$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/BFA88D804D1C11F188E4BE42BA833773.roa File: BFA88D804D1C11F188E4BE42BA833773.roa (raw, json) Hash identifier: R88/vcaayljQgKDPdfz5hDSkfLrBfXaz7VzoaAwM+rk= Subject key identifier: C1:FC:CF:AD:E9:8F:A4:B4:A1:A4:49:A8:6A:CB:E7:C7:86:47:B2:99 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 35E9 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/BFA88D804D1C11F188E4BE42BA833773.roa Signing time: Fri 26 Jun 2026 10:09:28 +0000 ROA not before: Fri 26 Jun 2026 10:09:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45489 IP address blocks: 103.87.124.0/23 maxlen: 24 203.96.163.0/24 maxlen: 24 2001:df4:1b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13801 (0x35e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Jun 26 10:09:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a3e4fd7-79a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:cd:63:f1:f6:0c:54:24:a9:d8:45:2d:d6: 45:e0:a0:12:1b:d6:ec:70:25:cf:67:85:1a:a2:c1: 35:06:7e:98:f2:a2:46:d9:a1:67:d8:90:c4:ee:6f: cd:29:09:e5:b2:8e:f3:16:ba:5d:d2:e1:92:6f:27: 5b:d2:65:8b:97:9b:2e:eb:1e:fd:00:b6:e1:b7:1c: 58:7b:f7:72:41:ce:46:f9:bc:0b:1c:83:9c:57:84: df:ad:e0:81:04:77:8e:3a:c8:12:28:08:06:be:74: 61:f6:15:29:92:b6:28:10:17:d9:43:28:4a:b9:98: 0b:6b:58:79:3b:db:06:04:61:38:d4:7a:83:45:0f: 9c:a7:1a:dc:ee:91:c0:24:c3:46:6b:18:bb:6f:b4: be:ed:03:55:4d:29:4b:59:05:56:c0:45:76:de:4b: 29:e1:b4:d3:80:1e:6b:05:e7:5c:4b:5c:7b:11:c0: 76:14:21:57:d3:1a:90:03:ab:8b:49:b2:03:7f:2d: 66:69:5e:3e:39:34:59:86:be:84:cd:89:f1:fe:11: ec:02:9a:4e:12:81:5c:4f:b0:44:7f:f2:c3:fd:b7: 9d:e0:2c:e3:b9:12:55:87:48:12:80:b1:eb:52:37: f0:1c:14:fd:cf:9a:5a:d7:67:00:bc:73:e3:a0:b5: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FC:CF:AD:E9:8F:A4:B4:A1:A4:49:A8:6A:CB:E7:C7:86:47:B2:99 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/BFA88D804D1C11F188E4BE42BA833773.roa sbgp-ipAddrBlock: critical IPv4: 103.87.124.0/23 203.96.163.0/24 IPv6: 2001:df4:1b00::/48 Signature Algorithm: sha256WithRSAEncryption 86:6c:ec:64:3b:dc:83:52:d2:e3:4a:1e:d6:fa:d1:19:ee:64: b1:01:d7:b8:3c:ee:5f:f6:8b:6f:3e:4f:d4:9b:61:ea:c3:d2: 92:f2:56:e8:c9:64:87:41:25:50:89:bd:5c:4d:32:f5:1b:e2: 53:07:82:af:78:c9:13:a3:b2:9e:1e:d8:dc:65:eb:d1:fd:b6: cf:db:e2:8d:f9:3f:04:d5:33:71:d8:0e:2b:ce:cd:30:1c:1f: 23:dd:c2:de:bf:f7:79:ff:5f:a0:45:3c:93:25:67:ed:bf:d2: cc:27:b8:ca:1d:bf:3d:42:12:41:6e:69:aa:68:6f:18:a5:87: ec:79:62:37:45:67:23:1a:a3:61:9b:3a:fa:e9:a2:eb:9d:7f: 3f:c3:38:8a:a1:45:40:1a:30:07:27:00:4c:89:22:fe:53:38: 79:1f:65:2d:ef:74:2b:ee:4b:7a:68:78:b9:a2:20:ca:0c:66: b5:81:f7:2e:a6:6b:04:ba:78:d2:c3:8a:ba:b3:8d:17:f5:6e: 81:18:74:6a:bb:6e:57:b2:a4:54:d8:01:72:11:32:26:00:d6: da:83:c9:21:3a:87:b1:33:51:f5:f2:c0:9a:0b:f9:e6:38:77: e1:dd:fb:28:fe:98:74:d7:b9:d7:33:68:d9:c4:ce:56:02:2a: 44:df:7e:83 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICNekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjYwNjI2MTAwOTI4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNlNGZkNy03OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd/NY/H2DFQkqdhFLdZF4KASG9bscCXPZ4UaosE1Bn6Y8qJG2aFn2JDE7m/N KQnlso7zFrpd0uGSbydb0mWLl5su6x79ALbhtxxYe/dyQc5G+bwLHIOcV4TfreCB BHeOOsgSKAgGvnRh9hUpkrYoEBfZQyhKuZgLa1h5O9sGBGE41HqDRQ+cpxrc7pHA JMNGaxi7b7S+7QNVTSlLWQVWwEV23ksp4bTTgB5rBedcS1x7EcB2FCFX0xqQA6uL SbIDfy1maV4+OTRZhr6EzYnx/hHsAppOEoFcT7BEf/LD/bed4CzjuRJVh0gSgLHr UjfwHBT9z5pa12cAvHPjoLXpMwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMH8z63p j6S0oaRJqGrL58eGR7KZMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNjMvRkY4QjRCNkMxRDg0MTFFMjhDRDMzRERCMDhCMDJDRDIvQkZBODhEODA0 RDFDMTFGMTg4RTRCRTQyQkE4MzM3NzMucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ1d8AwQAy2CjMA8EAgACMAkDBwAgAQ30GwAwDQYJKoZIhvcNAQEL BQADggEBAIZs7GQ73INS0uNKHtb60RnuZLEB17g87l/2i28+T9SbYerD0pLyVujJ ZIdBJVCJvVxNMvUb4lMHgq94yROjsp4e2Nxl69H9ts/b4o35PwTVM3HYDivOzTAc HyPdwt6/93n/X6BFPJMlZ+2/0swnuModvz1CEkFuaapobxilh+x5YjdFZyMao2Gb Ovrpouudfz/DOIqhRUAaMAcnAEyJIv5TOHkfZS3vdCvuS3poeLmiIMoMZrWB9y6m awS6eNLDirqzjRf1boEYdGq7bleypFTYAXIRMiYA1tqDySE6h7EzUfXywJoL+eY4 d+Hd+yj+mHTXudczaNnEzlYCKkTffoM= -----END CERTIFICATE-----Generated at Tue Jul 21 23:28:54 2026 by rpki-client