$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa File: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (raw, json) Hash identifier: vZQX4t8MAHwhEYks15AvCgJPCCzogD0p8+MoFespB6s= Subject key identifier: D6:87:EA:32:01:BE:E9:3A:2E:C8:0B:56:EB:40:CF:F0:BE:28:6D:C0 Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 039C Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:59:15 +0000 ROA not before: Fri 11 Jul 2025 02:07:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149833 IP address blocks: 103.187.140.0/23 maxlen: 23 103.187.140.0/24 maxlen: 24 103.187.141.0/24 maxlen: 24 2400:7da0::/32 maxlen: 32 2400:7da0:1000::/36 maxlen: 36 2400:7da0:2000::/36 maxlen: 36 2400:7da0:3000::/36 maxlen: 36 2400:7da0:4000::/36 maxlen: 36 2400:7da0:5000::/36 maxlen: 36 2400:7da0:6000::/36 maxlen: 36 2400:7da0:7000::/36 maxlen: 36 2400:7da0:8000::/36 maxlen: 36 2400:7da0:9000::/36 maxlen: 36 2400:7da0:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Jul 11 02:07:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ffe3-9f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:92:3c:19:9a:d4:b4:00:f4:7d:e8:32:5e: ef:07:1d:0c:89:18:f6:1a:38:11:0b:4d:4e:3b:68: 9a:28:f2:22:63:ca:97:54:02:af:a7:4c:aa:5a:d9: 96:5e:df:02:d8:b6:75:e1:87:f1:86:77:48:94:34: 5b:9d:e3:28:86:ba:61:98:47:ca:39:e2:ab:d3:f0: 3b:41:a2:52:8d:1c:d3:9f:c1:bb:59:84:97:76:08: 9e:31:c6:4d:b7:a4:65:1b:e0:11:0e:4a:ec:ff:33: b8:0c:f4:ba:4b:7d:a1:58:41:be:22:aa:e6:38:c8: 67:ea:14:32:e5:d4:aa:74:52:ae:31:e8:d9:61:d2: 5f:e9:7e:bd:74:28:b1:f7:d4:0c:26:97:e8:3c:14: 52:0c:1d:43:4d:74:13:9d:a4:82:ce:c1:6b:c0:88: be:ec:b6:5a:49:e4:76:16:6f:73:f1:a1:d8:5e:93: b7:af:df:9b:37:23:12:50:82:12:36:a9:d1:f0:f3: 4a:56:62:ac:5a:35:ab:8c:89:ca:f6:ec:57:6b:1d: 49:83:8b:53:f8:36:96:57:6f:e1:d6:8d:b6:dd:5a: 3e:31:46:89:25:80:b6:72:ec:d1:3d:ab:f3:e2:d6: 23:8b:18:cd:df:ce:d4:0e:7e:60:76:ac:db:0c:b6: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:87:EA:32:01:BE:E9:3A:2E:C8:0B:56:EB:40:CF:F0:BE:28:6D:C0 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.187.140.0/23 IPv6: 2400:7da0::/32 Signature Algorithm: sha256WithRSAEncryption 95:63:f8:48:8e:01:4a:27:d9:e7:8a:b6:a7:b2:31:eb:4c:87: 2d:ae:ff:06:92:7d:ab:4a:d3:11:f5:ae:6e:0e:77:5c:d7:bf: fe:20:ae:0a:37:6f:66:4d:d2:da:63:a8:ab:f4:c1:31:23:1d: 2a:2a:ab:24:df:c0:0d:a3:54:e3:d1:10:5c:60:ab:4d:e1:6d: 03:83:72:a4:39:b9:81:de:58:d6:eb:a9:50:8f:f6:5a:da:d5: f6:8f:1e:e8:84:61:45:4b:2d:8d:19:3a:bd:22:5d:9a:28:20: 2d:e6:d8:67:e5:be:d4:93:e0:0d:a5:cc:37:42:22:6e:20:21: 93:f8:ef:b6:f9:0d:fe:44:94:78:32:69:92:47:d9:7a:7f:de: 16:26:51:1c:e5:ac:3c:9b:d2:6c:8c:f8:44:c2:31:8a:b8:e5: dd:70:54:60:ae:57:a2:2a:20:ba:53:2f:33:87:54:ec:8b:e1: 72:15:63:ad:12:fc:a5:a3:49:1f:68:93:79:68:6c:dd:e7:60: 4f:c0:c7:ab:3f:34:d5:c0:6c:49:ed:c4:30:17:9e:d4:d7:35: ec:de:fb:c2:c0:88:99:47:11:7c:cf:0a:b3:51:8d:16:29:33: 4f:b5:7f:79:ab:4f:d7:1e:f8:c2:fc:e0:46:ca:43:0a:8e:dd: b4:fd:0c:d6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwNzExMDIwNzE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmZlMy05ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GuSPBma1LQA9H3oMl7vBx0MiRj2GjgRC01OO2iaKPIiY8qXVAKvp0yqWtmW Xt8C2LZ14YfxhndIlDRbneMohrphmEfKOeKr0/A7QaJSjRzTn8G7WYSXdgieMcZN t6RlG+ARDkrs/zO4DPS6S32hWEG+IqrmOMhn6hQy5dSqdFKuMejZYdJf6X69dCix 99QMJpfoPBRSDB1DTXQTnaSCzsFrwIi+7LZaSeR2Fm9z8aHYXpO3r9+bNyMSUIIS NqnR8PNKVmKsWjWrjInK9uxXax1Jg4tT+DaWV2/h1o223Vo+MUaJJYC2cuzRPavz 4tYjixjN387UDn5gdqzbDLbqCwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNaH6jIB vuk6LsgLVutAz/C+KG3AMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI3QjgvNERFMTZDRTREODE4MTFFQ0I2NDkzRDVBQzRGOUFFMDIvQkQ4QUFFQkFE NkJFMTFFRUFBRkY1MDQ5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7uMMA0EAgACMAcDBQAkAH2gMA0GCSqGSIb3DQEBCwUAA4IBAQCV Y/hIjgFKJ9nniransjHrTIctrv8Gkn2rStMR9a5uDndc17/+IK4KN29mTdLaY6ir 9MExIx0qKqsk38ANo1Tj0RBcYKtN4W0Dg3KkObmB3ljW66lQj/Za2tX2jx7ohGFF Sy2NGTq9Il2aKCAt5thn5b7Uk+ANpcw3QiJuICGT+O+2+Q3+RJR4MmmSR9l6f94W JlEc5aw8m9JsjPhEwjGKuOXdcFRgrleiKiC6Uy8zh1Tsi+FyFWOtEvylo0kfaJN5 aGzd52BPwMerPzTVwGxJ7cQwF57U1zXs3vvCwIiZRxF8zwqzUY0WKTNPtX95q0/X HvjC/OBGykMKjt20/QzW -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:11 2026 by rpki-client