$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa File: BDFE68F491FD11EB84408D16C4F9AE02.roa (raw, json) Hash identifier: 8+ccZFLbNw6d0jzqjMV4lchK7CWsvFlivDXtgGmeX84= Subject key identifier: AB:02:D8:EF:B6:DA:C8:C3:23:61:9B:E8:26:9B:E3:0C:99:39:BF:BC Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 06DB Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:32:32 +0000 ROA not before: Sun 14 Sep 2025 23:03:55 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 64037 IP address blocks: 103.195.140.0/23 maxlen: 23 103.195.140.0/24 maxlen: 24 103.195.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Sep 14 23:03:55 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59f80-8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:ab:62:16:58:8d:c8:7b:22:03:b1:ff:a5: 32:34:c3:b0:15:9a:2e:e7:69:ef:cb:d1:de:22:ce: c6:06:cd:64:02:fa:94:ae:35:3d:a2:e9:ff:d0:f9: 11:9c:2e:a2:12:07:3c:42:f6:da:da:35:4c:dc:20: 0b:c1:e9:4a:ea:ef:7a:00:b1:43:de:3c:0d:df:f6: 64:72:85:ac:be:4b:db:29:e1:0f:22:ff:e8:55:52: b5:23:91:47:90:33:1b:13:fe:5e:5f:2e:98:80:17: 78:14:e0:30:13:21:dd:5a:a9:8f:72:e1:fd:90:89: 76:3f:df:31:74:ff:5c:35:41:a9:6e:f4:27:a1:a5: 66:7f:f1:2a:ec:f9:8f:ea:7d:8d:57:47:54:53:1f: bd:27:00:04:f0:19:c4:1d:51:93:f3:25:c2:65:12: e5:ff:d0:31:ee:7b:65:b7:9a:bc:00:2e:30:02:4e: b5:8f:88:f3:ab:86:6c:7e:63:95:39:03:c0:57:e8: 74:11:e6:43:99:42:53:c1:dc:52:24:b4:b5:cc:e1: a9:7c:c7:c5:38:8d:4c:97:b3:a9:19:63:24:e0:6b: 5c:ec:de:6e:20:cc:11:bd:c6:d9:3e:76:3e:6c:f5: 47:32:ba:74:d1:90:6f:9a:95:b5:7c:f0:54:bc:38: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:D8:EF:B6:DA:C8:C3:23:61:9B:E8:26:9B:E3:0C:99:39:BF:BC X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.195.140.0/23 Signature Algorithm: sha256WithRSAEncryption 86:a5:eb:9f:f2:28:f1:a0:73:fd:4b:a7:18:cf:ac:02:42:d5: ab:cd:c3:ba:6d:10:f6:95:9b:b2:4b:6b:6c:99:f1:4c:b4:2b: 5e:2f:16:f5:32:d2:ae:7e:89:27:a1:2c:7e:20:39:15:c3:ee: 18:f5:f0:33:9c:3f:e6:fa:21:d5:d7:0d:49:12:41:79:b3:c8: b1:66:d7:db:ae:89:cc:4f:96:95:29:ba:d4:4e:ce:a1:bb:8a: db:ee:6d:4e:eb:1f:6a:c5:20:6d:de:7c:0c:37:4f:ee:0b:b7: fb:9d:5c:18:00:d0:93:fa:8b:95:ca:3b:d4:13:cd:ca:df:e9: 2b:f9:24:44:10:f2:7b:2d:2d:4c:89:fe:8e:8c:94:63:46:bb: 8d:b9:eb:b2:c5:76:eb:88:ed:5a:ed:b5:dc:5b:fd:9d:8b:d5: 67:eb:64:2c:5e:d2:03:41:22:a5:81:12:86:32:0a:29:6e:5d: b5:c3:53:b1:46:0a:e5:9a:5b:ab:3c:33:89:15:82:8b:50:54: 8e:be:e2:5a:e5:40:92:d5:2a:a5:d6:5e:7a:49:05:db:84:e1: ab:b1:51:27:51:19:47:69:17:fd:da:f9:ef:da:3f:bd:e7:33: 09:25:1b:a8:51:23:4f:8c:f3:52:67:27:7a:cd:bb:61:45:29: 8b:9a:bf:38 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwOTE0MjMwMzU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWY4MC04MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy32rYhZYjch7IgOx/6UyNMOwFZou52nvy9HeIs7GBs1kAvqUrjU9oun/0PkR nC6iEgc8Qvba2jVM3CALwelK6u96ALFD3jwN3/ZkcoWsvkvbKeEPIv/oVVK1I5FH kDMbE/5eXy6YgBd4FOAwEyHdWqmPcuH9kIl2P98xdP9cNUGpbvQnoaVmf/Eq7PmP 6n2NV0dUUx+9JwAE8BnEHVGT8yXCZRLl/9Ax7ntlt5q8AC4wAk61j4jzq4ZsfmOV OQPAV+h0EeZDmUJTwdxSJLS1zOGpfMfFOI1Ml7OpGWMk4Gtc7N5uIMwRvcbZPnY+ bPVHMrp00ZBvmpW1fPBUvDhYrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKsC2O+2 2sjDI2Gb6Cab4wyZOb+8MB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMwNDMvMzk2QzVENDA5MUZDMTFFQkE5OThEQjE0QzRGOUFFMDIvQkRGRTY4RjQ5 MUZEMTFFQjg0NDA4RDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ8OMMA0GCSqGSIb3DQEBCwUAA4IBAQCGpeuf8ijxoHP9S6cYz6wC QtWrzcO6bRD2lZuyS2tsmfFMtCteLxb1MtKufoknoSx+IDkVw+4Y9fAznD/m+iHV 1w1JEkF5s8ixZtfbronMT5aVKbrUTs6hu4rb7m1O6x9qxSBt3nwMN0/uC7f7nVwY ANCT+ouVyjvUE83K3+kr+SREEPJ7LS1Mif6OjJRjRruNueuyxXbriO1a7bXcW/2d i9Vn62QsXtIDQSKlgRKGMgopbl21w1OxRgrlmlurPDOJFYKLUFSOvuJa5UCS1Sql 1l56SQXbhOGrsVEnURlHaRf92vnv2j+95zMJJRuoUSNPjPNSZyd6zbthRSmLmr84 -----END CERTIFICATE-----Generated at Thu Mar 26 08:24:45 2026 by rpki-client