$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/BFD5DDF0D95311EF9B045445C4F9AE02.roa File: BFD5DDF0D95311EF9B045445C4F9AE02.roa (raw, json) Hash identifier: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw= Subject key identifier: 73:D4:A9:A0:30:2D:0B:16:86:8D:E7:15:93:04:A5:B1:4A:1F:72:02 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 0255 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/BFD5DDF0D95311EF9B045445C4F9AE02.roa Signing time: Thu 20 Aug 2026 22:45:04 +0000 ROA not before: Thu 20 Aug 2026 22:45:04 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 137059 IP address blocks: 103.171.142.0/23 maxlen: 23 103.171.142.0/24 maxlen: 24 103.171.143.0/24 maxlen: 24 2001:df7:4a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Aug 20 22:45:04 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a878370-196b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:b8:0d:db:93:7a:92:de:8d:f4:d6:2e:39: ce:86:9f:22:f5:f6:0c:3c:a2:f2:14:84:9e:7a:04: c6:1a:80:22:af:b7:19:d7:19:64:6a:bf:58:fe:ef: 27:a4:c2:ad:e8:83:35:41:1f:23:b2:50:a6:47:78: 3a:5e:2d:0e:67:d8:3c:f0:bd:c1:d0:12:97:27:ad: ef:02:aa:0e:d5:9f:f8:11:c6:b7:30:df:ad:94:d7: 39:77:5a:57:f8:56:b1:18:3d:0b:05:70:c0:83:45: f3:09:7c:07:bc:04:38:72:bf:f8:57:46:b5:8c:bc: 1c:9a:6b:15:2d:a0:9b:aa:25:15:26:0f:c8:5e:eb: c7:27:da:ab:ca:23:20:13:86:09:a3:9e:0e:e2:86: dd:40:2a:26:47:ee:05:c8:f1:e5:93:3d:b5:52:89: 94:c0:af:11:70:85:e2:df:3f:26:e6:38:7d:69:93: 36:5c:04:1a:89:7a:d4:3e:45:de:42:d3:74:f3:bd: 6b:e1:91:41:91:5c:4d:3b:97:ca:3c:51:24:6c:92: ab:b3:5d:e2:49:f4:cc:9e:2d:42:ef:76:d8:ef:31: e1:7a:e7:31:13:d2:e0:a9:c4:ce:c3:1c:64:87:2c: 55:dd:1d:39:7b:2f:94:b7:26:9f:55:9f:e6:3d:67: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:A9:A0:30:2D:0B:16:86:8D:E7:15:93:04:A5:B1:4A:1F:72:02 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/BFD5DDF0D95311EF9B045445C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.142.0/23 IPv6: 2001:df7:4a80::/48 Signature Algorithm: sha256WithRSAEncryption 9c:5a:fe:47:ba:f3:62:6f:32:8e:3d:0f:51:1a:19:71:b5:21: 9e:7a:fd:c7:37:d3:c1:a0:b4:9f:96:34:46:06:85:d9:10:35: 57:8b:e8:84:ba:37:d7:6a:fa:1b:2e:2a:38:79:5b:72:a7:f1: 71:d9:cd:99:7c:c4:9c:27:14:6a:5a:70:32:e5:4e:00:a0:e6: 52:d6:2c:12:25:17:a3:6b:f9:29:aa:29:78:cb:58:fb:fe:aa: 12:0e:5d:83:7b:ce:fc:2d:a1:86:5b:38:bc:a3:a4:0e:04:d5: f4:fa:87:87:e0:c1:29:a4:67:e2:62:d6:ff:e6:d7:e9:b4:67: ed:0b:3b:86:a1:9e:b2:14:29:8b:f6:2f:d7:72:c4:18:d5:37: 4c:aa:74:c7:13:ef:bc:57:55:b0:d2:e0:c4:00:21:94:71:af: 62:95:7b:56:d2:83:fa:c4:b6:b8:8c:0b:36:11:3d:20:42:9b: 72:22:33:1e:3e:a9:47:39:5a:2f:3b:a7:73:5d:92:04:91:b8: c0:e5:5b:6e:a0:4d:90:6e:70:94:2e:16:25:b3:97:a2:6d:35: 9b:9a:72:84:58:94:da:35:aa:10:98:29:16:53:dd:1f:9e:b1: b1:ab:62:f8:d7:97:b2:56:68:7c:dc:dd:e9:4f:1c:f2:d1:15: 25:1c:c0:d9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjYwODIwMjI0NTA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3ODM3MC0xOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTW4DduTepLejfTWLjnOhp8i9fYMPKLyFISeegTGGoAir7cZ1xlkar9Y/u8n pMKt6IM1QR8jslCmR3g6Xi0OZ9g88L3B0BKXJ63vAqoO1Z/4Eca3MN+tlNc5d1pX +FaxGD0LBXDAg0XzCXwHvAQ4cr/4V0a1jLwcmmsVLaCbqiUVJg/IXuvHJ9qryiMg E4YJo54O4obdQComR+4FyPHlkz21UomUwK8RcIXi3z8m5jh9aZM2XAQaiXrUPkXe QtN0871r4ZFBkVxNO5fKPFEkbJKrs13iSfTMni1C73bY7zHheucxE9LgqcTOwxxk hyxV3R05ey+UtyafVZ/mPWewkwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHPUqaAw LQsWho3nFZMEpbFKH3ICMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc4OTgvMjA2OUY1RkNGQzBEMTFFQkFFOTUxNDdCQzRGOUFFMDIvQkZENURERjBE OTUzMTFFRjlCMDQ1NDQ1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6uOMA8EAgACMAkDBwAgAQ33SoAwDQYJKoZIhvcNAQELBQADggEB AJxa/ke682JvMo49D1EaGXG1IZ56/cc308GgtJ+WNEYGhdkQNVeL6IS6N9dq+hsu Kjh5W3Kn8XHZzZl8xJwnFGpacDLlTgCg5lLWLBIlF6Nr+SmqKXjLWPv+qhIOXYN7 zvwtoYZbOLyjpA4E1fT6h4fgwSmkZ+Ji1v/m1+m0Z+0LO4ahnrIUKYv2L9dyxBjV N0yqdMcT77xXVbDS4MQAIZRxr2KVe1bSg/rEtriMCzYRPSBCm3IiMx4+qUc5Wi87 p3NdkgSRuMDlW26gTZBucJQuFiWzl6JtNZuacoRYlNo1qhCYKRZT3R+esbGrYvjX l7JWaHzc3elPHPLRFSUcwNk= -----END CERTIFICATE-----Generated at Fri Sep 11 13:19:54 2026 by rpki-client