$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa File: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (raw, json) Hash identifier: 6Tme4jvNjSwDigiT0PZHAchdMZssdI5xAg00Z6bLKOQ= Subject key identifier: EF:42:D1:60:50:F7:00:D3:7B:84:51:B9:25:81:AD:AE:62:B9:1D:AB Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 06A3 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:43:40 +0000 ROA not before: Sun 04 Oct 2026 23:43:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 135074 IP address blocks: 103.135.208.0/22 maxlen: 22 103.135.208.0/24 maxlen: 24 103.135.209.0/24 maxlen: 24 103.135.210.0/24 maxlen: 24 103.135.211.0/24 maxlen: 24 103.172.110.0/23 maxlen: 24 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 203.168.128.0/24 maxlen: 24 203.168.129.0/24 maxlen: 24 203.168.130.0/24 maxlen: 24 203.168.131.0/24 maxlen: 24 203.168.192.0/24 maxlen: 24 203.168.193.0/24 maxlen: 24 203.168.194.0/24 maxlen: 24 203.168.195.0/24 maxlen: 24 203.168.196.0/24 maxlen: 24 203.168.197.0/24 maxlen: 24 203.168.198.0/24 maxlen: 24 203.168.199.0/24 maxlen: 24 203.168.200.0/24 maxlen: 24 203.168.201.0/24 maxlen: 24 203.168.202.0/24 maxlen: 24 203.168.203.0/24 maxlen: 24 203.168.204.0/24 maxlen: 24 203.168.205.0/24 maxlen: 24 203.168.206.0/24 maxlen: 24 203.168.207.0/24 maxlen: 24 222.167.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Oct 4 23:43:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4ac-1db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:b1:54:4f:2b:b5:c1:27:a9:7e:45:fe:f9: af:59:de:59:4f:5a:9d:d5:7d:9a:57:63:0f:d0:f9: ca:7b:c4:38:e3:c5:78:d7:0d:cb:34:33:a8:f0:c9: b7:36:68:44:c2:a6:a2:ff:6a:82:27:01:60:01:80: 45:0b:f7:16:d6:70:93:0c:ce:ad:76:47:f3:71:82: 9a:34:2b:5f:c8:69:95:74:b5:e3:23:1a:d5:1f:46: 93:df:05:51:a6:92:07:6b:9c:9f:b5:db:a2:61:83: 7f:ef:88:ab:8e:5c:c5:6c:48:c9:dd:e9:99:b3:f6: 1c:b0:12:44:2b:ac:74:71:b6:dc:0e:d2:2f:57:d5: 41:ee:8d:55:3f:6c:f9:fd:94:9c:37:64:15:f9:09: c9:dc:49:8f:ff:b2:88:65:c9:4b:39:4a:a5:b1:d0: 16:5a:d5:53:61:6a:e0:95:a4:84:5a:d2:98:45:23: 59:da:00:45:a8:c4:36:cf:52:6e:f8:ea:63:28:4a: ff:f6:13:df:3a:f1:19:d6:1d:14:c9:55:8d:0e:84: 3a:00:ca:1f:e3:20:bc:56:86:5b:82:0d:5a:98:a1: f2:f7:2c:7f:80:aa:12:67:84:c2:ab:38:0b:ed:d7: 87:0f:4f:51:62:43:de:b8:b4:00:41:2e:7f:1e:65: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:D1:60:50:F7:00:D3:7B:84:51:B9:25:81:AD:AE:62:B9:1D:AB X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 103.204.13.0/24 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:8c:dd:eb:a9:4e:bd:e0:43:d0:94:8c:79:a8:32:81:ee:f8: 75:fc:6a:6b:3e:d2:19:5d:bd:31:ee:cd:93:42:3d:77:60:4d: 03:78:59:de:ae:cd:4f:1b:82:d3:fe:78:e3:77:fd:6c:fa:f8: 6d:a8:9a:6a:9d:fe:1b:ce:6d:9f:af:5d:c3:61:86:c3:f7:d0: 03:29:3d:03:6f:3b:7a:f1:af:1e:c8:d1:12:91:2b:e2:dd:6f: 1d:7a:00:0c:ef:4a:34:8d:16:96:b6:66:85:7a:2f:95:02:08: bb:65:ad:bd:ff:51:63:c8:21:cb:2d:67:72:43:2f:50:0f:07: 24:b1:b3:40:1f:22:6c:3e:ad:64:68:b9:86:de:b6:8f:94:ec: 2a:e3:0e:e8:f7:d4:af:72:ed:c2:59:e9:c5:56:db:be:1d:7d: be:d0:06:06:dd:9a:44:1c:0d:b5:80:44:a6:33:bc:e9:13:a9: 15:0c:92:70:e4:09:70:d4:22:cc:b8:94:33:4e:05:ed:40:42: c4:ec:50:db:ee:8e:54:c3:9d:72:d9:b4:28:e3:5a:d4:e5:29: 2c:69:8b:61:ad:41:b1:7d:57:a9:71:97:5f:b2:dd:27:ca:6c: c5:21:fa:da:6f:f9:83:23:b8:c9:3d:87:23:0c:96:11:3a:d0: f5:fb:6a:85 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRhYy0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtqxVE8rtcEnqX5F/vmvWd5ZT1qd1X2aV2MP0PnKe8Q448V41w3LNDOo8Mm3 NmhEwqai/2qCJwFgAYBFC/cW1nCTDM6tdkfzcYKaNCtfyGmVdLXjIxrVH0aT3wVR ppIHa5yftduiYYN/74irjlzFbEjJ3emZs/YcsBJEK6x0cbbcDtIvV9VB7o1VP2z5 /ZScN2QV+QnJ3EmP/7KIZclLOUqlsdAWWtVTYWrglaSEWtKYRSNZ2gBFqMQ2z1Ju +OpjKEr/9hPfOvEZ1h0UyVWNDoQ6AMof4yC8VoZbgg1amKHy9yx/gKoSZ4TCqzgL 7deHD09RYkPeuLQAQS5/HmV36QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFO9C0WBQ 9wDTe4RRuSWBra5iuR2rMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQkZGRjZDNEEw N0Q5MTFFREE0MUEwQjI1QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQCZ4fQAwQBZ6xuAwQAZ8wNAwQCy6iAAwQEy6jAAwQC3qcgMA0GCSqG SIb3DQEBCwUAA4IBAQCOjN3rqU694EPQlIx5qDKB7vh1/GprPtIZXb0x7s2TQj13 YE0DeFners1PG4LT/njjd/1s+vhtqJpqnf4bzm2fr13DYYbD99ADKT0Dbzt68a8e yNESkSvi3W8degAM70o0jRaWtmaFei+VAgi7Za29/1FjyCHLLWdyQy9QDwcksbNA HyJsPq1kaLmG3raPlOwq4w7o99Svcu3CWenFVtu+HX2+0AYG3ZpEHA21gESmM7zp E6kVDJJw5Alw1CLMuJQzTgXtQELE7FDb7o5Uw51y2bQo41rU5SksaYthrUGxfVep cZdfst0nymzFIfrab/mDI7jJPYcjDJYROtD1+2qF -----END CERTIFICATE-----Generated at Thu Oct 8 13:54:27 2026 by rpki-client