$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/BFF3DC6A8D7511F1984B69733211F970.roa File: BFF3DC6A8D7511F1984B69733211F970.roa (raw, json) Hash identifier: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI= Subject key identifier: 15:93:3F:9D:33:68:D0:62:4C:6F:2C:F6:C1:F8:B8:48:83:4B:F0:15 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0DB5 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/BFF3DC6A8D7511F1984B69733211F970.roa Signing time: Sat 01 Aug 2026 06:53:50 +0000 ROA not before: Sat 01 Aug 2026 06:53:50 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 216138 IP address blocks: 43.246.129.0/24 maxlen: 24 103.7.209.0/24 maxlen: 24 103.7.210.0/24 maxlen: 24 103.26.164.0/24 maxlen: 24 103.26.165.0/24 maxlen: 24 103.244.211.0/24 maxlen: 24 160.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 1 06:53:50 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a6d97fd-8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:0b:dc:7b:8f:b2:92:9c:50:a1:61:a2:99: 50:3f:8b:b4:6c:b6:c6:5f:44:cd:28:12:f1:65:62: f6:25:10:ad:dd:6a:5e:35:d5:f1:b6:5b:90:4a:da: 8b:18:f8:c1:e9:75:18:43:ed:af:03:2e:52:61:2d: 4a:cf:3a:5e:0a:19:aa:a9:23:d4:e6:4d:bc:0b:2c: d8:89:4d:6e:61:8d:88:34:f0:5b:1d:fb:44:79:6b: 46:84:8b:ba:d1:3a:5f:96:38:47:db:a6:f7:20:1f: 5c:24:3d:5c:b1:81:64:9f:60:89:83:a9:78:ed:5d: bc:aa:80:28:5b:72:b3:14:3a:d7:38:03:5b:f8:69: 00:08:dd:bc:38:99:10:2a:e7:97:6b:0c:e4:df:90: 1f:1d:4f:79:79:1e:c3:80:05:32:96:21:d0:31:b4: e7:6c:5e:87:d9:62:67:23:8f:e0:f4:7b:65:62:cf: 7e:26:3f:ff:71:09:9a:8a:93:db:ba:d1:82:55:2f: b3:45:7c:13:ac:ed:9c:1b:45:62:d5:27:84:c7:51: 05:fd:b4:e5:5d:98:2b:11:5e:3f:e0:f3:23:9f:43: 0f:87:d1:25:82:39:86:2a:8e:b4:a3:a1:8b:45:b8: a1:6f:fc:30:f2:c8:71:81:5a:36:b6:14:9a:a6:5f: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:93:3F:9D:33:68:D0:62:4C:6F:2C:F6:C1:F8:B8:48:83:4B:F0:15 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/BFF3DC6A8D7511F1984B69733211F970.roa sbgp-ipAddrBlock: critical IPv4: 43.246.129.0/24 103.7.209.0-103.7.210.255 103.26.164.0/23 103.244.211.0/24 160.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption cf:de:54:d7:85:eb:ca:de:05:d2:c4:47:96:5b:9f:f1:93:ea: 31:78:10:7a:2f:b6:5b:ae:57:71:9d:f0:55:5b:cb:93:fb:7c: e8:0b:0f:fd:65:85:7d:3b:ac:e4:a2:2f:5c:d2:62:28:c0:5d: 51:70:3c:3d:1e:eb:2e:d8:a4:37:c2:76:93:9e:17:83:b2:f7: 5a:cb:bd:68:4f:d9:62:3d:49:a2:02:9d:56:d8:b9:6a:41:be: cf:29:09:7e:10:52:c3:be:33:14:d0:eb:93:58:27:af:10:ea: 0b:99:e4:ac:62:e6:63:24:c8:e3:25:6d:03:d1:55:ba:5b:be: 57:dc:3a:44:d3:62:b7:07:d8:9c:41:f3:e4:88:50:a3:5f:7c: 1c:83:f2:5d:e7:48:af:e6:e9:a4:7e:8e:ea:dc:01:12:a4:dd: a5:4b:82:f0:dd:a3:81:7a:1f:f8:0c:5a:80:2e:5b:b9:aa:5e: 7a:90:09:0d:e8:bc:d0:c4:5f:bd:ea:e3:08:e7:d7:fb:20:48: 7d:86:aa:7e:34:5c:24:88:c7:ac:47:71:5d:6d:96:a3:fe:79: cc:d1:20:1c:a7:a5:4d:13:e8:a9:ce:8c:9c:1a:e6:26:e0:32: 30:3b:fc:85:60:00:cf:2b:1d:c9:d9:71:07:b9:65:40:7e:49: 9c:ce:a7:44 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwODAxMDY1MzUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTZkOTdmZC04YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhvkL3HuPspKcUKFhoplQP4u0bLbGX0TNKBLxZWL2JRCt3WpeNdXxtluQStqL GPjB6XUYQ+2vAy5SYS1KzzpeChmqqSPU5k28CyzYiU1uYY2INPBbHftEeWtGhIu6 0TpfljhH26b3IB9cJD1csYFkn2CJg6l47V28qoAoW3KzFDrXOANb+GkACN28OJkQ KueXawzk35AfHU95eR7DgAUyliHQMbTnbF6H2WJnI4/g9HtlYs9+Jj//cQmaipPb utGCVS+zRXwTrO2cG0Vi1SeEx1EF/bTlXZgrEV4/4PMjn0MPh9ElgjmGKo60o6GL Rbihb/ww8shxgVo2thSapl/+nQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFBWTP50z aNBiTG8s9sH4uEiDS/AVMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQkZGM0RDNkE4 RDc1MTFGMTk4NEI2OTczMzIxMUY5NzAucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQAK/aBMAwDBABnB9EDBABnB9IDBAFnGqQDBABn9NMDBACgFC0wDQYJ KoZIhvcNAQELBQADggEBAM/eVNeF68reBdLER5Zbn/GT6jF4EHovtluuV3Gd8FVb y5P7fOgLD/1lhX07rOSiL1zSYijAXVFwPD0e6y7YpDfCdpOeF4Oy91rLvWhP2WI9 SaICnVbYuWpBvs8pCX4QUsO+MxTQ65NYJ68Q6guZ5Kxi5mMkyOMlbQPRVbpbvlfc OkTTYrcH2JxB8+SIUKNffByD8l3nSK/m6aR+jurcARKk3aVLgvDdo4F6H/gMWoAu W7mqXnqQCQ3ovNDEX73q4wjn1/sgSH2Gqn40XCSIx6xHcV1tlqP+eczRIBynpU0T 6KnOjJwa5ibgMjA7/IVgAM8rHcnZcQe5ZUB+SZzOp0Q= -----END CERTIFICATE-----Generated at Tue Aug 4 11:02:49 2026 by rpki-client