$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa File: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (raw, json) Hash identifier: YVxxsjFQVe4b/WTxgloXFf46YFKmL2wJJnBKrdiiiog= Subject key identifier: E4:D2:D3:F5:E1:BC:6B:FC:85:8F:B0:17:A3:54:03:61:F6:14:AC:04 Certificate issuer: /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Certificate serial: 072A Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:30:14 +0000 ROA not before: Mon 06 Oct 2025 22:23:31 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139697 IP address blocks: 103.143.204.0/24 maxlen: 24 103.143.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191EE7, serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Validity Not Before: Oct 6 22:23:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43156-7f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:56:f1:ec:ee:87:0e:41:41:78:ae:2c:99: 2e:9f:61:8e:e7:a7:ef:9c:62:01:68:fa:a4:48:55: 9a:3e:06:00:77:11:1e:8d:f4:ae:c9:73:42:6f:d9: 0b:f6:f2:84:f1:d6:66:ce:8d:0f:f0:20:15:be:cb: f1:88:81:86:1e:41:99:ee:54:d2:2a:0f:a3:7c:62: 49:fc:59:35:cb:31:6f:5e:9c:0d:4b:79:02:18:e8: 97:ac:65:15:a8:84:a1:7b:ae:66:6a:e0:41:3c:7e: 6e:41:ef:8d:02:ea:d0:f0:cc:13:87:89:d8:e7:59: 96:be:db:8a:cc:7e:9f:d5:fe:11:53:4c:9b:86:13: 4d:f6:5f:0c:d1:8f:28:31:22:64:08:38:b7:e6:b5: f4:7e:6d:6f:d3:21:50:ba:3e:00:62:64:25:16:7f: a0:54:42:e4:18:c7:b2:fa:04:44:69:cb:55:f9:e5: b3:c8:67:21:09:13:95:67:33:87:e6:3f:9a:47:23: e3:78:6e:60:51:58:1a:62:87:bc:cd:ac:7b:30:ee: 86:69:81:72:f4:7a:06:d7:72:f1:99:37:04:4c:c0: a4:f0:17:9e:52:f9:3c:f6:8e:9a:d4:74:b5:5d:c7: 14:46:3d:89:fd:8c:e6:95:1a:a9:eb:a8:0d:90:1b: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D2:D3:F5:E1:BC:6B:FC:85:8F:B0:17:A3:54:03:61:F6:14:AC:04 X509v3 Authority Key Identifier: keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.204.0/23 Signature Algorithm: sha256WithRSAEncryption 26:2b:a7:fb:60:5e:6f:1b:aa:85:0c:8b:f3:9b:8f:c3:f8:a3: c8:80:c0:a1:37:66:3b:39:88:30:9b:a5:be:45:aa:90:fd:9f: 94:aa:9a:61:91:be:31:ed:49:f5:99:91:73:bf:a0:ef:5f:13: 8d:26:7b:f7:66:98:4d:65:22:eb:d9:43:2e:8c:20:57:65:0f: cc:df:9f:03:54:4c:de:a7:26:54:6d:35:c5:16:9b:d9:0d:84: bb:b2:1a:5d:aa:63:44:4e:bb:e2:f4:f7:78:63:28:c5:9d:2c: d4:05:7a:59:a0:43:d2:a2:71:7e:82:bf:80:fc:66:81:3e:26: 53:3c:c9:79:f0:01:c0:5f:d7:07:3f:37:a3:2b:02:ff:27:ff: 15:cc:2e:27:3d:31:e6:56:44:47:1f:04:51:d8:b3:f7:d5:06: 26:94:a5:6d:4d:7f:d6:b7:b6:45:cc:45:09:29:78:89:33:e0: af:dc:7a:30:a1:f2:cf:94:d1:1b:7c:5a:b7:a7:2a:03:df:38: 86:35:d2:26:0b:b6:90:75:c1:99:e4:91:4b:df:06:e7:17:e8: 4c:27:8e:94:7b:16:91:0f:4b:ef:48:82:3f:d4:b7:c0:b8:bc: 7d:5f:6a:71:ec:59:0a:e4:cc:b6:97:ec:bd:ed:98:cb:ac:4c: 8d:5e:c3:e3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFRTcxMTAvBgNVBAUTKEI3REZDODAyNzIwQjQzRjAzNjM1MUIwQkM3MTYzRjIy RTUzNTNENDMwHhcNMjUxMDA2MjIyMzMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzE1Ni03ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgZW8ezuhw5BQXiuLJkun2GO56fvnGIBaPqkSFWaPgYAdxEejfSuyXNCb9kL 9vKE8dZmzo0P8CAVvsvxiIGGHkGZ7lTSKg+jfGJJ/Fk1yzFvXpwNS3kCGOiXrGUV qIShe65mauBBPH5uQe+NAurQ8MwTh4nY51mWvtuKzH6f1f4RU0ybhhNN9l8M0Y8o MSJkCDi35rX0fm1v0yFQuj4AYmQlFn+gVELkGMey+gREactV+eWzyGchCROVZzOH 5j+aRyPjeG5gUVgaYoe8zax7MO6GaYFy9HoG13LxmTcETMCk8BeeUvk89o6a1HS1 XccURj2J/YzmlRqp66gNkBtP/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOTS0/Xh vGv8hY+wF6NUA2H2FKwEMB8GA1UdIwQYMBaAFLffyAJyC0PwNjUbC8cWPyLlNT1D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUVFNy8wNERDMzA0MjZG NzgxMUVCOTJGRTA3ODJDNEY5QUUwMi90OV9JQW5JTFFfQTJOUnNMeHhZX0l1VTFQ VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5X0lBbklMUV9BMk5Sc0x4eFlfSXVVMVBVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFRTcvMDREQzMwNDI2Rjc4MTFFQjkyRkUwNzgyQzRGOUFFMDIvQkYyODlFQkM2 Rjc5MTFFQkE1RDM5Qzg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4/MMA0GCSqGSIb3DQEBCwUAA4IBAQAmK6f7YF5vG6qFDIvzm4/D +KPIgMChN2Y7OYgwm6W+RaqQ/Z+Uqpphkb4x7Un1mZFzv6DvXxONJnv3ZphNZSLr 2UMujCBXZQ/M358DVEzepyZUbTXFFpvZDYS7shpdqmNETrvi9Pd4YyjFnSzUBXpZ oEPSonF+gr+A/GaBPiZTPMl58AHAX9cHPzejKwL/J/8VzC4nPTHmVkRHHwRR2LP3 1QYmlKVtTX/Wt7ZFzEUJKXiJM+Cv3HowofLPlNEbfFq3pyoD3ziGNdImC7aQdcGZ 5JFL3wbnF+hMJ46UexaRD0vvSII/1LfAuLx9X2px7FkK5My2l+y97ZjLrEyNXsPj -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:07 2026 by rpki-client