$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa File: A34995A0733611F08B36357EC4F9AE02.roa (raw, json) Hash identifier: oajNl85OFa2aen3MoMFPciaD2KOv6VotU71r8A3CT3k= Subject key identifier: 47:D3:AB:60:F3:E3:5E:B1:C4:D6:A6:E4:1E:A6:76:73:78:16:8F:FF Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Certificate serial: C1 Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa Signing time: Tue 14 Jul 2026 04:34:06 +0000 ROA not before: Tue 14 Jul 2026 04:34:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23693 IP address blocks: 39.192.0.0/10 maxlen: 10 39.194.1.0/24 maxlen: 24 39.194.2.0/24 maxlen: 24 39.194.3.0/24 maxlen: 24 39.194.4.0/24 maxlen: 24 39.194.5.0/24 maxlen: 24 39.194.6.0/24 maxlen: 24 39.194.7.0/24 maxlen: 24 39.194.8.0/24 maxlen: 24 39.194.9.0/24 maxlen: 24 39.194.10.0/24 maxlen: 24 39.194.11.0/24 maxlen: 24 39.194.12.0/24 maxlen: 24 39.194.13.0/24 maxlen: 24 39.194.14.0/24 maxlen: 24 39.194.15.0/24 maxlen: 24 39.194.16.0/24 maxlen: 24 39.194.21.0/24 maxlen: 24 39.194.32.0/24 maxlen: 24 39.194.112.0/24 maxlen: 24 39.194.113.0/24 maxlen: 24 43.255.196.0/22 maxlen: 22 103.239.188.0/22 maxlen: 22 2400:82e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Validity Not Before: Jul 14 04:34:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a55bc3e-b25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:bd:a9:af:0a:79:6f:f0:4a:b9:92:26:f7: 77:1d:a7:fc:fe:a4:5e:c6:e6:43:29:ba:1c:a5:dd: 44:71:dc:f2:ac:4a:17:ae:40:43:c7:5b:35:ad:29: 63:7c:8a:c7:2b:de:18:a5:13:e3:bf:f7:06:47:3e: 2b:68:e3:96:dc:b8:b4:c4:f8:04:dc:de:52:bb:1e: 44:7d:3f:8d:f7:c7:dc:f4:3e:6f:91:e2:67:1e:3a: 89:50:17:65:0f:5e:99:79:5c:60:a8:11:60:73:e5: 7a:01:f2:cf:cf:f0:91:73:a0:d9:3b:97:ff:ca:54: ca:5e:f0:ac:1c:6f:23:ee:2e:9a:9e:da:3f:06:c7: b1:68:90:6a:18:d6:9b:49:fc:db:9d:33:78:4e:74: 65:1e:bf:54:8f:a8:2d:a7:94:52:10:8a:01:c6:81: b1:12:96:28:33:63:6e:1d:33:19:bb:9f:4b:b3:d0: a2:7b:8b:49:31:77:d9:78:03:2b:53:f9:bf:f2:eb: dc:a2:04:36:63:78:1f:a0:6e:a4:55:35:22:5a:da: 04:a0:b7:df:dd:74:df:60:03:41:2d:da:e7:01:eb: f7:c1:a2:de:54:de:5c:15:8d:d1:9a:bc:e3:f5:65: 81:46:4c:f7:60:e8:05:a4:6b:52:a7:94:01:ac:e8: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:AB:60:F3:E3:5E:B1:C4:D6:A6:E4:1E:A6:76:73:78:16:8F:FF X509v3 Authority Key Identifier: keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.192.0.0/10 43.255.196.0/22 103.239.188.0/22 IPv6: 2400:82e0::/32 Signature Algorithm: sha256WithRSAEncryption 45:c0:9a:a0:5c:1f:8b:15:b6:29:89:a6:43:4e:17:0c:ef:f7: b4:58:95:3f:6e:11:ce:77:60:5f:8d:12:6f:c1:1f:a1:7b:c7: 60:4f:20:0c:bd:7f:07:3a:97:95:bd:dc:26:4c:54:f4:8e:b4: 7d:91:5f:17:3d:3c:c6:8d:c1:c9:25:e5:2d:df:95:f0:be:db: a4:35:8d:fb:fa:26:cc:95:4c:ef:a0:e6:5b:0e:be:5e:33:8b: c5:96:81:a6:80:5d:f1:5e:2e:01:c5:2e:52:0f:26:cb:55:26: 73:15:f0:fb:02:b6:9a:1b:b0:34:b3:97:db:a1:c9:4c:89:a0: 0a:57:ab:8b:5b:c8:c1:c5:b9:5c:75:8c:6b:60:3a:a9:aa:50: ed:ff:83:81:26:5e:c0:03:8b:dd:39:d3:3d:1d:c4:84:45:d5: bf:d8:f7:d7:da:b7:c3:02:0a:a0:43:f0:bb:62:3d:65:98:70: ac:34:33:ff:e1:c8:d2:24:e3:f2:7c:20:40:6c:62:c1:68:33: de:e0:63:10:a1:1a:b6:e0:bf:14:2b:a7:50:c2:8d:60:b3:89: 80:3c:79:58:d8:24:b1:99:d4:fa:11:9a:63:a9:dc:1e:71:a5: ae:03:f4:23:0d:98:f6:07:f1:bb:c9:ed:7d:01:57:19:6e:03: 2d:9f:dc:e2 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCMzYxMTAvBgNVBAUTKDM0MzU0Q0ZDREEyMjk4NTE2MUI1RUI2MjhCNTQ5M0ZE RDJFOTZDM0IwHhcNMjYwNzE0MDQzNDA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU1YmMzZS1iMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Li9qa8KeW/wSrmSJvd3Haf8/qRexuZDKbocpd1EcdzyrEoXrkBDx1s1rSlj fIrHK94YpRPjv/cGRz4raOOW3Li0xPgE3N5Sux5EfT+N98fc9D5vkeJnHjqJUBdl D16ZeVxgqBFgc+V6AfLPz/CRc6DZO5f/ylTKXvCsHG8j7i6anto/BsexaJBqGNab SfzbnTN4TnRlHr9Uj6gtp5RSEIoBxoGxEpYoM2NuHTMZu59Ls9Cie4tJMXfZeAMr U/m/8uvcogQ2Y3gfoG6kVTUiWtoEoLff3XTfYANBLdrnAev3waLeVN5cFY3Rmrzj 9WWBRkz3YOgFpGtSp5QBrOgJBwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFEfTq2Dz 416xxNam5B6mdnN4Fo//MB8GA1UdIwQYMBaAFDQ1TPzaIphRYbXrYotUk/3S6Ww7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0IzNi9DNkQ0RDBCQzcz MzUxMUYwOUNDNTk0NTFDNEY5QUUwMi9ORFZNX05vaW1GRmh0ZXRpaTFTVF9kTHBi RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNCMzYvQzZENEQwQkM3MzM1MTFGMDlDQzU5NDUxQzRGOUFFMDIvQTM0OTk1QTA3 MzM2MTFGMDhCMzYzNTdFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAX BAIAATARAwMGJ8ADBAIr/8QDBAJn77wwDQQCAAIwBwMFACQAguAwDQYJKoZIhvcN AQELBQADggEBAEXAmqBcH4sVtimJpkNOFwzv97RYlT9uEc53YF+NEm/BH6F7x2BP IAy9fwc6l5W93CZMVPSOtH2RXxc9PMaNwckl5S3flfC+26Q1jfv6JsyVTO+g5lsO vl4zi8WWgaaAXfFeLgHFLlIPJstVJnMV8PsCtpobsDSzl9uhyUyJoApXq4tbyMHF uVx1jGtgOqmqUO3/g4EmXsADi9050z0dxIRF1b/Y99fat8MCCqBD8LtiPWWYcKw0 M//hyNIk4/J8IEBsYsFoM97gYxChGrbgvxQrp1DCjWCziYA8eVjYJLGZ1PoRmmOp 3B5xpa4D9CMNmPYH8bvJ7X0BVxluAy2f3OI= -----END CERTIFICATE-----Generated at Wed Jul 22 02:02:44 2026 by rpki-client