$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa File: BFF7726E6EF711E69FBC340BC4F9AE02.roa (raw, json) Hash identifier: brx3F+QJqCmHbyv8rdzAimZ77OckcLhAZCr5v55mHrc= Subject key identifier: 6C:5C:60:56:E1:07:E9:DA:BC:9B:D3:FC:E9:5F:3C:20:58:E7:09:81 Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1 Certificate serial: 1F53 Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:22:01 +0000 ROA not before: Wed 28 Jan 2026 16:13:42 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 64076 IP address blocks: 103.38.220.0/24 maxlen: 24 103.205.38.0/24 maxlen: 24 2001:df2:4bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8019 (0x1f53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1 Validity Not Before: Jan 28 16:13:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a51e79-3b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:dc:21:06:73:e7:18:38:f2:71:da:86:ca: ad:e3:06:d6:e1:f3:38:07:4e:71:ae:9b:cc:8a:6b: 93:84:be:8c:95:c5:8e:e3:bc:b8:ec:ea:98:ff:90: b6:0d:64:5a:75:57:eb:11:8f:64:fb:38:f2:6d:1c: fb:bd:7e:d0:d8:65:38:a2:4f:29:54:dd:7e:e1:de: 5f:08:48:4e:12:18:4a:f5:6d:8f:99:4e:0c:b2:e0: 31:1d:d0:23:3d:54:7e:e1:7e:6f:12:8b:60:15:9a: 36:67:4c:44:91:0f:c6:a7:ac:bc:e4:c3:20:80:f4: 88:9b:b9:8d:fb:6a:ba:63:b9:27:a7:94:b4:d6:0f: fc:5d:9c:e6:4f:01:03:2e:49:4e:fb:8b:a0:7e:50: 9b:fc:f7:c3:cc:9b:af:07:d1:c3:b8:46:1f:aa:76: 28:54:0f:2c:9f:14:01:c0:c8:f8:d4:21:d9:54:17: 5c:06:0d:b0:78:e7:9a:05:09:3b:72:66:28:49:1c: 93:0e:0a:69:20:02:2c:1c:ec:64:12:47:44:3d:df: bc:61:6b:19:57:3c:fb:5b:18:1f:5c:4d:b3:95:4e: c2:16:f1:90:0b:61:a8:8d:b4:0a:87:b2:a9:c6:77: 45:aa:3e:cf:89:00:c7:69:00:bf:77:33:48:5f:3b: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:60:56:E1:07:E9:DA:BC:9B:D3:FC:E9:5F:3C:20:58:E7:09:81 X509v3 Authority Key Identifier: keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.38.220.0/24 103.205.38.0/24 IPv6: 2001:df2:4bc0::/48 Signature Algorithm: sha256WithRSAEncryption 00:65:13:d0:8b:7f:6d:90:53:88:a2:f1:94:be:39:02:73:97: 62:cb:c5:4f:67:d2:b2:10:3f:75:a7:a3:e7:a0:16:cb:27:b2: 55:ef:b3:c4:09:47:64:86:3a:42:20:a5:66:34:23:5f:78:30: 38:d1:98:04:c9:bb:d7:58:56:04:47:91:fe:d1:75:b4:17:d0: dc:89:e6:75:12:f2:cb:49:9f:c9:ea:19:b4:e1:6d:bd:7b:5a: 01:00:09:2b:0a:65:35:85:31:e3:35:bd:b3:05:49:3a:06:21: a9:10:b7:5f:e9:38:fb:db:3c:83:c6:65:04:c7:51:f4:8d:c2: 3e:b4:0b:16:12:4b:0b:1d:22:20:00:af:55:35:20:7f:ea:cf: 00:26:cf:21:e4:3a:db:6c:d6:cf:f6:e4:5f:8c:82:ec:29:ab: 1e:da:37:e0:9e:79:ca:65:99:2f:e4:f3:a7:bb:1a:1f:5d:ad: 99:8b:3c:09:e4:e6:93:4a:24:c3:5a:e5:23:8c:e7:92:33:52: 04:68:95:35:57:bc:4e:0d:b2:a7:4f:29:36:a7:f8:79:f0:46: 9a:31:f1:85:2e:e8:0c:5f:aa:ed:ff:df:aa:af:9d:b4:98:2c: ce:6c:c6:46:60:ff:75:c0:a6:25:8e:84:9f:1e:82:6f:3c:55: 84:82:7c:76 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICH1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3 OUM4MzBDRTEwHhcNMjYwMTI4MTYxMzQyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWU3OS0zYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSncIQZz5xg48nHahsqt4wbW4fM4B05xrpvMimuThL6MlcWO47y47OqY/5C2 DWRadVfrEY9k+zjybRz7vX7Q2GU4ok8pVN1+4d5fCEhOEhhK9W2PmU4MsuAxHdAj PVR+4X5vEotgFZo2Z0xEkQ/Gp6y85MMggPSIm7mN+2q6Y7knp5S01g/8XZzmTwED LklO+4ugflCb/PfDzJuvB9HDuEYfqnYoVA8snxQBwMj41CHZVBdcBg2weOeaBQk7 cmYoSRyTDgppIAIsHOxkEkdEPd+8YWsZVzz7WxgfXE2zlU7CFvGQC2GojbQKh7Kp xndFqj7PiQDHaQC/dzNIXzvkXwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGxcYFbh B+navJvT/OlfPCBY5wmBMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDN0MvMjlGN0EwNDA2RUY3MTFFNjlFMzI2NzBBQzRGOUFFMDIvQkZGNzcyNkU2 RUY3MTFFNjlGQkMzNDBCQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZybcAwQAZ80mMA8EAgACMAkDBwAgAQ3yS8AwDQYJKoZIhvcNAQEL BQADggEBAABlE9CLf22QU4ii8ZS+OQJzl2LLxU9n0rIQP3Wno+egFssnslXvs8QJ R2SGOkIgpWY0I194MDjRmATJu9dYVgRHkf7RdbQX0NyJ5nUS8stJn8nqGbThbb17 WgEACSsKZTWFMeM1vbMFSToGIakQt1/pOPvbPIPGZQTHUfSNwj60CxYSSwsdIiAA r1U1IH/qzwAmzyHkOtts1s/25F+Mguwpqx7aN+CeecplmS/k86e7Gh9drZmLPAnk 5pNKJMNa5SOM55IzUgRolTVXvE4NsqdPKTan+HnwRpox8YUu6Axfqu3/36qvnbSY LM5sxkZg/3XApiWOhJ8egm88VYSCfHY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:44:16 2026 by rpki-client