$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/3D4BA7444FF811F19502E84FB7833773.roa File: 3D4BA7444FF811F19502E84FB7833773.roa (raw, json) Hash identifier: fNkNyKVF8UPJenDdiGDsHt6Tg+CNpn94YYZyF6xsmuk= Subject key identifier: 90:34:0C:0B:2E:92:67:CA:BE:91:5D:79:97:B0:1E:30:84:0C:8F:B4 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 35FD Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/3D4BA7444FF811F19502E84FB7833773.roa Signing time: Fri 15 May 2026 00:51:42 +0000 ROA not before: Fri 15 May 2026 00:51:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 3758 IP address blocks: 128.106.0.0/18 maxlen: 24 128.106.64.0/18 maxlen: 24 128.106.128.0/17 maxlen: 24 160.213.32.0/21 maxlen: 21 160.213.52.0/22 maxlen: 22 160.213.56.0/21 maxlen: 21 160.213.84.0/22 maxlen: 22 160.213.92.0/22 maxlen: 22 160.213.96.0/22 maxlen: 22 160.213.100.0/23 maxlen: 23 160.213.106.0/23 maxlen: 23 160.213.120.0/21 maxlen: 21 160.213.128.0/20 maxlen: 20 160.213.144.0/22 maxlen: 22 160.213.156.0/22 maxlen: 22 160.213.160.0/21 maxlen: 21 160.213.168.0/22 maxlen: 22 160.213.184.0/21 maxlen: 21 160.213.216.0/21 maxlen: 21 160.213.224.0/19 maxlen: 19 165.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 14:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13821 (0x35fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: May 15 00:51:42 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a066e1e-04d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:c3:e7:d9:3b:38:48:06:c3:60:2e:29:11: 65:76:61:1d:11:95:a1:a7:13:f5:c5:c1:0a:2e:1e: 8e:87:87:b5:a4:cc:f2:a9:41:05:77:e7:ce:a1:61: fb:72:ef:82:7a:5e:28:19:95:5f:54:3b:9f:45:f4: 24:13:12:c3:46:29:13:39:c1:c1:97:12:80:77:ef: 49:ea:bb:38:be:66:2a:63:e6:4d:f8:a0:9e:00:93: 24:48:ce:85:ff:ab:91:46:e6:ad:7a:13:9b:0f:61: 57:13:da:8b:43:5f:98:b0:51:fd:b5:36:b0:8d:87: 61:77:bb:37:f6:08:28:5f:34:30:24:cc:20:5c:03: f7:1a:83:fc:ab:f1:aa:e9:b6:8b:16:fd:9d:fa:54: 4f:76:10:8d:fe:35:ea:d2:8c:3a:c7:9d:8c:b0:a4: 92:09:86:2c:73:fb:24:0b:1f:8b:81:70:fa:04:e2: dc:75:e3:16:de:66:dc:62:14:b6:7b:06:9a:7a:e5: 42:f9:44:29:e5:96:b8:f0:50:3b:58:ad:6c:fc:19: f4:49:12:fe:e2:f3:bc:fc:32:18:d6:d8:99:34:12: 58:1e:f3:16:1b:7b:c9:e8:af:41:aa:45:6c:a2:83: 94:a2:5f:8f:43:f2:5b:27:9d:07:f4:e2:c4:44:41: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:0C:0B:2E:92:67:CA:BE:91:5D:79:97:B0:1E:30:84:0C:8F:B4 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/3D4BA7444FF811F19502E84FB7833773.roa sbgp-ipAddrBlock: critical IPv4: 128.106.0.0/16 160.213.32.0/21 160.213.52.0-160.213.63.255 160.213.84.0/22 160.213.92.0-160.213.101.255 160.213.106.0/23 160.213.120.0-160.213.147.255 160.213.156.0-160.213.171.255 160.213.184.0/21 160.213.216.0-160.213.255.255 165.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:48:1d:19:41:46:0e:56:c8:14:fd:b9:6e:b1:36:ce:55:e7: 0b:31:75:db:0e:4a:aa:a4:ec:43:39:5c:81:f1:55:1b:6e:5c: 6d:0f:82:b6:36:54:a6:b5:18:5e:59:31:9a:17:18:f7:ae:5a: 65:82:82:64:92:6f:8d:8a:41:05:e3:c8:0c:dd:de:35:ac:aa: 9e:98:91:f0:fc:4c:da:5c:07:88:fc:c5:2c:35:74:15:f7:75: ed:92:61:f3:65:58:1c:0a:20:e9:6a:14:a1:ad:24:4b:0e:3a: 8c:7b:bd:27:cd:d3:14:7b:f2:a7:eb:1d:67:98:88:d6:b5:85: 66:a3:51:c2:ee:2c:a9:fb:af:86:68:3d:fd:62:24:8c:cc:b6: 67:7b:29:ef:d6:a9:84:67:ba:5b:90:93:d1:d9:72:21:ce:4f: ae:f6:73:4b:92:a7:c9:06:7e:65:bb:5f:0f:61:3c:36:f0:67: f3:20:a3:38:e5:1a:0a:ad:e5:da:15:84:09:1d:45:5d:47:59: 88:e9:b9:13:63:d4:ad:2a:1e:3a:82:cb:9f:24:11:6f:d0:75: 99:09:f3:da:19:1c:b6:b5:c8:2a:82:0e:46:d2:43:90:d6:77: 4c:52:44:74:9f:e2:86:52:07:c1:3c:d1:66:00:74:e8:36:13: 40:bb:9a:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICNf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwNTE1MDA1MTQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA2NmUxZS0wNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArovD59k7OEgGw2AuKRFldmEdEZWhpxP1xcEKLh6Oh4e1pMzyqUEFd+fOoWH7 cu+Cel4oGZVfVDufRfQkExLDRikTOcHBlxKAd+9J6rs4vmYqY+ZN+KCeAJMkSM6F /6uRRuatehObD2FXE9qLQ1+YsFH9tTawjYdhd7s39ggoXzQwJMwgXAP3GoP8q/Gq 6baLFv2d+lRPdhCN/jXq0ow6x52MsKSSCYYsc/skCx+LgXD6BOLcdeMW3mbcYhS2 ewaaeuVC+UQp5Za48FA7WK1s/Bn0SRL+4vO8/DIY1tiZNBJYHvMWG3vJ6K9BqkVs ooOUol+PQ/JbJ50H9OLEREF+mwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFJA0DAsu kmfKvpFdeZewHjCEDI+0MB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvM0Q0QkE3NDQ0 RkY4MTFGMTk1MDJFODRGQjc4MzM3NzMucm9hMIGABggrBgEFBQcBBwEB/wRxMG8w bQQCAAEwZwMDAIBqAwQDoNUgMAwDBAKg1TQDBAag1QADBAKg1VQwDAMEAqDVXAME AaDVZAMEAaDVajAMAwQDoNV4AwQCoNWQMAwDBAKg1ZwDBAKg1agDBAOg1bgwCwME A6DV2AMDAaDUAwMApRUwDQYJKoZIhvcNAQELBQADggEBAG5IHRlBRg5WyBT9uW6x Ns5V5wsxddsOSqqk7EM5XIHxVRtuXG0PgrY2VKa1GF5ZMZoXGPeuWmWCgmSSb42K QQXjyAzd3jWsqp6YkfD8TNpcB4j8xSw1dBX3de2SYfNlWBwKIOlqFKGtJEsOOox7 vSfN0xR78qfrHWeYiNa1hWajUcLuLKn7r4ZoPf1iJIzMtmd7Ke/WqYRnuluQk9HZ ciHOT672c0uSp8kGfmW7Xw9hPDbwZ/MgozjlGgqt5doVhAkdRV1HWYjpuRNj1K0q HjqCy58kEW/QdZkJ89oZHLa1yCqCDkbSQ5DWd0xSRHSf4oZSB8E80WYAdOg2E0C7 miQ= -----END CERTIFICATE-----Generated at Sat Jun 6 11:46:14 2026 by rpki-client