$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa File: BDFE68F491FD11EB84408D16C4F9AE02.roa (raw, json) Hash identifier: vkTlK6eOyZ+UzMOmKBsnzhAAJwawEYFxIqmok5JrCVk= Subject key identifier: BF:00:C9:16:16:A2:09:57:27:A1:DB:99:9B:C2:BD:47:9F:E1:BA:89 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 074C Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa Signing time: Fri 02 Oct 2026 22:42:51 +0000 ROA not before: Fri 02 Oct 2026 22:42:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 64037 IP address blocks: 103.195.140.0/23 maxlen: 23 103.195.140.0/24 maxlen: 24 103.195.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Oct 2 22:42:51 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ac0336b-cbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:05:6f:c2:4e:63:6a:27:51:00:68:43:bb: 49:29:aa:a6:f4:47:a5:08:d0:69:22:f7:37:b3:76: 92:4c:1c:cb:2d:c0:cc:ad:dc:aa:58:d2:36:7a:d3: 66:5d:5a:aa:0b:4b:6e:87:93:7f:17:96:f3:ab:da: d5:f0:b6:f1:fd:09:ef:b8:85:0f:b1:7d:0b:d3:97: 07:bf:21:ff:37:ec:45:44:2c:34:1a:a2:25:fa:03: d4:31:1f:f6:77:08:e3:8a:6a:9a:b9:1a:4e:e9:cb: 1e:ee:7e:ea:ac:66:cb:c7:51:57:af:c0:6c:73:5c: 9a:b6:78:95:4e:d9:9d:20:24:e7:dc:0a:c8:98:b1: c2:58:28:2d:cc:d7:d5:38:82:ab:44:71:39:eb:c6: b4:29:c6:aa:71:ac:7a:c0:80:fd:71:a3:61:22:1e: eb:b2:b0:a7:25:a3:b9:9f:be:1f:5d:e4:34:ac:ac: 2b:bd:a4:48:43:27:48:74:20:a0:d6:af:d1:5f:0d: 02:c9:31:98:45:cf:60:da:76:53:c8:0f:18:8b:40: 77:51:13:92:8c:20:97:27:49:e1:02:6a:fe:ee:ad: 32:c6:37:a2:9d:8f:25:9a:8d:4a:3f:34:02:fe:83: 9e:0f:ca:fa:ce:2d:22:51:5b:59:6a:ae:54:b9:ad: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:00:C9:16:16:A2:09:57:27:A1:DB:99:9B:C2:BD:47:9F:E1:BA:89 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/BDFE68F491FD11EB84408D16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.195.140.0/23 Signature Algorithm: sha256WithRSAEncryption b2:be:66:31:cb:1b:b7:93:eb:fa:5f:72:b6:10:a4:3f:2a:6a: 95:f1:8f:27:03:20:da:44:da:77:21:cc:7a:aa:e5:1a:67:f7: 39:4f:37:7f:2f:c9:41:61:fd:72:b6:8b:f8:44:2c:47:52:fa: e1:64:77:d8:02:67:01:e0:fd:b6:e6:1f:40:68:97:e8:2c:f6: 88:62:cf:47:39:fd:e1:5f:b8:41:e7:60:6d:84:92:74:31:21: 5e:f8:1d:41:92:a8:e8:b2:f8:4b:2a:37:01:ec:db:78:ea:de: 60:44:c2:e7:f1:3b:82:d6:07:88:a5:93:c5:07:f2:38:81:c1: 10:5f:e9:ba:29:56:70:8a:98:6f:87:3d:c0:d0:2a:78:5b:c5: 7b:e8:4f:72:04:2f:e7:97:4c:47:6d:01:e6:2b:52:b2:e9:e3: 3c:35:b2:89:ec:30:05:75:85:d6:e9:8f:cb:df:7b:66:52:02: c2:3e:f9:56:17:26:66:d2:64:f5:b9:9b:3d:5d:19:04:e9:b9: 5f:d5:de:f6:ab:00:56:53:4d:96:31:a7:5d:87:e7:c4:e4:8a: cb:fa:95:6c:47:5c:c7:51:9b:51:47:43:93:a8:27:bc:fc:a5: 35:a6:81:e7:7e:74:9c:b3:3c:be:c3:3a:74:8d:96:af:0a:bc: b7:65:01:18 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjYxMDAyMjI0MjUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwMzM2Yi1jYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYgFb8JOY2onUQBoQ7tJKaqm9EelCNBpIvc3s3aSTBzLLcDMrdyqWNI2etNm XVqqC0tuh5N/F5bzq9rV8Lbx/QnvuIUPsX0L05cHvyH/N+xFRCw0GqIl+gPUMR/2 dwjjimqauRpO6cse7n7qrGbLx1FXr8Bsc1yatniVTtmdICTn3ArImLHCWCgtzNfV OIKrRHE568a0Kcaqcax6wID9caNhIh7rsrCnJaO5n74fXeQ0rKwrvaRIQydIdCCg 1q/RXw0CyTGYRc9g2nZTyA8Yi0B3UROSjCCXJ0nhAmr+7q0yxjeinY8lmo1KPzQC /oOeD8r6zi0iUVtZaq5Uua10MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL8AyRYW oglXJ6HbmZvCvUef4bqJMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMwNDMvMzk2QzVENDA5MUZDMTFFQkE5OThEQjE0QzRGOUFFMDIvQkRGRTY4RjQ5 MUZEMTFFQjg0NDA4RDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ8OMMA0GCSqGSIb3DQEBCwUAA4IBAQCyvmYxyxu3k+v6X3K2EKQ/ KmqV8Y8nAyDaRNp3Icx6quUaZ/c5Tzd/L8lBYf1ytov4RCxHUvrhZHfYAmcB4P22 5h9AaJfoLPaIYs9HOf3hX7hB52BthJJ0MSFe+B1BkqjosvhLKjcB7Nt46t5gRMLn 8TuC1geIpZPFB/I4gcEQX+m6KVZwiphvhz3A0Cp4W8V76E9yBC/nl0xHbQHmK1Ky 6eM8NbKJ7DAFdYXW6Y/L33tmUgLCPvlWFyZm0mT1uZs9XRkE6blf1d72qwBWU02W Maddh+fE5IrL+pVsR1zHUZtRR0OTqCe8/KU1poHnfnScszy+wzp0jZavCry3ZQEY -----END CERTIFICATE-----Generated at Mon Oct 5 15:00:09 2026 by rpki-client