$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/3FC9B39A85F311F1B9F14C6174A30FBC.roa File: 3FC9B39A85F311F1B9F14C6174A30FBC.roa (raw, json) Hash identifier: qJ2bVAouoKIVfVIofWHiZscX7T1VX94hLapNol1xSzg= Subject key identifier: E5:15:9D:86:FF:47:A9:E2:7C:49:C8:12:6C:69:BC:70:6F:A2:1C:E6 Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: AD Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/3FC9B39A85F311F1B9F14C6174A30FBC.roa Signing time: Wed 22 Jul 2026 17:32:02 +0000 ROA not before: Wed 22 Jul 2026 17:32:02 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150696 IP address blocks: 144.48.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Jul 22 17:32:02 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a60fe92-870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:27:e3:19:43:9a:58:bd:e0:3b:89:15:cf: 4f:b6:a5:ef:bd:26:37:5f:d3:6b:aa:20:b3:50:81: 4f:16:f7:4a:25:98:6f:30:08:b5:71:29:29:f6:0f: 85:0f:df:a4:bc:61:b4:83:cf:bd:eb:d4:51:29:17: 86:92:29:19:d4:a1:d3:9e:63:f7:90:83:4f:37:e9: d8:7e:bc:b1:9e:c4:87:48:bf:14:d9:f9:bf:2e:82: 6c:63:79:3e:6b:e2:89:f1:7c:9c:b2:56:54:ac:28: 0a:a4:49:a7:74:13:02:cd:01:98:50:12:e2:a5:28: 44:59:df:98:8a:3a:e4:91:02:9b:c9:fa:fb:af:d3: aa:9e:9c:49:ac:62:d2:e4:ea:64:39:1f:2a:47:81: 90:85:b2:f8:bf:eb:0e:d9:68:46:4d:9d:82:e8:00: 31:1f:10:14:40:f3:23:8d:33:d1:ad:0d:86:24:53: ab:b3:f3:03:de:b5:9c:f3:be:ac:2c:11:e1:d1:a9: 42:22:c3:75:20:37:72:00:31:2b:67:81:06:69:b4: 85:17:88:2a:de:3c:35:53:61:dc:1f:ef:14:61:30: 97:1e:fc:34:d0:95:c8:00:09:d4:e4:83:82:9f:f0: 67:2c:ff:b5:6e:c9:4d:de:64:44:8c:6d:7d:9b:51: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:15:9D:86:FF:47:A9:E2:7C:49:C8:12:6C:69:BC:70:6F:A2:1C:E6 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/3FC9B39A85F311F1B9F14C6174A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 144.48.249.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b2:06:7c:03:dd:1d:c3:aa:8a:46:33:86:1d:62:00:b1:b0: 8e:8a:92:21:37:ae:db:95:4a:77:ab:8b:c3:5c:e6:3d:94:ef: 8a:e9:14:2d:a1:6e:09:39:ec:25:e2:2a:9e:4b:b2:83:74:6a: 9b:fa:c2:b3:16:81:3b:98:a1:40:54:1b:15:20:c6:9a:a5:ba: 9a:90:b6:33:47:d4:72:80:76:99:1e:85:3d:21:ea:f6:32:90: 43:dc:d1:0c:87:3d:1e:83:2f:c5:f2:aa:4f:b1:11:64:0f:6d: 17:21:13:49:30:99:2e:6b:b6:9d:c4:11:02:3c:36:8f:16:35: 9f:30:20:64:d7:a1:c5:6d:36:f6:d1:3b:f4:91:f6:7b:fb:01: 3e:d1:33:ae:87:9f:77:f5:52:32:e9:29:67:f2:37:eb:7f:d2: 20:ae:45:e3:80:9a:d5:53:61:74:25:5c:c3:b5:00:66:d7:c3: 3b:07:9d:c4:e3:28:8c:b7:c4:bb:5c:4a:c4:3c:cb:73:44:2c: 22:94:f9:0c:6a:de:80:50:7c:95:43:d1:0d:88:d0:cd:0a:53: 69:29:5c:01:6d:9d:b7:af:d4:4b:4e:5a:fe:14:fc:c3:1f:5f: f1:ce:4a:38:fd:e2:8a:36:33:64:4c:03:bf:a4:46:43:54:5a: 50:cd:98:c2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc2MTUxMTAvBgNVBAUTKDIzNzQ3ODZFODdDNEEwRUMzRDZGQTRDMEI3ODRFNDJG RUUwMDNBNkQwHhcNMjYwNzIyMTczMjAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwZmU5Mi04NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16gn4xlDmli94DuJFc9PtqXvvSY3X9NrqiCzUIFPFvdKJZhvMAi1cSkp9g+F D9+kvGG0g8+969RRKReGkikZ1KHTnmP3kINPN+nYfryxnsSHSL8U2fm/LoJsY3k+ a+KJ8XycslZUrCgKpEmndBMCzQGYUBLipShEWd+YijrkkQKbyfr7r9OqnpxJrGLS 5OpkOR8qR4GQhbL4v+sO2WhGTZ2C6AAxHxAUQPMjjTPRrQ2GJFOrs/MD3rWc876s LBHh0alCIsN1IDdyADErZ4EGabSFF4gq3jw1U2HcH+8UYTCXHvw00JXIAAnU5IOC n/BnLP+1bslN3mREjG19m1G7NwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOUVnYb/ R6nifEnIEmxpvHBvohzmMB8GA1UdIwQYMBaAFCN0eG6HxKDsPW+kwLeE5C/uADpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzYxNS9CQUYzOEU4QTkx RjUxMUYwQjM2QjA5M0NDNEY5QUUwMi9JM1I0Ym9mRW9PdzliNlRBdDRUa0wtNEFP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTc2MTUvQkFGMzhFOEE5MUY1MTFGMEIzNkIwOTNDQzRGOUFFMDIvM0ZDOUIzOUE4 NUYzMTFGMUI5RjE0QzYxNzRBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAkDD5MA0GCSqGSIb3DQEBCwUAA4IBAQCusgZ8A90dw6qKRjOGHWIA sbCOipIhN67blUp3q4vDXOY9lO+K6RQtoW4JOewl4iqeS7KDdGqb+sKzFoE7mKFA VBsVIMaapbqakLYzR9RygHaZHoU9Ier2MpBD3NEMhz0egy/F8qpPsRFkD20XIRNJ MJkua7adxBECPDaPFjWfMCBk16HFbTb20Tv0kfZ7+wE+0TOuh5939VIy6Sln8jfr f9IgrkXjgJrVU2F0JVzDtQBm18M7B53E4yiMt8S7XErEPMtzRCwilPkMat6AUHyV Q9ENiNDNClNpKVwBbZ23r9RLTlr+FPzDH1/xzko4/eKKNjNkTAO/pEZDVFpQzZjC -----END CERTIFICATE-----Generated at Fri Jul 24 05:24:25 2026 by rpki-client