
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa
File: A34995A0733611F08B36357EC4F9AE02.roa (raw, json)
Hash identifier: P5GyR2UXuQcDXhg/Ux7PQeDmUE4U2dW3j3z+L2FqGmA=
Subject key identifier: 74:63:C5:8D:07:12:D1:2B:08:79:DC:A2:27:9B:E0:FE:01:0E:C2:2A
Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial: 8B
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa
Signing time: Thu 16 Apr 2026 16:40:37 +0000
ROA not before: Thu 16 Apr 2026 16:40:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23693
IP address blocks: 39.192.0.0/10 maxlen: 10
39.194.1.0/24 maxlen: 24
39.194.2.0/24 maxlen: 24
39.194.3.0/24 maxlen: 24
39.194.4.0/24 maxlen: 24
39.194.5.0/24 maxlen: 24
39.194.6.0/24 maxlen: 24
39.194.7.0/24 maxlen: 24
39.194.8.0/24 maxlen: 24
39.194.9.0/24 maxlen: 24
39.194.10.0/24 maxlen: 24
39.194.11.0/24 maxlen: 24
39.194.12.0/24 maxlen: 24
39.194.13.0/24 maxlen: 24
39.194.14.0/24 maxlen: 24
39.194.15.0/24 maxlen: 24
39.194.16.0/24 maxlen: 24
39.194.32.0/24 maxlen: 24
43.255.196.0/22 maxlen: 22
103.239.188.0/22 maxlen: 22
2400:82e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Validity
Not Before: Apr 16 16:40:37 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69e11105-078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:5f:34:4f:46:9c:7a:2a:1f:58:3d:24:c1:
46:78:9e:49:86:f4:cd:6b:b0:c8:af:39:ab:a2:bb:
de:fa:7e:60:e1:9f:3a:63:33:66:6f:d1:53:e6:74:
f2:66:c6:56:8d:cd:cf:77:81:b3:73:a3:78:5f:af:
26:ca:57:ce:24:d4:e0:72:23:01:9b:fa:e9:2e:d5:
f3:9c:18:61:17:43:bc:e9:fd:31:8f:ea:f4:a2:6d:
b5:5d:2f:b4:12:c1:74:59:92:25:ed:08:9d:c5:ad:
f3:43:86:5a:1d:c5:d9:5a:b2:e1:7f:f0:df:c5:1e:
aa:c8:a9:2c:51:d5:f8:f6:69:f7:15:5c:02:a3:ba:
60:c7:61:8f:f5:55:7e:20:08:9d:88:90:50:67:d7:
98:ed:22:d3:bf:8c:aa:cd:96:ac:bc:07:df:2d:42:
94:61:77:5d:a2:97:ac:c8:cf:d1:cd:b3:5b:92:8d:
b7:de:a2:1f:de:4d:29:ff:e7:d5:a0:e6:f2:7a:14:
32:ab:22:51:f5:cd:cb:4f:7c:49:a2:24:5b:52:32:
02:c1:b4:60:d6:85:c8:ad:9b:01:48:b4:9e:3d:14:
38:df:b6:a1:c4:ea:9d:29:93:08:0d:be:ba:f4:17:
00:14:0a:6c:c6:a3:d6:62:41:34:91:c2:81:1e:99:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:C5:8D:07:12:D1:2B:08:79:DC:A2:27:9B:E0:FE:01:0E:C2:2A
X509v3 Authority Key Identifier:
keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
39.192.0.0/10
43.255.196.0/22
103.239.188.0/22
IPv6:
2400:82e0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:6a:09:ef:c0:bf:39:b9:8a:90:14:5e:8f:97:70:65:5f:08:
88:a5:08:51:d4:fe:7a:cd:2a:7f:df:5e:9d:22:8d:1d:f5:4f:
7a:6e:ab:77:18:d8:c2:2b:20:da:47:03:be:e8:12:a1:98:ba:
0c:6d:00:63:5c:13:4b:d4:c0:0d:0e:68:a0:d6:e7:ca:fb:7e:
51:30:26:2f:22:7d:1f:44:bc:d5:a1:6d:de:41:2b:4a:47:85:
5e:c5:d8:2f:0c:55:82:6e:c2:49:40:eb:1b:84:43:cb:9c:82:
fa:e8:9c:05:77:7c:58:23:91:50:2f:89:10:07:02:de:46:5c:
72:b0:03:99:34:60:ff:7b:d0:1e:a7:16:4a:7f:f7:14:b0:47:
d5:3c:8e:99:a3:27:a3:00:e8:7c:34:79:ae:c5:60:2d:da:80:
c1:69:6e:0c:18:41:4c:14:52:83:bb:fe:b9:ab:f3:89:73:06:
5c:13:23:f0:85:40:4c:e2:ff:62:0b:12:50:68:29:8b:49:78:
61:72:b1:46:ca:3d:c9:5b:d9:c0:97:97:c4:2e:47:cc:d0:9e:
f5:bc:ef:d4:ea:46:29:07:d7:23:2d:47:78:7e:c1:39:61:1c:
0d:9d:ef:f5:bd:ab:c0:5d:fb:5c:9d:9b:78:09:56:3f:c2:69:
e0:97:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:57 2026 by rpki-client