$ rpki-client -vvvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa File: BFA10A96FA8911EB8122C53FC4F9AE02.roa (raw, json) Hash identifier: Ba+7z84IeX93q9vbIwQtIGc3mekt1UL5FN0TgoRp8Ts= Subject key identifier: 88:83:EA:5F:9D:58:A4:B9:E5:F8:3B:36:ED:53:B6:1D:69:AC:3D:63 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 062F Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa Signing time: Tue 22 Sep 2026 22:44:23 +0000 ROA not before: Tue 22 Sep 2026 22:44:23 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 142627 IP address blocks: 103.171.68.0/23 maxlen: 23 103.171.68.0/24 maxlen: 24 103.171.69.0/24 maxlen: 24 2001:df7:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Sep 22 22:44:23 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab304c7-bdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ef:c0:a1:a1:34:48:9d:95:00:b9:b1:7d:45: 65:59:bb:41:87:82:56:ab:97:9e:1e:c2:a9:9f:f8: fc:b1:17:ca:20:9b:26:ef:a0:8a:a5:e8:5e:ae:0b: a0:11:42:7b:08:cc:d4:be:fe:44:69:15:45:64:ec: 45:77:e8:b6:c6:91:67:6c:1c:2b:de:2a:a4:ea:19: d2:93:c0:79:2d:f0:ee:cd:71:2a:c8:b7:18:07:60: c2:fc:d9:51:e0:85:82:59:1d:84:fc:4a:a3:b7:95: fa:2a:2e:77:43:5a:e7:f4:21:fa:c3:7b:ff:aa:3e: 8e:c8:dc:5f:f4:4e:30:6b:4f:98:05:bc:7b:a0:24: 1c:dc:6b:61:0b:c7:97:39:db:33:cf:ac:fd:8b:0b: 4f:59:ff:a6:07:b2:e0:aa:72:8f:f9:96:31:01:81: 2b:69:c8:c1:80:cb:4a:d1:af:69:9f:a2:48:fa:b3: 09:b0:4b:b4:7b:51:44:10:87:04:02:ad:77:f7:90: d7:d5:4d:6a:1d:7e:4c:28:e5:c7:d3:cf:86:f7:41: ea:52:95:7c:2e:37:fa:f0:96:43:19:73:f0:80:0c: 4b:de:f7:c2:f1:f7:4f:ae:df:03:68:12:da:08:d8: db:12:2a:33:3a:30:e9:b3:4f:fa:f7:e2:e5:74:d0: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:EA:5F:9D:58:A4:B9:E5:F8:3B:36:ED:53:B6:1D:69:AC:3D:63 X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/BFA10A96FA8911EB8122C53FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.68.0/23 IPv6: 2001:df7:3b80::/48 Signature Algorithm: sha256WithRSAEncryption 30:e5:85:04:94:5e:37:51:a8:1b:6e:95:dc:58:fa:97:80:e8: ed:fc:eb:36:fa:21:4b:12:0b:81:f4:a5:f7:14:83:6d:ae:56: a8:b2:a7:8e:b5:7d:b7:e6:d6:04:8e:34:3d:b5:c9:44:49:c0: fa:b8:f2:db:ee:2d:3a:e4:2b:8e:9a:28:fc:7d:e6:25:41:61: 0a:b4:f8:4f:c4:32:b9:80:10:83:52:d1:d1:7e:21:fd:6d:d6: 81:31:3f:61:5e:c9:a9:a5:76:b1:4f:67:eb:48:76:f8:57:5e: 0e:b3:08:3e:79:eb:e5:5a:99:8b:b2:46:26:30:83:f8:2c:7e: b8:16:bc:ff:4f:c0:5a:1a:f3:0e:97:8a:32:a0:88:1f:68:62: 2e:14:9f:d9:18:9b:a8:7a:f3:d0:53:d9:82:81:51:3e:e9:bf: 61:c2:a3:c3:2b:dc:5f:86:e5:96:0d:1a:52:12:ee:e2:e1:97: 06:e6:f5:6e:49:ec:7a:f2:3d:ee:20:ad:27:a4:0e:1b:00:47: 02:cc:ea:66:e7:09:2a:df:eb:7f:47:f4:b4:71:4e:85:c6:ce: 5b:26:76:5a:49:bc:9d:fe:1a:c5:71:29:9b:a1:b6:48:f4:52: 8d:79:60:e4:f5:97:08:4d:da:60:0b:e7:2c:a4:2a:84:7a:10: 66:ff:f2:73 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjYwOTIyMjI0NDIzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzMDRjNy1iZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+/AoaE0SJ2VALmxfUVlWbtBh4JWq5eeHsKpn/j8sRfKIJsm76CKpehergug EUJ7CMzUvv5EaRVFZOxFd+i2xpFnbBwr3iqk6hnSk8B5LfDuzXEqyLcYB2DC/NlR 4IWCWR2E/Eqjt5X6Ki53Q1rn9CH6w3v/qj6OyNxf9E4wa0+YBbx7oCQc3GthC8eX Odszz6z9iwtPWf+mB7LgqnKP+ZYxAYEracjBgMtK0a9pn6JI+rMJsEu0e1FEEIcE Aq1395DX1U1qHX5MKOXH08+G90HqUpV8Ljf68JZDGXPwgAxL3vfC8fdPrt8DaBLa CNjbEiozOjDps0/69+LldNAP9wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIiD6l+d WKS55fg7Nu1Tth1prD1jMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIyRkEvRTgwREFBMkVGQTg1MTFFQkI2NjgyRjM3QzRGOUFFMDIvQkZBMTBBOTZG QTg5MTFFQjgxMjJDNTNGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6tEMA8EAgACMAkDBwAgAQ33O4AwDQYJKoZIhvcNAQELBQADggEB ADDlhQSUXjdRqBtuldxY+peA6O386zb6IUsSC4H0pfcUg22uVqiyp461fbfm1gSO ND21yURJwPq48tvuLTrkK46aKPx95iVBYQq0+E/EMrmAEINS0dF+If1t1oExP2Fe yamldrFPZ+tIdvhXXg6zCD556+VamYuyRiYwg/gsfrgWvP9PwFoa8w6XijKgiB9o Yi4Un9kYm6h689BT2YKBUT7pv2HCo8Mr3F+G5ZYNGlIS7uLhlwbm9W5J7HryPe4g rSekDhsARwLM6mbnCSrf639H9LRxToXGzlsmdlpJvJ3+GsVxKZuhtkj0Uo15YOT1 lwhN2mAL5yykKoR6EGb/8nM= -----END CERTIFICATE-----Generated at Sat Sep 26 19:50:16 2026 by rpki-client