$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/BFF632BAC8DA11EE9D90830EC4F9AE02.roa File: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (raw, json) Hash identifier: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk= Subject key identifier: 88:9E:3B:03:59:DB:CB:2B:C6:ED:29:60:5A:06:CE:8A:88:6E:7A:2D Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: 019F Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/BFF632BAC8DA11EE9D90830EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:56:07 +0000 ROA not before: Mon 29 Dec 2025 03:23:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135341 IP address blocks: 103.174.192.0/24 maxlen: 24 103.174.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: Dec 29 03:23:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46fa7-75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:34:3d:4c:6e:53:ed:ad:67:f2:c2:e8:8f: 96:30:d6:62:0e:4a:2c:5c:54:bc:a7:6c:db:0b:33: a2:08:51:6c:11:9c:6b:3e:62:f3:40:c7:e2:54:0c: 06:55:1d:61:63:93:c2:6b:df:2b:c8:a2:4d:8b:34: 18:f1:df:12:13:a0:05:97:3e:1e:f5:50:5d:b4:dd: 9f:61:c8:49:1a:5c:4b:65:f4:c5:ab:15:9c:86:43: 87:84:c5:09:20:fe:c5:21:98:05:70:dc:7e:2c:20: 77:aa:a7:63:f1:b4:cb:b9:9b:39:a7:1b:76:9f:ea: cf:73:5b:cf:b6:41:ae:25:53:b1:75:26:c6:43:45: 34:20:eb:38:08:70:cc:89:68:14:21:5c:9d:95:93: 20:69:bf:c4:6b:23:83:2f:7c:ee:e4:de:f9:64:b5: 7e:78:b9:a6:07:6f:ad:f6:17:e2:e5:dd:c9:cd:89: 22:e2:c6:d5:08:37:4f:79:2f:79:c1:88:9c:16:42: ca:1d:19:3a:b8:6b:10:4d:cf:15:3a:29:c9:25:29: 65:42:00:8a:ad:0f:c7:00:ce:02:66:0b:ce:1d:70: 4b:14:be:a6:67:ac:41:5a:84:08:66:c7:e5:30:a1: 94:cf:b6:1a:ad:31:76:6e:f4:a3:49:c2:c8:fa:61: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9E:3B:03:59:DB:CB:2B:C6:ED:29:60:5A:06:CE:8A:88:6E:7A:2D X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/BFF632BAC8DA11EE9D90830EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.192.0/23 Signature Algorithm: sha256WithRSAEncryption 94:c0:78:cb:0a:b2:39:58:05:09:03:2d:5b:99:a7:cd:17:ac: aa:e2:24:d9:b6:b6:02:a9:f3:73:77:ab:43:64:d8:72:2d:fb: ae:56:ee:12:85:59:ef:78:7f:88:81:e7:1c:1e:f7:17:bc:21: 09:59:79:5b:c7:ac:08:51:99:2b:f5:17:83:66:0b:c9:9a:4a: d6:07:6d:aa:fa:ac:33:2f:b4:cd:ad:dc:a0:10:ba:0f:df:8d: e8:79:d8:c2:e8:aa:c9:e3:1e:7f:3f:e8:15:18:54:65:da:c4: 12:1d:f4:fb:f2:f2:0e:9d:1d:c7:a1:1d:49:3d:1c:a2:c1:52: 6c:03:2e:89:69:1e:63:be:f5:b7:af:db:25:e1:af:54:04:34: 78:e5:2c:6c:55:39:d6:99:88:e6:27:ae:2b:56:18:09:0a:51: ba:4f:b4:f1:45:88:db:bc:32:cc:55:4e:23:ba:da:6d:38:3b: 31:7a:11:22:11:59:26:2a:60:22:e4:b6:99:8c:a8:7a:56:92: 8e:bf:93:e6:01:f1:59:27:aa:06:dd:1a:a3:76:4d:fe:a0:56: 97:b3:55:85:db:ee:1b:b4:77:93:6b:6d:75:6b:a2:98:fb:28: f3:12:8f:c5:5b:00:94:d5:82:80:15:ab:50:0c:3b:62:6e:e5: 50:46:bf:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjUxMjI5MDMyMzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmZhNy03NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVI0PUxuU+2tZ/LC6I+WMNZiDkosXFS8p2zbCzOiCFFsEZxrPmLzQMfiVAwG VR1hY5PCa98ryKJNizQY8d8SE6AFlz4e9VBdtN2fYchJGlxLZfTFqxWchkOHhMUJ IP7FIZgFcNx+LCB3qqdj8bTLuZs5pxt2n+rPc1vPtkGuJVOxdSbGQ0U0IOs4CHDM iWgUIVydlZMgab/EayODL3zu5N75ZLV+eLmmB2+t9hfi5d3JzYki4sbVCDdPeS95 wYicFkLKHRk6uGsQTc8VOinJJSllQgCKrQ/HAM4CZgvOHXBLFL6mZ6xBWoQIZsfl MKGUz7YarTF2bvSjScLI+mG7sQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIieOwNZ 28srxu0pYFoGzoqIbnotMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYzMzQvRTdDRERGQ0VDOEQ4MTFFRTlGNEFCOTZEQzRGOUFFMDIvQkZGNjMyQkFD OERBMTFFRTlEOTA4MzBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ67AMA0GCSqGSIb3DQEBCwUAA4IBAQCUwHjLCrI5WAUJAy1bmafN F6yq4iTZtrYCqfNzd6tDZNhyLfuuVu4ShVnveH+IgeccHvcXvCEJWXlbx6wIUZkr 9ReDZgvJmkrWB22q+qwzL7TNrdygELoP343oedjC6KrJ4x5/P+gVGFRl2sQSHfT7 8vIOnR3HoR1JPRyiwVJsAy6JaR5jvvW3r9sl4a9UBDR45SxsVTnWmYjmJ64rVhgJ ClG6T7TxRYjbvDLMVU4jutptODsxehEiEVkmKmAi5LaZjKh6VpKOv5PmAfFZJ6oG 3Rqjdk3+oFaXs1WF2+4btHeTa211a6KY+yjzEo/FWwCU1YKAFatQDDtibuVQRr/B -----END CERTIFICATE-----Generated at Thu Mar 26 11:23:48 2026 by rpki-client