$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa File: A34995A0733611F08B36357EC4F9AE02.roa (raw, json) Hash identifier: e8FwqrUJ0CcE03Vob/NBG48LYJ8BLnaot23sBZlIyEE= Subject key identifier: C5:26:59:25:F7:8E:A1:FE:D6:0F:4E:D0:3E:1F:99:50:62:62:D5:6B Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Certificate serial: D5 Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa Signing time: Wed 29 Jul 2026 18:16:54 +0000 ROA not before: Wed 29 Jul 2026 18:16:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23693 IP address blocks: 39.192.0.0/10 maxlen: 10 39.194.0.0/24 maxlen: 24 39.194.1.0/24 maxlen: 24 39.194.2.0/24 maxlen: 24 39.194.3.0/24 maxlen: 24 39.194.4.0/24 maxlen: 24 39.194.5.0/24 maxlen: 24 39.194.6.0/24 maxlen: 24 39.194.7.0/24 maxlen: 24 39.194.8.0/24 maxlen: 24 39.194.9.0/24 maxlen: 24 39.194.10.0/24 maxlen: 24 39.194.11.0/24 maxlen: 24 39.194.12.0/24 maxlen: 24 39.194.13.0/24 maxlen: 24 39.194.14.0/24 maxlen: 24 39.194.15.0/24 maxlen: 24 39.194.16.0/24 maxlen: 24 39.194.17.0/24 maxlen: 24 39.194.18.0/24 maxlen: 24 39.194.19.0/24 maxlen: 24 39.194.20.0/24 maxlen: 24 39.194.21.0/24 maxlen: 24 39.194.22.0/24 maxlen: 24 39.194.32.0/24 maxlen: 24 39.194.112.0/24 maxlen: 24 39.194.113.0/24 maxlen: 24 43.255.196.0/22 maxlen: 22 103.239.188.0/22 maxlen: 22 2400:82e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Validity Not Before: Jul 29 18:16:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a6a4396-5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:29:20:55:76:8c:b6:14:9d:29:b9:d7:a5: 1c:a3:86:36:a4:3f:bd:fd:9b:dc:81:1e:6e:7a:cc: d3:c0:dc:60:d5:9a:40:55:20:3f:9a:c1:e9:e4:78: 7d:25:00:54:2b:de:0a:f9:93:1e:79:24:37:b3:08: 0a:7e:c4:30:df:e0:c8:66:55:75:17:07:28:12:ff: dd:25:f1:8a:e5:1b:f9:f9:b5:d7:e3:68:1e:7e:cf: 4b:3e:80:1f:f2:f6:bd:db:6c:56:0c:b7:eb:bb:ef: dd:0f:72:46:4d:c6:15:72:77:e3:ae:54:ea:6b:d7: 0c:0e:88:ea:03:6d:50:87:69:cb:f7:e6:1d:c8:02: f8:f8:2a:1f:c2:ab:d3:f4:e1:6a:63:90:32:85:49: e8:de:28:7a:7c:48:74:ba:d5:84:fc:6d:75:56:8c: db:08:11:36:c9:cc:e0:88:de:41:bc:35:c5:4c:bd: d7:88:56:c3:34:4b:16:8d:0a:45:e4:d2:1d:96:b3: 4c:65:97:68:67:5a:7a:bf:b4:be:51:0c:02:be:d3: 8c:e9:a3:4d:9b:cd:3a:2d:7b:cf:df:4f:4f:ae:d1: af:c2:22:f1:be:bc:9a:4e:24:6f:06:31:a0:7b:c5: 3c:f8:f6:fe:5d:1a:f5:2b:e7:78:58:a7:21:49:f3: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:59:25:F7:8E:A1:FE:D6:0F:4E:D0:3E:1F:99:50:62:62:D5:6B X509v3 Authority Key Identifier: keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.192.0.0/10 43.255.196.0/22 103.239.188.0/22 IPv6: 2400:82e0::/32 Signature Algorithm: sha256WithRSAEncryption 05:3e:6b:9f:a9:53:b2:bd:9b:f1:00:a5:1b:04:ce:2d:d5:fa: 5a:f7:aa:63:15:22:83:08:1d:25:38:b4:c9:7e:47:11:9a:07: 62:3e:1e:5a:03:53:64:b6:47:90:e3:bb:46:e9:c7:60:c6:32: 0c:d7:39:44:aa:08:8f:59:80:11:34:3d:50:5f:c3:46:11:1d: b2:f8:4a:fb:6a:3e:59:60:57:b1:f6:d4:2b:3e:05:e8:1b:66: 1f:48:23:2e:84:11:87:06:03:e3:3a:ae:d3:56:71:ed:5a:9f: 3b:2b:c0:38:65:5c:90:4b:79:f1:dd:33:db:9e:50:f1:fa:a3: c8:2e:1b:76:65:7e:ed:3c:c2:d0:90:6f:05:35:83:a6:f8:86: 3b:ec:60:c9:1a:2d:9a:ea:57:07:07:bc:ec:b6:55:15:58:86: c3:d8:a9:99:e7:c0:ec:ca:7a:0c:24:0f:59:a7:31:85:f4:b3: 82:be:58:89:8f:9b:42:28:60:90:69:f9:92:05:4d:85:a5:29: 82:97:f2:66:19:63:03:3d:00:49:fe:b5:03:84:77:68:84:26: 61:13:22:e5:92:39:ce:ef:a0:9c:75:16:6a:e4:97:36:d4:c9: 56:e8:5b:c9:cd:0b:2b:88:3b:b9:da:99:87:18:18:fa:d0:a6: 63:4e:bc:63 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCMzYxMTAvBgNVBAUTKDM0MzU0Q0ZDREEyMjk4NTE2MUI1RUI2MjhCNTQ5M0ZE RDJFOTZDM0IwHhcNMjYwNzI5MTgxNjU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZhNDM5Ni01YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFopIFV2jLYUnSm516Uco4Y2pD+9/ZvcgR5ueszTwNxg1ZpAVSA/msHp5Hh9 JQBUK94K+ZMeeSQ3swgKfsQw3+DIZlV1FwcoEv/dJfGK5Rv5+bXX42gefs9LPoAf 8va922xWDLfru+/dD3JGTcYVcnfjrlTqa9cMDojqA21Qh2nL9+YdyAL4+CofwqvT 9OFqY5AyhUno3ih6fEh0utWE/G11VozbCBE2yczgiN5BvDXFTL3XiFbDNEsWjQpF 5NIdlrNMZZdoZ1p6v7S+UQwCvtOM6aNNm806LXvP309PrtGvwiLxvryaTiRvBjGg e8U8+Pb+XRr1K+d4WKchSfPXQQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFMUmWSX3 jqH+1g9O0D4fmVBiYtVrMB8GA1UdIwQYMBaAFDQ1TPzaIphRYbXrYotUk/3S6Ww7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0IzNi9DNkQ0RDBCQzcz MzUxMUYwOUNDNTk0NTFDNEY5QUUwMi9ORFZNX05vaW1GRmh0ZXRpaTFTVF9kTHBi RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNCMzYvQzZENEQwQkM3MzM1MTFGMDlDQzU5NDUxQzRGOUFFMDIvQTM0OTk1QTA3 MzM2MTFGMDhCMzYzNTdFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAX BAIAATARAwMGJ8ADBAIr/8QDBAJn77wwDQQCAAIwBwMFACQAguAwDQYJKoZIhvcN AQELBQADggEBAAU+a5+pU7K9m/EApRsEzi3V+lr3qmMVIoMIHSU4tMl+RxGaB2I+ HloDU2S2R5Dju0bpx2DGMgzXOUSqCI9ZgBE0PVBfw0YRHbL4SvtqPllgV7H21Cs+ BegbZh9IIy6EEYcGA+M6rtNWce1anzsrwDhlXJBLefHdM9ueUPH6o8guG3Zlfu08 wtCQbwU1g6b4hjvsYMkaLZrqVwcHvOy2VRVYhsPYqZnnwOzKegwkD1mnMYX0s4K+ WImPm0IoYJBp+ZIFTYWlKYKX8mYZYwM9AEn+tQOEd2iEJmETIuWSOc7voJx1Fmrk lzbUyVboW8nNCyuIO7namYcYGPrQpmNOvGM= -----END CERTIFICATE-----Generated at Fri Sep 11 12:05:39 2026 by rpki-client