$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa File: 39BE7BDA196411F18D404492083D8C67.roa (raw, json) Hash identifier: f456J4J338N972T6vLM0EgIZuckFzl/P/EWeM5TcqT4= Subject key identifier: D8:4F:6A:AA:39:61:65:0F:78:55:39:8F:5A:08:FD:59:B9:EE:29:01 Certificate issuer: /CN=A915CBC5/serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA Certificate serial: 08 Authority key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa Signing time: Fri 06 Mar 2026 13:58:23 +0000 ROA not before: Fri 06 Mar 2026 13:58:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140910 IP address blocks: 103.153.90.0/23 maxlen: 23 103.153.90.0/24 maxlen: 24 103.153.91.0/24 maxlen: 24 2001:df6:cbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA Validity Not Before: Mar 6 13:58:23 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69aadd7f-eea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:e6:f7:2d:b5:83:ea:6a:df:59:20:c4:8d: 7f:32:37:b3:68:12:49:40:84:86:22:6a:32:bf:70: 57:b2:35:ad:f1:6f:5e:d8:67:12:9d:5c:c5:d9:a8: a2:cf:8b:af:03:55:a8:11:56:84:b6:fd:6c:d4:95: e1:db:0e:9e:94:93:fc:9d:f7:fa:8f:c7:10:91:5a: 00:26:64:fe:d5:78:be:8b:56:f8:80:6a:77:53:0b: 8b:b2:31:01:c7:42:ce:4f:86:4e:5c:9d:f9:df:24: b9:b2:fd:28:b4:af:75:e0:5e:39:9a:52:0d:61:41: 9b:3c:f9:9a:44:eb:9e:ed:3a:32:f9:34:df:36:bd: c0:f5:22:5e:e0:e9:55:43:36:06:41:0b:ea:4c:b7: 4a:7a:a9:1e:96:46:85:53:23:28:66:e6:1f:2b:18: bc:18:e9:8d:91:48:b4:04:98:02:a3:28:c1:2b:53: 66:0e:ed:26:23:92:5e:ee:d9:1f:61:3d:63:a2:c1: 6b:02:66:ed:47:00:b2:1c:a1:95:61:10:06:d1:ee: 5a:64:c3:4a:61:c1:b0:a7:72:2b:78:e7:53:30:f5: 45:18:7f:62:c3:e8:9f:4c:72:e1:12:bb:e8:fb:a4: 1b:c0:fc:36:81:99:8d:fe:9d:3f:95:5c:0c:a5:47: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:6A:AA:39:61:65:0F:78:55:39:8F:5A:08:FD:59:B9:EE:29:01 X509v3 Authority Key Identifier: keyid:14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.153.90.0/23 IPv6: 2001:df6:cbc0::/48 Signature Algorithm: sha256WithRSAEncryption 3c:36:4d:c3:ad:b3:c2:c7:95:04:d1:01:30:d3:ef:0f:5b:5d: 2c:da:f7:ce:6f:cf:5e:9d:ff:32:6f:00:06:e5:8d:f2:7c:30: d8:d0:cf:a2:07:b7:03:1e:c6:7a:0e:7f:ba:b3:d4:e1:11:d4: d6:a7:15:d4:a8:b1:00:f1:84:44:72:b0:f4:8b:e3:26:0c:3a: 97:04:df:c1:82:e3:9d:3a:ac:48:ea:5c:d6:e2:22:e0:be:76: 9a:8c:49:7d:e5:9b:56:7f:5d:b9:f7:45:c1:00:a4:19:d2:4b: 68:dc:81:84:20:6b:3c:cb:80:18:a2:b2:41:f9:b0:56:f2:ee: bf:ef:69:7e:5d:02:cd:7a:ba:ac:36:cc:67:ad:6d:55:4b:00: 0b:6e:4f:85:da:e4:a4:44:fe:fd:31:6b:99:eb:c5:e9:1d:53: c9:de:0d:8c:e0:39:ed:2d:35:d8:a6:5d:81:a5:6b:7d:a9:05: b7:ec:ab:28:63:83:c0:5f:06:f8:86:5d:b5:39:64:b8:f0:a0: a4:e5:0d:b9:ed:fa:99:6f:72:0f:fd:b0:dd:41:a9:dc:43:e0: 38:38:d6:d9:f9:b6:85:34:b3:51:4a:70:1e:c2:40:fc:21:0d: dc:aa:7e:81:c9:73:dd:73:c5:5d:fa:91:5d:82:66:1b:fe:8a: a0:7a:40:d3 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0JDNTExMC8GA1UEBRMoMTQ1NzRDNkM4QzM3NkVFOUIzQzFDOEE1QURCNzVDQjhD MjY4RkZBQTAeFw0yNjAzMDYxMzU4MjNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWFkZDdmLWVlYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqrOb3LbWD6mrfWSDEjX8yN7NoEklAhIYiajK/cFeyNa3xb17YZxKdXMXZqKLP i68DVagRVoS2/WzUleHbDp6Uk/yd9/qPxxCRWgAmZP7VeL6LVviAandTC4uyMQHH Qs5Phk5cnfnfJLmy/Si0r3XgXjmaUg1hQZs8+ZpE657tOjL5NN82vcD1Il7g6VVD NgZBC+pMt0p6qR6WRoVTIyhm5h8rGLwY6Y2RSLQEmAKjKMErU2YO7SYjkl7u2R9h PWOiwWsCZu1HALIcoZVhEAbR7lpkw0phwbCncit451Mw9UUYf2LD6J9McuESu+j7 pBvA/DaBmY3+nT+VXAylR8DFAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU2E9qqjlh ZQ94VTmPWgj9WbnuKQEwHwYDVR0jBBgwFoAUFFdMbIw3bumzwcilrbdcuMJo/6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQkM1L0Y4NThEN0UyMTk2 MDExRjFBQTU5NERFMzA3M0Q4QzY3L0ZGZE1iSXczYnVtendjaWxyYmRjdU1Kb182 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRkZkTWJJdzNidW16d2NpbHJiZGN1TUpvXzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JDNS9GODU4RDdFMjE5NjAxMUYxQUE1OTRERTMwNzNEOEM2Ny8zOUJFN0JEQTE5 NjQxMUYxOEQ0MDQ0OTIwODNEOEM2Ny5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAFnmVowDwQCAAIwCQMHACABDfbLwDANBgkqhkiG9w0BAQsFAAOCAQEA PDZNw62zwseVBNEBMNPvD1tdLNr3zm/PXp3/Mm8ABuWN8nww2NDPoge3Ax7Geg5/ urPU4RHU1qcV1KixAPGERHKw9IvjJgw6lwTfwYLjnTqsSOpc1uIi4L52moxJfeWb Vn9dufdFwQCkGdJLaNyBhCBrPMuAGKKyQfmwVvLuv+9pfl0CzXq6rDbMZ61tVUsA C25PhdrkpET+/TFrmevF6R1Tyd4NjOA57S012KZdgaVrfakFt+yrKGODwF8G+IZd tTlkuPCgpOUNue36mW9yD/2w3UGp3EPgODjW2fm2hTSzUUpwHsJA/CEN3Kp+gclz 3XPFXfqRXYJmG/6KoHpA0w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:59 2026 by rpki-client