$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa File: BFD9F81CFFEB11F085398A1A766F56BC.roa (raw, json) Hash identifier: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw= Subject key identifier: 76:DF:66:93:FF:43:BA:3F:78:65:F3:1C:C9:22:3D:B6:67:07:62:44 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 10E8 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa Signing time: Sun 01 Mar 2026 14:37:09 +0000 ROA not before: Mon 02 Feb 2026 04:00:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135589 IP address blocks: 103.13.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Feb 2 04:00:45 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44f15-bb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:7d:06:99:04:c1:eb:7d:05:fe:16:6e:41: 63:36:38:a4:96:9b:90:d5:6c:97:46:8d:7b:1a:a8: 71:5a:47:af:69:62:ce:6b:66:2b:bc:ce:52:b9:0f: 2d:78:bd:99:85:fe:4f:e3:6b:c9:58:9f:b8:e8:da: 80:d4:38:ed:c7:67:c6:0d:05:90:57:9a:05:8d:19: ba:e2:86:54:ca:4c:ab:62:be:6b:64:80:e9:ad:cb: 7b:e8:4f:f0:bb:61:f6:26:df:55:96:6c:47:25:31: 11:2f:07:be:d8:37:08:cf:58:df:03:37:64:ee:cc: cf:d4:d1:ae:8f:8f:ee:a7:60:36:0b:73:2d:d5:fc: 96:22:20:cc:1d:39:4e:d8:dc:25:1e:79:c4:42:eb: 10:d1:fb:a9:d1:ec:a6:e7:f7:8c:da:df:0f:9d:95: 69:ef:b3:c9:e0:de:c6:61:eb:67:21:77:fb:76:8f: d9:bf:ac:46:fb:90:4e:56:ad:07:18:ff:36:d8:d5: ae:3c:52:16:7e:2c:a4:b4:50:1d:54:a9:7e:8a:9a: b2:f9:49:14:29:65:8b:12:6c:75:ea:c3:ed:ce:19: e6:c0:13:e9:3e:7a:51:b7:0f:ba:f5:4f:c4:a7:db: 82:1a:5c:3b:69:37:15:d5:6e:19:52:0d:0a:f7:a7: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:66:93:FF:43:BA:3F:78:65:F3:1C:C9:22:3D:B6:67:07:62:44 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.13.35.0/24 Signature Algorithm: sha256WithRSAEncryption d4:d1:53:5b:f6:07:16:00:90:40:2c:e7:21:fa:70:e4:ce:95: 14:cb:1d:2d:18:88:b3:bf:ce:9c:6b:d6:4f:a0:b8:52:e6:f2: 81:c3:be:bf:7d:cf:c9:28:86:7e:f2:d7:43:aa:20:d9:78:0c: 14:9c:a4:7a:ed:11:dd:1e:60:98:8a:09:55:fc:1b:2c:f7:e7: fd:86:c1:13:2e:ab:48:fe:78:45:dc:14:76:88:f3:f2:8c:68: c9:87:22:5a:f8:c5:cb:7f:e5:16:3e:61:13:32:5a:2b:47:7e: e3:00:c8:b0:c1:8b:8b:4f:50:cd:56:07:96:65:47:2d:95:0d: ab:a5:dc:79:66:7b:a9:be:76:96:2f:43:d7:dc:fc:09:bb:57: 83:4a:54:cb:40:bc:08:ca:98:36:37:06:4a:b5:a9:5d:22:8d: 02:33:22:d5:28:15:dc:8b:21:aa:6e:eb:60:11:ce:87:b7:c1: ec:05:03:b1:9a:6d:61:bc:8b:92:eb:29:a5:32:c1:e5:7f:a7: 2a:bf:03:2b:c0:86:f8:96:ca:b5:fb:28:8b:17:4d:a2:dd:e1: 8e:14:37:a0:02:f2:d6:98:24:b4:28:e1:d1:17:9e:0a:9d:61: 16:65:78:44:3f:7d:39:82:ba:b5:59:72:09:4a:ac:c2:2b:85: 02:d8:2e:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjYwMjAyMDQwMDQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGYxNS1iYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMx9BpkEwet9Bf4WbkFjNjiklpuQ1WyXRo17GqhxWkevaWLOa2YrvM5SuQ8t eL2Zhf5P42vJWJ+46NqA1Djtx2fGDQWQV5oFjRm64oZUykyrYr5rZIDprct76E/w u2H2Jt9VlmxHJTERLwe+2DcIz1jfAzdk7szP1NGuj4/up2A2C3Mt1fyWIiDMHTlO 2NwlHnnEQusQ0fup0eym5/eM2t8PnZVp77PJ4N7GYetnIXf7do/Zv6xG+5BOVq0H GP822NWuPFIWfiyktFAdVKl+ipqy+UkUKWWLEmx16sPtzhnmwBPpPnpRtw+69U/E p9uCGlw7aTcV1W4ZUg0K96fIRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHbfZpP/ Q7o/eGXzHMkiPbZnB2JEMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODk1RDgvNEYzMTRDNDAzQURDMTFFOUIxRDMwQzEyQzRGOUFFMDIvQkZEOUY4MUNG RkVCMTFGMDg1Mzk4QTFBNzY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZw0jMA0GCSqGSIb3DQEBCwUAA4IBAQDU0VNb9gcWAJBALOch+nDk zpUUyx0tGIizv86ca9ZPoLhS5vKBw76/fc/JKIZ+8tdDqiDZeAwUnKR67RHdHmCY iglV/Bss9+f9hsETLqtI/nhF3BR2iPPyjGjJhyJa+MXLf+UWPmETMlorR37jAMiw wYuLT1DNVgeWZUctlQ2rpdx5ZnupvnaWL0PX3PwJu1eDSlTLQLwIypg2NwZKtald Io0CMyLVKBXciyGqbutgEc6Ht8HsBQOxmm1hvIuS6ymlMsHlf6cqvwMrwIb4lsq1 +yiLF02i3eGOFDegAvLWmCS0KOHRF54KnWEWZXhEP305grq1WXIJSqzCK4UC2C5M -----END CERTIFICATE-----Generated at Sat Mar 28 13:38:01 2026 by rpki-client