$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa File: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (raw, json) Hash identifier: aWsfFKP86VYlsTA+7SgYR0hCFFT3XYQ13KPA9r+aJS8= Subject key identifier: 91:EC:B9:47:48:DB:B6:D7:BE:F6:C5:E7:69:3F:F0:86:9A:BB:9B:BA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2947 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa Signing time: Sat 10 Jan 2026 16:12:43 +0000 ROA not before: Sat 10 Jan 2026 16:12:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141718 IP address blocks: 43.250.124.0/24 maxlen: 24 43.250.125.0/24 maxlen: 24 43.250.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 15:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10567 (0x2947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jan 10 16:12:43 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69627a7b-9da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:61:c3:79:d4:55:f7:d4:cf:a4:73:bb:98: eb:2e:d2:f3:cf:e4:36:25:fb:c0:61:f4:c7:a6:46: 7a:d8:26:30:14:48:2e:34:c2:cc:23:1c:04:2e:56: 86:eb:0c:6e:26:b6:5d:c6:95:ff:7b:1c:41:2c:61: 97:1b:f0:b5:0a:9a:1a:01:36:45:a1:6f:ce:d5:74: 8e:21:a8:46:ec:5d:1a:50:a1:01:b7:fb:1d:70:07: 26:e1:df:62:15:53:e1:59:c3:5b:0f:12:84:aa:e6: b6:92:26:67:6a:dd:de:dd:06:96:6e:4b:e2:a2:46: fc:aa:bf:d4:82:41:98:b5:9e:f5:26:55:c9:0b:1d: c9:5a:b8:9d:24:64:34:b6:e8:74:83:d1:ed:d3:12: 78:3d:8a:6f:43:fd:f9:f3:6d:db:bc:f7:83:4c:a3: 43:5a:8b:83:32:50:4a:90:ec:14:92:09:3b:40:80: 1e:a4:97:d7:8b:5c:58:87:d8:5a:d6:38:0f:ed:e5: 1a:5f:6d:1b:fb:17:a2:7a:8c:80:1b:9b:9a:d9:04: 69:a2:37:e4:99:e0:17:fd:d6:12:2f:81:ef:95:ef: 0d:7d:5c:12:bf:2b:7e:3b:94:ee:c6:83:52:32:99: 71:33:d8:80:05:65:45:88:f8:00:e6:f9:e3:3c:66: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:B9:47:48:DB:B6:D7:BE:F6:C5:E7:69:3F:F0:86:9A:BB:9B:BA X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.124.0/23 43.250.127.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ac:73:c9:3c:bc:c1:fa:13:5e:8c:66:10:56:65:66:79:3c: a4:89:79:66:68:46:7e:83:14:e0:25:8f:e2:57:88:90:0a:2d: 3a:b9:47:f1:eb:bd:14:39:ea:cb:d3:23:06:d8:cb:04:a0:a9: 9e:2f:59:0f:c7:9a:2d:8c:81:e2:da:87:8c:c5:86:e0:1c:3b: 5d:94:ed:55:cf:41:4b:7c:8d:c9:b4:c2:b3:c8:90:a2:ec:6e: c2:63:c6:b5:b1:6d:0c:79:ee:92:7a:2c:58:6c:d2:e2:1d:c3: 78:72:fe:9b:0f:66:ad:2e:af:18:10:75:92:ca:b3:96:23:a0: 1f:2a:99:30:18:8d:1f:82:88:1b:d3:9b:47:45:73:df:e4:8f: c9:25:0f:44:b0:fb:55:3e:e2:9e:d1:56:7b:32:28:41:af:cb: 0a:f7:4b:63:24:c8:f3:3c:3b:80:f4:55:75:a8:d0:f1:f9:a0: fc:1d:d7:79:c3:ab:37:d8:af:d9:7d:da:72:96:79:2d:69:12: 7d:92:a6:9a:5d:9a:15:f2:0d:0d:ae:a3:62:8c:c5:09:76:9c: 8d:7f:1f:e2:00:2a:3c:e9:4a:2a:9d:98:b0:5f:8d:d4:75:0c: d0:37:4e:79:54:3d:1b:c0:a3:16:42:de:c7:05:21:c0:12:ee: b1:77:2a:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjYwMTEwMTYxMjQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYyN2E3Yi05ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy1hw3nUVffUz6Rzu5jrLtLzz+Q2JfvAYfTHpkZ62CYwFEguNMLMIxwELlaG 6wxuJrZdxpX/exxBLGGXG/C1CpoaATZFoW/O1XSOIahG7F0aUKEBt/sdcAcm4d9i FVPhWcNbDxKEqua2kiZnat3e3QaWbkviokb8qr/UgkGYtZ71JlXJCx3JWridJGQ0 tuh0g9Ht0xJ4PYpvQ/35823bvPeDTKNDWouDMlBKkOwUkgk7QIAepJfXi1xYh9ha 1jgP7eUaX20b+xeieoyAG5ua2QRpojfkmeAX/dYSL4Hvle8NfVwSvyt+O5TuxoNS MplxM9iABWVFiPgA5vnjPGbbEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJHsuUdI 27bXvvbF52k/8Iaau5u6MB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvQkY5QzY1NUU3 QTQ3MTFFRjlDN0EwRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+nwDBAAr+n8wDQYJKoZIhvcNAQELBQADggEBAECsc8k8 vMH6E16MZhBWZWZ5PKSJeWZoRn6DFOAlj+JXiJAKLTq5R/HrvRQ56svTIwbYywSg qZ4vWQ/Hmi2MgeLah4zFhuAcO12U7VXPQUt8jcm0wrPIkKLsbsJjxrWxbQx57pJ6 LFhs0uIdw3hy/psPZq0urxgQdZLKs5YjoB8qmTAYjR+CiBvTm0dFc9/kj8klD0Sw +1U+4p7RVnsyKEGvywr3S2MkyPM8O4D0VXWo0PH5oPwd13nDqzfYr9l92nKWeS1p En2SpppdmhXyDQ2uo2KMxQl2nI1/H+IAKjzpSiqdmLBfjdR1DNA3TnlUPRvAoxZC 3scFIcAS7rF3Kng= -----END CERTIFICATE-----Generated at Thu Feb 19 21:31:42 2026 by rpki-client