$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa File: BFC45160484411F0A8433B42C4F9AE02.roa (raw, json) Hash identifier: VuRfNVBZwbR+ucX5LeWc2BXr4+CtK5OzMpCV0KJbLkg= Subject key identifier: 5F:8E:C0:BE:B7:C3:7D:BE:CC:26:8B:19:C6:B8:49:7D:2A:C3:FF:23 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 07AE Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa Signing time: Sun 02 Nov 2025 21:40:53 +0000 ROA not before: Sun 02 Nov 2025 21:40:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132847 IP address blocks: 103.74.171.0/24 maxlen: 24 103.99.241.0/24 maxlen: 24 103.99.242.0/23 maxlen: 24 120.88.4.0/22 maxlen: 24 163.47.110.0/24 maxlen: 24 203.27.118.0/24 maxlen: 24 2401:c240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Nov 2 21:40:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907cfe5-191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:f7:c4:b6:3b:27:d9:a6:fc:42:eb:ba:57: 15:bc:3c:7c:14:3f:93:fb:24:53:e6:8b:77:28:d6: d9:f1:77:7a:9e:84:08:10:41:63:6c:5a:da:1d:15: a8:d4:f9:b1:64:54:3c:2e:f9:cb:85:b6:ca:ab:0b: 53:61:ea:2f:0a:3a:06:18:8b:53:a2:fc:65:00:cb: 89:27:cb:35:9d:2e:e0:51:65:38:18:ef:0d:22:70: 51:d9:83:11:26:66:eb:58:81:cf:17:35:34:e0:e1: 55:45:5d:3b:aa:35:d4:41:d7:7b:ba:80:e5:cb:ab: 93:21:d4:b8:ac:35:a7:d2:22:1a:8e:b0:cf:eb:2e: cd:bd:5d:04:44:ba:98:48:72:01:a1:08:d2:58:86: d5:75:30:fe:44:a2:bc:57:5c:20:2b:37:93:fc:0d: 7b:80:d2:aa:94:e9:ff:e9:63:e6:41:1d:64:cb:b4: 8b:24:81:d8:95:c0:6d:5d:60:91:75:fe:22:93:00: fc:13:1f:72:b9:87:8e:94:da:a6:0f:b7:d0:8c:b1: 8b:d0:80:59:ed:92:5b:c9:8d:a4:f2:5b:6d:c8:88: a5:5c:1e:89:a3:c6:b5:eb:8f:e1:04:12:84:d2:bd: 25:ed:44:d8:9e:dd:bb:47:cf:61:ba:00:a2:3e:c3: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8E:C0:BE:B7:C3:7D:BE:CC:26:8B:19:C6:B8:49:7D:2A:C3:FF:23 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.171.0/24 103.99.241.0-103.99.243.255 120.88.4.0/22 163.47.110.0/24 203.27.118.0/24 IPv6: 2401:c240::/32 Signature Algorithm: sha256WithRSAEncryption 34:d3:a7:91:f4:4a:9a:9e:4b:89:a7:af:74:fd:f0:25:b0:c2: 03:29:5e:88:50:58:32:77:76:b6:98:68:85:bf:04:af:6f:02: 14:81:a8:e4:f7:bc:8c:d8:92:07:23:95:d4:1e:1c:68:95:f0: d7:4f:3f:3d:87:6a:f2:f1:44:62:64:27:1d:77:98:16:85:eb: 57:1a:f3:d1:22:cd:41:78:86:b3:5a:f1:ec:97:68:b5:d1:0b: 26:84:d2:c7:ac:39:b0:0b:1f:ac:0c:87:b3:9a:03:54:17:57: 10:24:20:6d:e6:71:c4:5b:74:e2:d8:be:ce:f6:c7:b6:2d:e4: e9:d1:f1:78:d0:ab:b0:cc:fa:f3:0b:13:35:23:7a:ef:f0:2b: 6b:db:60:27:f1:01:e4:d9:32:50:5e:b8:10:e5:ee:cd:85:6b: ae:57:33:36:6a:de:ba:0b:a0:4e:d9:58:9e:6a:e5:83:23:f0: 0a:e7:d1:38:28:d5:46:f0:48:38:5f:8c:f6:b7:1f:64:85:0a: e0:3d:ee:2a:9f:82:92:8d:3b:e2:68:ff:53:46:f9:d3:8c:7a: 07:a2:d8:34:ed:92:8e:16:22:da:91:01:05:e5:3d:24:c6:e7: a1:63:64:6e:2c:89:b8:19:32:a4:63:6e:d6:af:78:37:e0:c9: 5f:aa:04:67 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUxMTAyMjE0MDUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3Y2ZlNS0xOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8L3xLY7J9mm/ELrulcVvDx8FD+T+yRT5ot3KNbZ8Xd6noQIEEFjbFraHRWo 1PmxZFQ8LvnLhbbKqwtTYeovCjoGGItTovxlAMuJJ8s1nS7gUWU4GO8NInBR2YMR JmbrWIHPFzU04OFVRV07qjXUQdd7uoDly6uTIdS4rDWn0iIajrDP6y7NvV0ERLqY SHIBoQjSWIbVdTD+RKK8V1wgKzeT/A17gNKqlOn/6WPmQR1ky7SLJIHYlcBtXWCR df4ikwD8Ex9yuYeOlNqmD7fQjLGL0IBZ7ZJbyY2k8lttyIilXB6Jo8a164/hBBKE 0r0l7UTYnt27R89hugCiPsPrYQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFF+OwL63 w32+zCaLGca4SX0qw/8jMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxOEQvN0ExMjY5N0UyQUUyMTFFQkJCRkM0RjBBQzRGOUFFMDIvQkZDNDUxNjA0 ODQ0MTFGMEE4NDMzQjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCwEAgABMCYDBABnSqswDAMEAGdj8QMEAmdj8AMEAnhYBAMEAKMvbgMEAMsb djANBAIAAjAHAwUAJAHCQDANBgkqhkiG9w0BAQsFAAOCAQEANNOnkfRKmp5Liaev dP3wJbDCAyleiFBYMnd2tphohb8Er28CFIGo5Pe8jNiSByOV1B4caJXw108/PYdq 8vFEYmQnHXeYFoXrVxrz0SLNQXiGs1rx7JdotdELJoTSx6w5sAsfrAyHs5oDVBdX ECQgbeZxxFt04ti+zvbHti3k6dHxeNCrsMz68wsTNSN67/Ara9tgJ/EB5NkyUF64 EOXuzYVrrlczNmreugugTtlYnmrlgyPwCufROCjVRvBIOF+M9rcfZIUK4D3uKp+C ko074mj/U0b504x6B6LYNO2SjhYi2pEBBeU9JMbnoWNkbiyJuBkypGNu1q94N+DJ X6oEZw== -----END CERTIFICATE-----Generated at Tue Nov 4 12:09:04 2025 by rpki-client