$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa File: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (raw, json) Hash identifier: ZABorRdOgk7wbU+CvLj5803xv1dV9HRIAI1lvnJcQOE= Subject key identifier: AA:78:0B:E5:A5:54:70:A8:88:EB:23:4E:E7:A1:5C:87:C4:0B:81:A6 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0684 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa Signing time: Sat 15 Aug 2026 12:59:08 +0000 ROA not before: Sat 15 Aug 2026 12:59:07 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135074 IP address blocks: 103.135.208.0/22 maxlen: 22 103.135.208.0/24 maxlen: 24 103.135.209.0/24 maxlen: 24 103.135.210.0/24 maxlen: 24 103.135.211.0/24 maxlen: 24 103.172.110.0/23 maxlen: 24 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 203.168.128.0/24 maxlen: 24 203.168.129.0/24 maxlen: 24 203.168.130.0/24 maxlen: 24 203.168.131.0/24 maxlen: 24 203.168.192.0/24 maxlen: 24 203.168.193.0/24 maxlen: 24 203.168.194.0/24 maxlen: 24 203.168.195.0/24 maxlen: 24 203.168.196.0/24 maxlen: 24 203.168.197.0/24 maxlen: 24 203.168.198.0/24 maxlen: 24 203.168.199.0/24 maxlen: 24 203.168.200.0/24 maxlen: 24 203.168.201.0/24 maxlen: 24 203.168.202.0/24 maxlen: 24 203.168.203.0/24 maxlen: 24 203.168.204.0/24 maxlen: 24 203.168.205.0/24 maxlen: 24 203.168.206.0/24 maxlen: 24 203.168.207.0/24 maxlen: 24 222.167.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Aug 15 12:59:07 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a80629b-c40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:ab:b5:f5:b4:8e:43:c8:e8:81:d9:72:6b: cb:13:8f:7b:bf:22:5e:f9:be:30:82:d4:34:b8:c8: cc:ca:30:f6:ac:1f:81:cd:f3:b4:d9:c3:9e:04:c1: 14:27:a9:0c:33:28:ea:eb:df:b4:ea:cd:4f:87:e5: 93:15:cd:3d:0f:d6:24:e3:25:39:79:67:91:54:f4: 7e:e9:ec:29:81:68:5b:67:a2:a2:53:a9:30:7d:67: a2:3d:34:4f:67:30:63:85:7a:75:3b:2c:90:60:44: 64:01:fe:89:62:3a:7d:93:e1:af:f2:7b:5b:56:9f: 3a:d3:b3:6f:db:d3:41:21:d8:be:a2:d4:c1:5f:99: 6d:f6:6d:2f:d4:33:95:13:4a:19:9b:16:af:c4:65: 9e:39:28:c2:02:e0:6e:8d:94:e0:6c:90:23:25:e6: ff:24:77:6b:3d:ed:f0:23:a0:60:90:44:15:5a:1c: 6f:8e:b4:dc:11:7b:0b:2f:73:83:73:79:5b:58:b0: 91:1e:c4:bf:71:fe:6d:fa:bf:33:35:a4:ec:b1:21: cd:af:42:34:ae:f3:0a:28:30:94:09:0d:0a:4d:4a: 39:38:c4:99:d4:a6:b0:5e:1f:01:07:e1:c4:aa:1f: 81:50:e2:a7:7b:ec:b0:0a:f9:c8:c3:88:20:31:55: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:78:0B:E5:A5:54:70:A8:88:EB:23:4E:E7:A1:5C:87:C4:0B:81:A6 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption 96:80:9e:d1:17:6c:d2:99:dc:50:b7:0d:d6:7b:0e:f9:7b:ef: 91:a5:3d:64:70:60:02:bf:0a:0d:14:9a:5c:20:a4:d9:1c:36: ef:78:85:53:92:0d:a3:2f:d5:78:e2:16:3a:d7:a2:19:1f:d6: 67:68:fb:ca:b9:6f:fb:c6:b0:02:ba:46:d1:f4:b3:f0:d8:b9: c3:93:8a:fb:42:ce:c2:61:d5:7a:d6:19:19:84:c8:6c:f7:8e: 50:ba:ad:88:d8:47:52:c0:6b:22:2e:f1:f7:9c:92:1a:c3:b6: c8:ce:9b:ad:53:59:0d:78:ff:40:2f:55:a6:27:3d:b8:80:13: 9d:7e:9d:12:88:bf:a1:f1:28:78:17:b7:f6:20:ef:2c:22:82: 7a:d9:52:9e:88:7e:b2:38:59:85:ea:57:95:1f:15:b0:b7:0c: e1:67:68:87:c5:a8:3c:9f:67:ec:5a:42:64:37:2b:f8:3d:e8: ee:b9:b4:20:49:9f:92:c7:5b:60:61:10:43:dd:70:11:26:fe: 36:18:9d:ee:7a:5e:4a:35:76:4e:91:c8:1f:93:3e:ae:02:c2: 4b:1f:93:44:71:c5:0d:73:6b:6c:76:10:59:0a:95:c9:d0:3b: 54:e7:d5:fb:ac:2a:e7:60:ed:0c:99:0b:6f:1b:23:aa:b8:31: 06:a3:d8:88 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwODE1MTI1OTA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgwNjI5Yi1jNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulOrtfW0jkPI6IHZcmvLE497vyJe+b4wgtQ0uMjMyjD2rB+BzfO02cOeBMEU J6kMMyjq69+06s1Ph+WTFc09D9Yk4yU5eWeRVPR+6ewpgWhbZ6KiU6kwfWeiPTRP ZzBjhXp1OyyQYERkAf6JYjp9k+Gv8ntbVp8607Nv29NBIdi+otTBX5lt9m0v1DOV E0oZmxavxGWeOSjCAuBujZTgbJAjJeb/JHdrPe3wI6BgkEQVWhxvjrTcEXsLL3OD c3lbWLCRHsS/cf5t+r8zNaTssSHNr0I0rvMKKDCUCQ0KTUo5OMSZ1KawXh8BB+HE qh+BUOKne+ywCvnIw4ggMVVS2QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKp4C+Wl VHCoiOsjTuehXIfEC4GmMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQkZGRjZDNEEw N0Q5MTFFREE0MUEwQjI1QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQCZ4fQAwQBZ6xuAwQAZ8wNAwQCy6iAAwQEy6jAAwQC3qcgMA0GCSqG SIb3DQEBCwUAA4IBAQCWgJ7RF2zSmdxQtw3Wew75e++RpT1kcGACvwoNFJpcIKTZ HDbveIVTkg2jL9V44hY616IZH9ZnaPvKuW/7xrACukbR9LPw2LnDk4r7Qs7CYdV6 1hkZhMhs945Quq2I2EdSwGsiLvH3nJIaw7bIzputU1kNeP9AL1WmJz24gBOdfp0S iL+h8Sh4F7f2IO8sIoJ62VKeiH6yOFmF6leVHxWwtwzhZ2iHxag8n2fsWkJkNyv4 PejuubQgSZ+Sx1tgYRBD3XARJv42GJ3uel5KNXZOkcgfkz6uAsJLH5NEccUNc2ts dhBZCpXJ0DtU59X7rCrnYO0MmQtvGyOquDEGo9iI -----END CERTIFICATE-----Generated at Fri Aug 21 03:32:38 2026 by rpki-client