A:10:29:53:94:BE:7B:B2:59:24:89:94:DC:E3 X509v3 Authority Key Identifier: keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.9.40.0/21 203.15.249.0/24 203.22.203.0/24 203.62.177.0/24 IPv6: 2403:20c0:2::-2403:20c0:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:b1:b3:5a:45:eb:eb:4e:3f:29:15:2d:7e:4b:b5:95:da:ee: 7b:7f:18:dd:8f:78:5d:d5:7b:c4:01:dc:13:e2:07:67:f9:1d: f1:07:6d:dc:53:2b:53:8b:9b:d2:c1:2f:6e:9a:67:e2:80:2c: b5:32:1d:57:e4:20:94:c2:2e:6a:21:e9:fe:1e:c1:3a:d7:b4: bf:0c:0b:fe:dd:28:0a:a7:8c:a9:21:04:35:0b:e6:31:31:c9: 02:07:8f:76:1b:80:af:7b:61:17:fb:76:77:8c:19:0e:c6:a3: be:a3:3b:b3:64:a8:63:6b:14:d2:ff:65:2f:d8:11:34:38:58: ba:37:6e:6e:69:3f:5e:69:a5:12:3d:5d:67:24:e4:94:0c:0d: 0e:c3:9d:54:05:a4:f0:e0:da:c7:e4:8b:ea:65:76:21:f5:dc: 6b:98:e5:9d:22:ff:ee:71:e7:ca:6f:30:78:d3:f0:90:5a:fe: 8b:0e:be:b0:dd:6c:79:46:12:50:ff:75:a3:9b:68:e2:bf:21: b8:ec:ca:2a:3c:ca:e7:a5:b3:eb:18:df:97:d1:53:87:dd:d5: 84:ed:b6:b8:f4:ae:69:5a:e1:3d:97:0b:40:69:d2:55:5a:c1: 6d:ec:82:d9:c9:32:66:32:6a:fa:96:76:08:eb:24:ac:f3:ce: 94:91:e7:2b -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICEWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M5MUQxMTAvBgNVBAUTKDcyRDY1QkIzQ0FENEEwOThGMzZGNDEzNzU5NENDN0ZF QzJGQTI4QTMwHhcNMjYwODE4MDQxOTU4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgzZGQ2ZC0zYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFUjjO0wvIvGnspLm+wc2G/M7xhHshMePi83H0TNMKoCG7tTJ5zz4gfY6wDL ly0lL8TOO6S3G6QZ3wwL2C0l02kIDHwOxgs/4aHdQ+usf9HLp9i5UM+P0YF1VYP8 RUJ4p2H//5vTHS473xjBjD4Sk4KwwyAlpyQCsEC4oFr7pMQ68vJx1QmiPQcwjliU iU9zGSTja0CJnMU6sHLMemmIcCCqJwY3sDFv8Rmm3UXIu8NN0EeNZSH9XuDD1heN lezxbFn+yLjwEoQ1c4I7UDGqSoL5R8SYv8UXFRxUjxEx+Scx5iYl4UoZlqCExuzH 97oQgf4DzSuHgcDzmm6tvKEi4QIDAQABo4ICjjCCAoowHQYDVR0OBBYEFChqQT44 ekoQKVOUvnuyWSSJlNzjMB8GA1UdIwQYMBaAFHLWW7PK1KCY829BN1lMx/7C+iij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxRC9EOTBDRDg3NDM1 ODQxMUU5OUE5OTAyMjhDNEY5QUUwMi9jdFpiczhyVW9KanpiMEUzV1V6SF9zTDZL S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0WmJzOHJVb0pqemIwRTNXVXpIX3NMNktLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M5MUQvRDkwQ0Q4NzQzNTg0MTFFOTlBOTkwMjI4QzRGOUFFMDIvMzlDNkVGMzY4 OEJGMTFFQUJDMDQ5NzNGQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAe BAIAATAYAwQDywkoAwQAyw/5AwQAyxbLAwQAyz6xMBoEAgACMBQwEgMHASQDIMAA AgMHACQDIMAABDANBgkqhkiG9w0BAQsFAAOCAQEAWbGzWkXr604/KRUtfku1ldru e38Y3Y94XdV7xAHcE+IHZ/kd8Qdt3FMrU4ub0sEvbppn4oAstTIdV+QglMIuaiHp /h7BOte0vwwL/t0oCqeMqSEENQvmMTHJAgePdhuAr3thF/t2d4wZDsajvqM7s2So Y2sU0v9lL9gRNDhYujdubmk/XmmlEj1dZyTklAwNDsOdVAWk8ODax+SL6mV2IfXc a5jlnSL/7nHnym8weNPwkFr+iw6+sN1seUYSUP91o5to4r8huOzKKjzK56Wz6xjf l9FTh93VhO22uPSuaVrhPZcLQGnSVVrBbeyC2ckyZjJq+pZ2COskrPPOlJHnKw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:28:18 2026 by rpki-client