$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa File: BFC45160484411F0A8433B42C4F9AE02.roa (raw, json) Hash identifier: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI= Subject key identifier: 03:0A:03:18:43:26:59:BF:25:6F:A8:85:A4:67:09:98:15:7B:A1:48 Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426 Certificate serial: 07EE Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:26:48 +0000 ROA not before: Sun 02 Nov 2025 21:40:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132847 IP address blocks: 103.74.171.0/24 maxlen: 24 103.99.241.0/24 maxlen: 24 103.99.242.0/23 maxlen: 24 120.88.4.0/22 maxlen: 24 163.47.110.0/24 maxlen: 24 203.27.118.0/24 maxlen: 24 2401:c240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426 Validity Not Before: Nov 2 21:40:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43088-4cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:b0:b0:6f:d6:fe:07:e3:4d:2d:12:95:b6: d1:82:2c:c0:fe:ce:fe:11:d3:4e:8c:c9:94:c3:0c: 1f:35:ad:11:b7:81:f6:95:63:e3:cb:7f:1a:a9:e2: 8c:35:22:12:ff:68:68:3b:0a:19:4b:5b:a1:6a:85: d9:42:48:51:84:29:2a:54:74:29:39:a7:6d:23:a8: d4:d7:19:c0:3b:4a:60:f2:36:05:6a:48:18:f3:d6: 0f:10:09:f3:14:64:6b:54:1e:0a:05:d5:9c:82:ed: 97:17:36:08:13:15:26:34:8c:10:4f:87:3c:69:5c: dc:a8:d1:16:c5:b1:24:70:a7:f0:be:65:60:eb:c8: 88:3b:53:e6:f3:f9:51:3e:31:f4:e8:fd:f9:96:19: 21:83:75:5e:98:b4:fd:d4:91:69:08:af:46:af:29: 0f:47:e9:0f:02:8e:72:13:8c:e3:cb:23:69:12:34: 36:63:1a:52:36:bc:cc:75:b0:2c:55:7b:e8:ac:13: 80:15:f8:24:d3:4f:bd:e4:2a:7e:78:da:04:09:7d: de:4a:08:0a:de:9d:56:a0:af:01:e4:78:92:0b:e4: ed:98:cb:8a:c5:b0:88:54:29:9d:29:83:fb:4a:b5: 9a:98:6e:77:b0:36:63:c4:d5:60:41:3c:08:45:b7: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0A:03:18:43:26:59:BF:25:6F:A8:85:A4:67:09:98:15:7B:A1:48 X509v3 Authority Key Identifier: keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/BFC45160484411F0A8433B42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.171.0/24 103.99.241.0-103.99.243.255 120.88.4.0/22 163.47.110.0/24 203.27.118.0/24 IPv6: 2401:c240::/32 Signature Algorithm: sha256WithRSAEncryption 82:42:2b:21:5d:5a:3e:ba:aa:c2:90:ad:a0:a4:32:b9:3f:95: 6f:ae:47:b2:73:0d:43:c5:ad:d8:bb:2e:e6:85:61:25:d0:88: 42:6b:be:7d:5b:d4:60:ab:03:c6:5f:80:52:a1:68:41:ef:ae: ca:9d:65:a7:71:b6:0d:08:79:58:7b:0c:22:48:ed:ff:9c:4a: 22:2a:a0:e0:e7:f0:33:83:e0:f7:a5:39:eb:7d:74:c8:46:67: b9:4f:f6:6d:c1:f6:fc:4a:9a:b4:e8:24:70:da:39:92:d9:de: 38:06:cf:f4:6b:10:6f:7a:d7:08:cc:44:03:03:96:48:29:2c: 0d:b6:6b:78:ec:2e:d0:38:fe:60:88:65:5f:ff:1a:26:73:b0: 9e:fd:4f:b1:3c:60:ae:cf:52:fe:4f:af:ee:bb:53:a8:f2:ca: 82:ac:11:fb:79:f9:dd:84:45:cd:cc:48:23:ff:65:43:03:72: d3:36:a2:82:90:e5:c0:35:d1:9a:e9:ff:e7:23:41:17:5c:a0: b1:7b:76:0f:a1:34:d4:fa:23:c6:0d:64:c7:60:6d:51:19:f4: 15:0e:f7:43:62:ca:68:37:5d:85:e6:39:92:79:76:e9:b6:90: 34:9a:8c:1d:7a:0c:23:63:ba:d9:fa:2d:90:fd:83:59:d7:e1: 1a:f0:c9:c3 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDk4RTg1M0UzODUyODYzNEEyNDdDODY4N0ZBMTI4RTUz NEVDODQ0MjYwHhcNMjUxMTAyMjE0MDUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzA4OC00Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UqwsG/W/gfjTS0SlbbRgizA/s7+EdNOjMmUwwwfNa0Rt4H2lWPjy38aqeKM NSIS/2hoOwoZS1uhaoXZQkhRhCkqVHQpOadtI6jU1xnAO0pg8jYFakgY89YPEAnz FGRrVB4KBdWcgu2XFzYIExUmNIwQT4c8aVzcqNEWxbEkcKfwvmVg68iIO1Pm8/lR PjH06P35lhkhg3VemLT91JFpCK9GrykPR+kPAo5yE4zjyyNpEjQ2YxpSNrzMdbAs VXvorBOAFfgk00+95Cp+eNoECX3eSggK3p1WoK8B5HiSC+TtmMuKxbCIVCmdKYP7 SrWamG53sDZjxNVgQTwIRbdP0wIDAQABo4ICjzCCAoswHQYDVR0OBBYEFAMKAxhD Jlm/JW+ohaRnCZgVe6FIMB8GA1UdIwQYMBaAFJjoU+OFKGNKJHyGh/oSjlNOyEQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83QTEyNjk3RTJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9tT2hUNDRVb1kwb2tmSWFILWhLT1UwN0lS Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PaFQ0NFVvWTBva2ZJYUgtaEtPVTA3SVJDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxOEQvN0ExMjY5N0UyQUUyMTFFQkJCRkM0RjBBQzRGOUFFMDIvQkZDNDUxNjA0 ODQ0MTFGMEE4NDMzQjQyQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQAZ0qrMAwDBABnY/EDBAJnY/ADBAJ4WAQDBACjL24DBADLG3YwDQQC AAIwBwMFACQBwkAwDQYJKoZIhvcNAQELBQADggEBAIJCKyFdWj66qsKQraCkMrk/ lW+uR7JzDUPFrdi7LuaFYSXQiEJrvn1b1GCrA8ZfgFKhaEHvrsqdZadxtg0IeVh7 DCJI7f+cSiIqoODn8DOD4PelOet9dMhGZ7lP9m3B9vxKmrToJHDaOZLZ3jgGz/Rr EG961wjMRAMDlkgpLA22a3jsLtA4/mCIZV//GiZzsJ79T7E8YK7PUv5Pr+67U6jy yoKsEft5+d2ERc3MSCP/ZUMDctM2ooKQ5cA10Zrp/+cjQRdcoLF7dg+hNNT6I8YN ZMdgbVEZ9BUO90Niymg3XYXmOZJ5dum2kDSajB16DCNjutn6LZD9g1nX4RrwycM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:13 2026 by rpki-client