$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39B9507670F311EFB3D2FC16C4F9AE02.roa File: 39B9507670F311EFB3D2FC16C4F9AE02.roa (raw, json) Hash identifier: zTSdWnZFONAv3jPcRhCghAZtr63s3YxluvhHex2dUNc= Subject key identifier: E7:98:95:FF:7A:25:14:E8:F4:29:B9:CA:5D:B3:3A:E6:A0:5B:1D:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FBA5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39B9507670F311EFB3D2FC16C4F9AE02.roa Signing time: Thu 03 Sep 2026 10:35:51 +0000 ROA not before: Thu 03 Sep 2026 10:35:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135682 IP address blocks: 103.69.196.0/24 maxlen: 24 103.71.99.0/24 maxlen: 24 103.74.54.0/23 maxlen: 24 103.89.45.0/24 maxlen: 24 103.98.194.0/24 maxlen: 24 103.190.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64421 (0xfba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 3 10:35:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a994d86-5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:bd:58:11:c7:03:26:55:e7:77:25:84:ac: c3:6d:f3:f9:1f:15:09:e9:e1:96:49:3b:fc:e2:eb: f7:01:87:82:92:a1:d2:df:85:e3:e0:7e:43:e5:be: 28:f1:e8:5c:74:d1:a8:ad:72:ad:a5:41:74:6e:d5: 09:c2:b7:47:32:c8:c5:57:a5:11:a3:a4:fa:0d:ef: f2:d1:c8:17:2c:e9:ae:1d:73:cf:76:a6:0a:8e:03: f6:db:27:bd:a2:8f:e7:f0:96:ce:bd:10:65:6f:13: 80:40:6c:e1:5c:d3:b3:35:d8:35:d2:30:ee:ac:02: d8:60:18:62:27:f0:73:72:ed:dd:b1:ae:e4:2a:79: ff:8d:e5:23:f6:25:70:aa:9d:6c:f1:fe:3e:66:6c: 5e:66:28:98:a8:10:d1:fe:14:aa:78:68:6b:1d:13: b1:7d:da:e8:89:48:92:01:20:e8:fe:e3:5e:2d:81: a4:ff:99:cd:95:8b:a3:65:76:c8:c2:72:7d:bd:0f: 4c:cb:15:68:95:14:96:3c:ab:58:c0:c0:9f:93:23: 77:10:97:47:6f:c2:33:26:76:19:c6:a5:aa:7a:c7: 56:8e:68:be:d2:55:7c:c3:5e:0e:e5:7e:37:e1:e8: e2:f8:5b:dc:ca:50:de:3f:1c:74:b5:64:e6:c2:0e: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:98:95:FF:7A:25:14:E8:F4:29:B9:CA:5D:B3:3A:E6:A0:5B:1D:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/39B9507670F311EFB3D2FC16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.69.196.0/24 103.71.99.0/24 103.74.54.0/23 103.89.45.0/24 103.98.194.0/24 103.190.54.0/23 Signature Algorithm: sha256WithRSAEncryption 31:43:f8:41:82:0f:37:35:19:91:e0:03:ab:c5:a4:b8:0c:1e: 56:94:d5:8e:1b:c1:53:60:9a:14:32:fa:de:e0:50:d8:d0:9d: 34:16:07:62:e6:5b:d9:21:fc:0e:1a:87:6b:f7:55:cb:49:7b: b8:2d:27:de:69:92:79:93:80:38:61:a1:7c:af:25:75:f4:a1: 1b:67:28:4b:9d:81:21:fb:db:88:37:89:bd:5c:29:79:03:cb: f9:62:69:28:37:df:97:93:55:11:8c:d9:96:52:dc:86:3e:1f: bc:b5:cc:40:d2:1e:46:15:f1:38:5a:34:a7:37:82:75:6a:75: 8c:67:8a:6e:89:c4:fb:af:91:2a:0c:dc:fa:0a:fa:81:80:72: 50:09:21:92:01:c8:91:95:ca:3e:9b:77:c5:24:3a:07:c8:08: 1d:92:8d:63:4f:25:91:b4:74:dd:c6:b4:41:23:a5:f0:37:bf: 06:83:c2:e5:1d:d2:57:c8:42:2e:c9:21:2e:3a:8e:40:78:1a: 33:3c:08:7f:c2:e3:21:4e:da:41:f1:2c:bc:ae:f5:46:31:d2: b1:64:36:20:f7:d2:73:39:e4:4c:55:aa:ac:e5:ed:64:a2:ec: 5e:d0:b5:68:04:43:96:35:c2:f7:7e:8f:29:ec:88:a4:11:7c: 4c:36:34:d3 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIDAPulMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDkwMzEwMzU1MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE5OTRkODYtNWQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGVvVgRxwMmVed3JYSsw23z+R8VCenhlkk7/OLr9wGHgpKh0t+F4+B+Q+W+ KPHoXHTRqK1yraVBdG7VCcK3RzLIxVelEaOk+g3v8tHIFyzprh1zz3amCo4D9tsn vaKP5/CWzr0QZW8TgEBs4VzTszXYNdIw7qwC2GAYYifwc3Lt3bGu5Cp5/43lI/Yl cKqdbPH+PmZsXmYomKgQ0f4Uqnhoax0TsX3a6IlIkgEg6P7jXi2BpP+ZzZWLo2V2 yMJyfb0PTMsVaJUUljyrWMDAn5MjdxCXR2/CMyZ2GcalqnrHVo5ovtJVfMNeDuV+ N+Ho4vhb3MpQ3j8cdLVk5sIOxmMCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBTnmJX/ eiUU6PQpucpdszrmoFsduzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM5Qjk1MDc2 NzBGMzExRUZCM0QyRkMxNkM0RjlBRTAyLnJvYTA9BggrBgEFBQcBBwEB/wQuMCww KgQCAAEwJAMEAGdFxAMEAGdHYwMEAWdKNgMEAGdZLQMEAGdiwgMEAWe+NjANBgkq hkiG9w0BAQsFAAOCAQEAMUP4QYIPNzUZkeADq8WkuAweVpTVjhvBU2CaFDL63uBQ 2NCdNBYHYuZb2SH8DhqHa/dVy0l7uC0n3mmSeZOAOGGhfK8ldfShG2coS52BIfvb iDeJvVwpeQPL+WJpKDffl5NVEYzZllLchj4fvLXMQNIeRhXxOFo0pzeCdWp1jGeK bonE+6+RKgzc+gr6gYByUAkhkgHIkZXKPpt3xSQ6B8gIHZKNY08lkbR03ca0QSOl 8De/BoPC5R3SV8hCLskhLjqOQHgaMzwIf8LjIU7aQfEsvK71RjHSsWQ2IPfScznk TFWqrOXtZKLsXtC1aARDljXC936PKeyIpBF8TDY00w== -----END CERTIFICATE-----Generated at Sun Sep 20 11:54:12 2026 by rpki-client