$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa File: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (raw, json) Hash identifier: OEyVTkl1WhphFhFfhyBKXGd5r6CJfOuj4maOaVwdIhk= Subject key identifier: 90:85:C4:52:F0:D7:37:34:05:B9:43:79:80:6A:78:3D:32:DD:16:84 Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Certificate serial: 0880 Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa Signing time: Wed 08 Jul 2026 22:23:25 +0000 ROA not before: Wed 08 Jul 2026 22:23:25 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55799 IP address blocks: 103.42.212.0/24 maxlen: 24 116.193.157.0/24 maxlen: 24 183.78.168.0/22 maxlen: 22 183.78.168.0/24 maxlen: 24 183.78.169.0/24 maxlen: 24 183.78.170.0/24 maxlen: 24 183.78.171.0/24 maxlen: 24 2404:be00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Validity Not Before: Jul 8 22:23:25 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4ecddd-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:4f:5c:2f:bc:01:f5:33:0f:0a:7c:b0:24: 04:ff:18:5b:4d:fd:a1:e3:bc:50:c2:86:cd:5b:b5: c0:34:1f:dd:ef:ba:2a:b3:79:0c:74:9d:3f:00:d9: 5e:03:e4:7c:26:31:59:34:df:91:83:23:43:35:10: 33:48:13:be:dc:41:17:c4:52:52:71:3d:e3:15:83: fe:ad:75:5e:12:8f:9e:cd:84:a6:90:78:61:fa:58: 80:0a:d8:c9:78:83:51:f6:b3:81:f7:94:74:36:5e: 99:3b:62:78:77:0e:0f:89:58:ed:9a:50:04:c9:ee: 06:3b:57:1a:8a:ee:38:01:e0:fd:d4:d6:73:c1:ff: 4a:6e:2b:f2:8e:1d:19:6d:e2:40:13:43:18:3c:36: 57:85:b7:2e:42:27:cd:f5:c5:0f:30:b0:37:06:01: 4b:67:8e:c3:6f:91:b9:20:10:70:ef:40:9c:32:a2: bf:68:21:95:77:b3:40:05:ea:84:7b:43:86:e9:f5: 7c:45:f2:71:06:8f:0a:79:c5:07:5c:18:ca:19:3d: 42:97:c5:48:c1:de:5d:c6:87:32:1e:4a:09:e4:db: 60:a9:16:97:7e:c9:43:66:50:0a:25:fe:9a:e6:42: 9b:cb:b7:69:21:34:b1:c9:23:72:ce:9f:b8:20:d6: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:C4:52:F0:D7:37:34:05:B9:43:79:80:6A:78:3D:32:DD:16:84 X509v3 Authority Key Identifier: keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.42.212.0/24 116.193.157.0/24 183.78.168.0/22 IPv6: 2404:be00::/32 Signature Algorithm: sha256WithRSAEncryption 8d:9b:6d:da:ac:62:68:04:bf:60:e1:f3:8f:74:ff:1e:aa:5f: 05:72:d4:09:ff:e7:d9:e8:7e:6c:38:74:2e:46:d5:22:f4:18: ff:4b:b5:95:d0:d2:eb:54:15:c8:d2:2c:50:0b:9a:4d:bb:d9: 09:0a:76:af:e9:f5:4d:bf:77:a9:f9:3e:6f:6e:6d:5a:12:81: f4:4c:87:54:03:92:dc:b6:16:bc:cd:ae:9b:7a:a7:00:2d:cf: 08:f1:71:1c:87:f2:c1:cb:b4:52:d6:84:11:88:fc:d7:07:dd: 7e:7b:34:9d:e1:4e:d3:30:fb:a8:39:9d:63:e7:bb:50:83:ea: c8:08:ac:19:66:c3:5a:dc:93:75:a7:2e:a7:f0:bc:25:9c:0c: a5:ae:df:6a:1a:be:01:a5:70:09:9d:0d:ed:6d:c3:d8:8f:51: 1d:09:4a:e4:0f:5a:aa:ab:fe:bf:ec:3a:e8:9f:fb:86:2a:dc: 9b:83:de:34:b7:53:48:33:07:87:c3:b2:71:82:cc:a3:26:95: 0c:dd:e3:59:af:90:d6:eb:ed:b1:7b:93:fd:cc:0a:41:9c:15: e6:2a:22:0c:9b:f3:82:f5:7a:7a:e4:b9:56:d4:08:f8:a9:35: ab:1a:91:41:d9:02:aa:d0:45:cc:9f:7d:a2:36:80:7a:bb:6d: 05:35:cc:18 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx QTREQzNGNUEwHhcNMjYwNzA4MjIyMzI1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlY2RkZC04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HVPXC+8AfUzDwp8sCQE/xhbTf2h47xQwobNW7XANB/d77oqs3kMdJ0/ANle A+R8JjFZNN+RgyNDNRAzSBO+3EEXxFJScT3jFYP+rXVeEo+ezYSmkHhh+liACtjJ eINR9rOB95R0Nl6ZO2J4dw4PiVjtmlAEye4GO1caiu44AeD91NZzwf9Kbivyjh0Z beJAE0MYPDZXhbcuQifN9cUPMLA3BgFLZ47Db5G5IBBw70CcMqK/aCGVd7NABeqE e0OG6fV8RfJxBo8KecUHXBjKGT1Cl8VIwd5dxocyHkoJ5NtgqRaXfslDZlAKJf6a 5kKby7dpITSxySNyzp+4INaO2wIDAQABo4ICezCCAncwHQYDVR0OBBYEFJCFxFLw 1zc0BblDeYBqeD0y3RaEMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ2NUEvODg5NEE3MEExQzU1MTFFQkFCODhDMTgyQzRGOUFFMDIvMzlGQkI0MTY4 Qjk4MTFFRTlDMEJBMjUyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZyrUAwQAdMGdAwQCt06oMA0EAgACMAcDBQAkBL4AMA0GCSqGSIb3 DQEBCwUAA4IBAQCNm23arGJoBL9g4fOPdP8eql8FctQJ/+fZ6H5sOHQuRtUi9Bj/ S7WV0NLrVBXI0ixQC5pNu9kJCnav6fVNv3ep+T5vbm1aEoH0TIdUA5Lctha8za6b eqcALc8I8XEch/LBy7RS1oQRiPzXB91+ezSd4U7TMPuoOZ1j57tQg+rICKwZZsNa 3JN1py6n8LwlnAylrt9qGr4BpXAJnQ3tbcPYj1EdCUrkD1qqq/6/7Dron/uGKtyb g940t1NIMweHw7JxgsyjJpUM3eNZr5DW6+2xe5P9zApBnBXmKiIMm/OC9Xp65LlW 1Aj4qTWrGpFB2QKq0EXMn32iNoB6u20FNcwY -----END CERTIFICATE-----Generated at Fri Jul 24 12:09:42 2026 by rpki-client