$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa File: A34995A0733611F08B36357EC4F9AE02.roa (raw, json) Hash identifier: IAF+eAwSvKLEFvuiZsq0SmxC9MVbOCqPMOhLPg7uubY= Subject key identifier: 6A:3D:D5:EA:A2:78:FE:E8:7C:4D:74:0F:6A:A3:84:E9:7D:84:0B:52 Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Certificate serial: A4 Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa Signing time: Wed 27 May 2026 08:40:08 +0000 ROA not before: Wed 27 May 2026 08:40:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23693 IP address blocks: 39.192.0.0/10 maxlen: 10 39.194.1.0/24 maxlen: 24 39.194.2.0/24 maxlen: 24 39.194.3.0/24 maxlen: 24 39.194.4.0/24 maxlen: 24 39.194.5.0/24 maxlen: 24 39.194.6.0/24 maxlen: 24 39.194.7.0/24 maxlen: 24 39.194.8.0/24 maxlen: 24 39.194.9.0/24 maxlen: 24 39.194.10.0/24 maxlen: 24 39.194.11.0/24 maxlen: 24 39.194.12.0/24 maxlen: 24 39.194.13.0/24 maxlen: 24 39.194.14.0/24 maxlen: 24 39.194.15.0/24 maxlen: 24 39.194.16.0/24 maxlen: 24 39.194.32.0/24 maxlen: 24 43.255.196.0/22 maxlen: 22 103.239.188.0/22 maxlen: 22 2400:82e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Validity Not Before: May 27 08:40:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a16ade8-6868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:95:2b:b6:32:48:a0:90:5a:27:10:1c:bb:da: 0c:69:0c:90:a0:e6:a8:7b:d5:a1:eb:d7:6b:7b:ab: 01:6e:e3:6a:c1:3b:fa:8a:00:46:78:34:ef:cb:6b: 67:e1:a5:18:df:d0:45:18:85:b9:31:54:e5:ca:68: 3c:4a:f0:eb:69:30:32:86:da:4d:4a:51:1b:4f:87: fa:5f:fe:18:f8:19:47:22:20:03:8b:62:79:59:d0: 1d:b2:d8:ce:b9:74:68:b2:09:62:27:ae:be:8e:26: d0:8f:1d:3f:cb:8b:4f:a2:25:c7:72:bf:b6:e6:b3: e0:bc:fe:d3:35:53:99:76:c9:aa:8e:98:88:1a:55: 86:3d:e0:1a:43:5a:c1:39:2f:ff:9c:e0:ac:25:ae: f0:28:fc:7a:c8:44:88:26:02:2f:4e:9c:e7:71:3b: fa:26:d7:97:64:0c:22:bd:33:b5:c1:09:88:97:c2: bf:57:ec:b3:8b:76:ff:1d:62:c2:7b:3e:fd:72:6d: 54:6d:db:23:cb:9c:05:ef:b8:b7:ec:0c:70:a5:de: 88:88:dc:aa:60:47:25:3b:1b:c1:0d:c0:f3:53:46: 8a:1e:cb:3a:8f:19:a6:1c:46:73:98:11:84:a9:64: 0d:79:f3:45:d4:84:3d:88:93:91:02:71:56:30:b7: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:D5:EA:A2:78:FE:E8:7C:4D:74:0F:6A:A3:84:E9:7D:84:0B:52 X509v3 Authority Key Identifier: keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.192.0.0/10 43.255.196.0/22 103.239.188.0/22 IPv6: 2400:82e0::/32 Signature Algorithm: sha256WithRSAEncryption c9:27:3e:72:1c:e4:a1:28:6a:ab:ca:9d:4e:47:4f:9c:2f:27: ee:16:9c:99:62:d1:68:06:c5:fc:54:74:00:67:b9:6a:93:48: ad:ea:bc:ad:a9:81:10:00:35:85:73:a8:cc:ad:9e:15:3d:00: 4f:68:b3:22:5c:15:10:33:7b:c7:60:13:bb:22:aa:b9:6a:e1: 19:68:3f:32:a1:bd:19:e0:d2:a6:57:51:8a:58:06:29:3a:90: 7a:73:03:0a:b5:81:d1:12:29:de:3f:fc:cb:8b:f3:c8:91:e1: 4e:09:77:54:13:2f:a7:9a:87:06:cf:9a:8c:7b:cf:9c:de:15: 9b:0e:42:84:a9:4e:18:c2:47:23:d1:2b:a1:f4:f2:99:7f:8c: 18:eb:a2:46:72:55:31:e1:db:df:f2:eb:0a:3d:27:82:17:d1: aa:84:0d:fe:df:f7:0b:5c:10:ef:01:61:ea:63:69:22:82:9c: d8:c7:63:c5:c0:40:49:c6:6b:b8:29:75:6c:d0:f9:94:63:91: fd:55:ed:51:46:4a:b0:26:a7:b4:92:0c:08:e2:00:af:24:35: c3:82:0b:a6:59:f7:53:c4:28:0b:96:6c:d3:c2:85:ab:51:fc: 96:e6:d1:b2:ba:0d:8b:00:0e:aa:0a:23:90:36:87:7c:c5:25: d5:8c:74:15 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCMzYxMTAvBgNVBAUTKDM0MzU0Q0ZDREEyMjk4NTE2MUI1RUI2MjhCNTQ5M0ZE RDJFOTZDM0IwHhcNMjYwNTI3MDg0MDA4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2YWRlOC02ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JUrtjJIoJBaJxAcu9oMaQyQoOaoe9Wh69dre6sBbuNqwTv6igBGeDTvy2tn 4aUY39BFGIW5MVTlymg8SvDraTAyhtpNSlEbT4f6X/4Y+BlHIiADi2J5WdAdstjO uXRosgliJ66+jibQjx0/y4tPoiXHcr+25rPgvP7TNVOZdsmqjpiIGlWGPeAaQ1rB OS//nOCsJa7wKPx6yESIJgIvTpzncTv6JteXZAwivTO1wQmIl8K/V+yzi3b/HWLC ez79cm1Ubdsjy5wF77i37Axwpd6IiNyqYEclOxvBDcDzU0aKHss6jxmmHEZzmBGE qWQNefNF1IQ9iJORAnFWMLdWIQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFGo91eqi eP7ofE10D2qjhOl9hAtSMB8GA1UdIwQYMBaAFDQ1TPzaIphRYbXrYotUk/3S6Ww7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0IzNi9DNkQ0RDBCQzcz MzUxMUYwOUNDNTk0NTFDNEY5QUUwMi9ORFZNX05vaW1GRmh0ZXRpaTFTVF9kTHBi RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNCMzYvQzZENEQwQkM3MzM1MTFGMDlDQzU5NDUxQzRGOUFFMDIvQTM0OTk1QTA3 MzM2MTFGMDhCMzYzNTdFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAX BAIAATARAwMGJ8ADBAIr/8QDBAJn77wwDQQCAAIwBwMFACQAguAwDQYJKoZIhvcN AQELBQADggEBAMknPnIc5KEoaqvKnU5HT5wvJ+4WnJli0WgGxfxUdABnuWqTSK3q vK2pgRAANYVzqMytnhU9AE9osyJcFRAze8dgE7siqrlq4RloPzKhvRng0qZXUYpY Bik6kHpzAwq1gdESKd4//MuL88iR4U4Jd1QTL6eahwbPmox7z5zeFZsOQoSpThjC RyPRK6H08pl/jBjrokZyVTHh29/y6wo9J4IX0aqEDf7f9wtcEO8BYepjaSKCnNjH Y8XAQEnGa7gpdWzQ+ZRjkf1V7VFGSrAmp7SSDAjiAK8kNcOCC6ZZ91PEKAuWbNPC hatR/Jbm0bK6DYsADqoKI5A2h3zFJdWMdBU= -----END CERTIFICATE-----Generated at Sat Jun 6 10:50:20 2026 by rpki-client