$ rpki-client -vvvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa File: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (raw, json) Hash identifier: BjiT136Dk6y//5hZ5E7oq91xqhPYBW79OZ0CFmTyBTs= Subject key identifier: 0B:BE:51:46:3D:78:CF:F9:A0:96:65:CC:84:01:4C:DA:54:7A:50:4F Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Certificate serial: 0895 Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa Signing time: Mon 31 Aug 2026 21:40:43 +0000 ROA not before: Mon 31 Aug 2026 21:40:43 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131471 IP address blocks: 103.104.212.0/24 maxlen: 24 103.104.213.0/24 maxlen: 24 103.104.214.0/24 maxlen: 24 103.104.215.0/24 maxlen: 24 103.153.14.0/24 maxlen: 24 103.153.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA Validity Not Before: Aug 31 21:40:43 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a95f4db-c8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:a4:dd:c3:ac:43:5d:30:6b:a4:dc:ff:73: 0f:d9:34:34:eb:ff:1e:ce:15:a6:69:49:3e:64:60: 00:b7:04:13:17:65:7d:18:b6:b1:9a:28:4c:d4:f4: 5a:2b:f1:a4:e2:a8:23:74:46:5b:9f:b6:b4:89:a8: de:ec:7f:94:33:fe:a1:47:6d:26:72:92:75:8c:7f: be:df:0a:8a:f4:fa:f3:d4:2e:6f:66:82:31:62:79: d9:e6:49:61:37:5a:55:01:30:e0:15:5b:5a:dc:d9: 6f:4f:9d:1a:d6:6c:a5:b8:e0:3e:e1:0b:81:51:ce: 3c:c2:4f:81:80:44:50:9b:4f:71:bb:aa:68:1e:05: be:42:2a:6d:82:a8:6a:b4:d9:82:56:c8:31:b2:2f: 92:49:2d:9a:76:ae:ce:59:94:1f:2b:26:8b:f1:4d: 99:ca:83:aa:e2:cf:bf:a8:26:69:7e:5d:cd:5f:7c: a7:65:a3:65:df:5a:3a:21:bd:cb:8a:34:36:f0:f6: 36:1a:6d:a9:fa:ab:13:28:5a:79:46:4a:ae:47:40: b9:71:b7:d6:78:74:b9:ba:b2:8f:2c:03:6d:11:b9: 62:de:40:2d:23:d8:77:4f:c9:b0:93:e8:9d:7d:36: 68:c6:72:b8:5b:5e:28:8a:b5:c2:db:be:94:26:11: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:51:46:3D:78:CF:F9:A0:96:65:CC:84:01:4C:DA:54:7A:50:4F X509v3 Authority Key Identifier: keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.212.0/22 103.153.14.0/23 Signature Algorithm: sha256WithRSAEncryption 92:8c:ee:4f:5f:5b:71:06:27:72:64:f2:c2:94:b7:ad:f9:fa: fb:be:89:0b:b7:62:37:da:95:81:1b:82:d9:1c:3c:1e:d5:59: cc:21:fd:9e:f5:48:15:cf:52:1c:58:f4:5d:4b:49:67:26:87: a3:82:bf:9c:e3:bb:e8:24:4a:51:62:10:12:19:7e:51:ba:b9: 3b:a0:d5:c6:92:1c:80:14:00:cb:18:c1:0c:a9:b3:e3:aa:a3: 8f:46:36:9e:ee:8d:08:27:b9:e8:0e:27:61:62:fd:0e:41:c7: a0:97:13:36:4a:00:4b:0a:39:84:38:0e:79:b6:c9:3a:f7:c1: 7f:4d:6e:1b:a6:cb:85:5f:e1:f1:7c:94:40:73:3f:20:82:a1: 01:18:ec:0f:14:f2:9b:a5:78:9d:11:86:7e:bc:33:38:2f:75: a1:28:56:5e:9e:ba:43:39:94:fa:75:ca:10:07:3c:06:33:6a: 65:10:91:07:51:64:67:60:3d:6d:50:de:8a:14:dd:16:d3:d5: 52:8d:a0:4a:d5:9f:21:cb:b8:75:92:b4:9c:54:31:ea:ff:4c: a4:ad:44:60:2e:0a:b2:52:7b:f4:9a:86:0c:59:7a:60:08:5a: 31:32:25:45:4d:a0:b4:e7:4b:71:a2:cd:58:c6:f5:d5:cb:d1: 99:3b:ff:2a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2N0YxMTAvBgNVBAUTKEQ0RUE5NDY0RjMyMkIyNkQ3RDIxMjhEQzM3NTJGMjI4 ODgwMDE2REEwHhcNMjYwODMxMjE0MDQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1ZjRkYi1jOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkkWk3cOsQ10wa6Tc/3MP2TQ06/8ezhWmaUk+ZGAAtwQTF2V9GLaxmihM1PRa K/Gk4qgjdEZbn7a0iaje7H+UM/6hR20mcpJ1jH++3wqK9Prz1C5vZoIxYnnZ5klh N1pVATDgFVta3NlvT50a1myluOA+4QuBUc48wk+BgERQm09xu6poHgW+Qiptgqhq tNmCVsgxsi+SSS2adq7OWZQfKyaL8U2ZyoOq4s+/qCZpfl3NX3ynZaNl31o6Ib3L ijQ28PY2Gm2p+qsTKFp5RkquR0C5cbfWeHS5urKPLANtEbli3kAtI9h3T8mwk+id fTZoxnK4W14oirXC276UJhHEZwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAu+UUY9 eM/5oJZlzIQBTNpUelBPMB8GA1UdIwQYMBaAFNTqlGTzIrJtfSEo3DdS8iiIABba MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzY3Ri9BMjIxOTA1ODEy OEIxMUVCQkZBMkM0N0VDNEY5QUUwMi8xT3FVWlBNaXNtMTlJU2pjTjFMeUtJZ0FG dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPcVVaUE1pc20xOUlTamNOMUx5S0lnQUZ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM2N0YvQTIyMTkwNTgxMjhCMTFFQkJGQTJDNDdFQzRGOUFFMDIvQkYxM0FCOEM1 RDMzMTFFRkE0M0UwQzZFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ2jUAwQBZ5kOMA0GCSqGSIb3DQEBCwUAA4IBAQCSjO5PX1txBidy ZPLClLet+fr7vokLt2I32pWBG4LZHDwe1VnMIf2e9UgVz1IcWPRdS0lnJoejgr+c 47voJEpRYhASGX5Rurk7oNXGkhyAFADLGMEMqbPjqqOPRjae7o0IJ7noDidhYv0O QceglxM2SgBLCjmEOA55tsk698F/TW4bpsuFX+HxfJRAcz8ggqEBGOwPFPKbpXid EYZ+vDM4L3WhKFZenrpDOZT6dcoQBzwGM2plEJEHUWRnYD1tUN6KFN0W09VSjaBK 1Z8hy7h1krScVDHq/0ykrURgLgqyUnv0moYMWXpgCFoxMiVFTaC050txos1YxvXV y9GZO/8q -----END CERTIFICATE-----Generated at Fri Sep 11 10:38:44 2026 by rpki-client