$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa File: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (raw, json) Hash identifier: S5U/ZXD7dxZl+w2R19scyCjZLWlFGod4r9c81H92pyk= Subject key identifier: C7:75:BD:41:07:BD:26:C9:CF:8C:9F:68:EE:81:1B:06:1B:ED:37:EA Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 019E Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:51:52 +0000 ROA not before: Wed 01 Oct 2025 06:01:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 3491 IP address blocks: 202.70.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Oct 1 06:01:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a408-9487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:0a:9e:07:05:73:7f:d1:68:d2:e7:26:06: de:63:41:71:5e:73:39:e1:37:1a:80:47:c6:42:53: 67:b1:32:db:1a:0e:87:8b:8e:55:ca:52:8d:d9:f5: e2:40:cb:2c:1f:1b:ff:5c:34:6f:c1:1d:84:47:54: 89:a6:6a:fd:b3:d7:42:c5:10:42:06:24:f7:b1:74: 11:1b:40:ba:c3:3d:24:0e:e9:f3:96:47:a9:f9:b2: ec:0b:53:d7:2b:0f:a2:0b:ed:dc:6b:90:aa:4f:21: 74:71:f0:03:1a:cd:b1:12:6b:9b:82:ea:19:51:cd: cd:6d:2c:7b:8a:36:37:18:82:8e:03:1e:a5:20:66: 86:c8:d3:3c:06:dc:89:4e:f2:19:d2:b9:0c:02:09: 09:b1:be:27:4f:c0:12:bb:13:0e:16:af:55:83:77: 0a:5a:ab:9b:75:dd:8c:dc:cb:76:7e:e5:9b:44:98: 4a:8b:9f:9b:e3:a9:0c:8e:ee:2a:55:50:a2:a2:50: 07:7e:80:14:e5:c3:20:35:b9:fe:dc:c0:6b:30:05: 83:1f:8f:4f:f3:dc:2a:73:3b:bc:18:b8:18:23:da: 4b:de:d5:55:d6:87:58:38:b6:13:5f:cd:fa:d2:12: 89:40:92:35:50:03:c0:cf:a6:dc:2f:7b:4f:2d:ca: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:BD:41:07:BD:26:C9:CF:8C:9F:68:EE:81:1B:06:1B:ED:37:EA X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.70.160.0/20 Signature Algorithm: sha256WithRSAEncryption 99:d4:03:76:9e:46:8d:da:b0:24:f3:33:bb:f1:c7:9c:0f:d9: 52:69:dd:5f:ec:ac:bc:fd:e3:d2:65:76:98:06:f7:57:0a:f4: 40:68:50:69:bc:fd:8b:fb:98:a4:11:c1:10:6f:73:9b:13:1d: 1f:9f:f8:a9:ba:32:40:e3:f9:3d:17:7c:f9:6f:00:18:8d:6b: c9:50:ea:ca:12:8d:dc:69:2d:86:31:40:e9:91:86:6c:2b:dd: 09:5b:01:e2:50:28:e1:59:64:26:6b:c8:fa:7e:58:a5:22:fa: d7:57:1a:f5:d7:78:c8:ad:51:8d:f0:15:8b:b0:86:94:6d:07: e9:43:76:88:af:e8:79:39:d1:20:73:ec:b7:67:d3:b2:5f:45: a8:48:e0:a1:4f:6b:a3:93:42:22:87:e0:67:e9:2c:79:bc:bc: fb:d5:bc:f6:94:55:ad:20:24:cf:4b:a8:08:9e:fb:f9:b1:4b: 04:22:1e:13:e1:43:99:f4:ae:85:9a:4d:19:69:08:43:05:f4: 77:1c:88:8b:69:72:d8:ec:85:03:9a:b9:cb:2e:7b:70:2e:71: 8b:b0:de:27:37:1c:8f:53:7c:d3:fa:12:e1:97:ee:20:58:ba: 4d:a3:8a:89:85:1a:c3:e3:e7:a6:37:76:c0:59:1d:1e:86:0d: c8:45:1c:bc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjUxMDAxMDYwMTEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTQwOC05NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14MKngcFc3/RaNLnJgbeY0FxXnM54TcagEfGQlNnsTLbGg6Hi45VylKN2fXi QMssHxv/XDRvwR2ER1SJpmr9s9dCxRBCBiT3sXQRG0C6wz0kDunzlkep+bLsC1PX Kw+iC+3ca5CqTyF0cfADGs2xEmubguoZUc3NbSx7ijY3GIKOAx6lIGaGyNM8BtyJ TvIZ0rkMAgkJsb4nT8ASuxMOFq9Vg3cKWqubdd2M3Mt2fuWbRJhKi5+b46kMju4q VVCiolAHfoAU5cMgNbn+3MBrMAWDH49P89wqczu8GLgYI9pL3tVV1odYOLYTX836 0hKJQJI1UAPAz6bcL3tPLcoWfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMd1vUEH vSbJz4yfaO6BGwYb7TfqMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkzQTAvQTU5NTVFNTYwQzQ1MTFFRjlFN0UwNTFEQzRGOUFFMDIvQkQ1Qjc1ODAw QzRFMTFFRjg1RUVGQzFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykagMA0GCSqGSIb3DQEBCwUAA4IBAQCZ1AN2nkaN2rAk8zO78cec D9lSad1f7Ky8/ePSZXaYBvdXCvRAaFBpvP2L+5ikEcEQb3ObEx0fn/ipujJA4/k9 F3z5bwAYjWvJUOrKEo3caS2GMUDpkYZsK90JWwHiUCjhWWQma8j6flilIvrXVxr1 13jIrVGN8BWLsIaUbQfpQ3aIr+h5OdEgc+y3Z9OyX0WoSOChT2ujk0Iih+Bn6Sx5 vLz71bz2lFWtICTPS6gInvv5sUsEIh4T4UOZ9K6Fmk0ZaQhDBfR3HIiLaXLY7IUD mrnLLntwLnGLsN4nNxyPU3zT+hLhl+4gWLpNo4qJhRrD4+emN3bAWR0ehg3IRRy8 -----END CERTIFICATE-----Generated at Thu Mar 26 04:28:15 2026 by rpki-client