$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa File: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (raw, json) Hash identifier: 50ACgx85pKWBSdecvm1PzIpRWx2Le1Y9DodxHydptpU= Subject key identifier: DF:76:6C:63:D8:C7:A8:14:C9:98:2B:83:8B:04:7D:F2:83:C1:88:02 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 08D2 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa Signing time: Wed 15 Oct 2025 10:07:22 +0000 ROA not before: Wed 15 Oct 2025 10:07:22 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 203963 IP address blocks: 103.125.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Oct 15 10:07:22 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68ef7259-f0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:94:74:d4:2d:3f:f8:49:1b:02:37:db:29: 1e:1f:ea:74:e2:97:f4:91:d2:71:84:4b:ee:b4:d6: f8:90:0f:fd:c6:97:11:e9:e6:65:a7:c0:b3:29:aa: bb:21:85:1e:71:2f:fc:ec:d5:9c:54:25:fe:c5:97: d4:68:d0:15:62:76:6e:20:87:af:fe:47:b4:56:97: f1:ac:95:28:ba:0a:32:63:fc:b7:61:a5:8c:89:fd: 46:b6:09:33:a3:9d:39:cd:40:f1:c4:d1:03:f9:0c: fc:3e:db:22:5a:52:e8:2c:d2:69:8e:46:8d:35:af: 40:c4:76:c4:01:f4:48:dd:84:c0:f7:c2:a4:4e:ba: 98:10:56:ac:80:74:e4:e2:26:76:e3:0b:fe:8f:1c: 10:0b:f5:aa:84:cf:f0:6d:8e:dd:81:9e:a4:ed:6c: 4e:54:80:1a:a8:64:51:ed:ee:a8:90:5b:7b:2e:30: aa:81:9a:f2:a7:13:e4:63:5f:33:1e:c0:ed:ac:33: e3:b2:fe:59:da:0b:68:5e:e8:fe:c6:6c:3f:97:bb: 6d:2b:99:50:8d:cd:e0:cc:a5:b0:16:b7:d7:3a:74: 4d:9a:91:b2:fd:c5:3c:b8:20:64:75:04:72:44:37: df:4f:e1:92:3f:d9:b0:20:18:32:ec:14:75:a9:54: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:6C:63:D8:C7:A8:14:C9:98:2B:83:8B:04:7D:F2:83:C1:88:02 X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.147.0/24 Signature Algorithm: sha256WithRSAEncryption 63:d9:c2:c0:d0:d4:1a:72:61:be:8c:e8:9d:eb:ce:2d:c1:d3: c9:be:b9:c1:57:dc:e1:85:6b:39:73:cd:73:e4:dd:7f:f3:3b: 6f:22:d3:1c:93:9f:9b:05:9f:e6:64:28:f0:3f:1f:79:fe:d3: 1b:bd:d0:e5:8d:c6:6b:25:72:1c:9d:75:83:29:eb:8e:76:3a: fa:21:0b:2e:13:34:ca:32:fa:9b:23:fb:12:dc:ff:39:62:fe: 53:eb:ac:9c:13:88:76:bb:36:17:df:5e:31:b3:e3:47:d7:7f: 62:27:4f:15:5f:7c:f6:59:f4:a6:3b:61:b0:2f:c9:32:38:2c: 3d:46:8f:a9:b6:d5:64:45:ff:b3:f4:ca:71:f3:0c:b4:57:32: 7a:e9:42:3d:47:9c:61:c6:c4:fa:01:40:29:5a:69:6e:c7:4a: 2e:82:47:f2:c3:c6:f1:bb:e8:87:5c:e4:e5:08:81:df:20:75: 8f:c3:b0:0e:b9:4d:4e:97:27:84:2c:9a:ee:5e:af:96:99:e8: ed:97:fc:e0:ce:a5:67:e8:08:12:b4:eb:f7:60:31:62:71:cb: f7:5d:3c:5b:06:17:a3:28:bb:80:7e:8c:dc:ca:66:ca:89:4f: d1:7d:73:fd:85:13:52:0c:e0:75:c6:8c:31:03:fa:b4:24:31: 48:3e:cb:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjUxMDE1MTAwNzIyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVmNzI1OS1mMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYSUdNQtP/hJGwI32ykeH+p04pf0kdJxhEvutNb4kA/9xpcR6eZlp8CzKaq7 IYUecS/87NWcVCX+xZfUaNAVYnZuIIev/ke0VpfxrJUougoyY/y3YaWMif1Gtgkz o505zUDxxNED+Qz8PtsiWlLoLNJpjkaNNa9AxHbEAfRI3YTA98KkTrqYEFasgHTk 4iZ24wv+jxwQC/WqhM/wbY7dgZ6k7WxOVIAaqGRR7e6okFt7LjCqgZrypxPkY18z HsDtrDPjsv5Z2gtoXuj+xmw/l7ttK5lQjc3gzKWwFrfXOnRNmpGy/cU8uCBkdQRy RDffT+GSP9mwIBgy7BR1qVQXjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN92bGPY x6gUyZgrg4sEffKDwYgCMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvQkQxRDY3MEFB OUFFMTFGMEJBQUM0RTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfZMwDQYJKoZIhvcNAQELBQADggEBAGPZwsDQ1BpyYb6M 6J3rzi3B08m+ucFX3OGFazlzzXPk3X/zO28i0xyTn5sFn+ZkKPA/H3n+0xu90OWN xmslchyddYMp6452OvohCy4TNMoy+psj+xLc/zli/lPrrJwTiHa7NhffXjGz40fX f2InTxVffPZZ9KY7YbAvyTI4LD1Gj6m21WRF/7P0ynHzDLRXMnrpQj1HnGHGxPoB QClaaW7HSi6CR/LDxvG76Idc5OUIgd8gdY/DsA65TU6XJ4Qsmu5er5aZ6O2X/ODO pWfoCBK06/dgMWJxy/ddPFsGF6Mou4B+jNzKZsqJT9F9c/2FE1IM4HXGjDED+rQk MUg+y0g= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:49 2025 by rpki-client