$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa File: 8EFF79AA9C9B11F09188945AC4F9AE02.roa (raw, json) Hash identifier: fnm7phdStBiZZe8S3ONbW+s65PXZ5afRG1iSAW7otLA= Subject key identifier: 3E:EE:70:2E:4C:46:E5:51:CF:21:5B:13:54:7A:72:E2:C0:E8:F7:98 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 06B9 Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa Signing time: Sun 28 Sep 2025 18:47:18 +0000 ROA not before: Sun 28 Sep 2025 18:47:18 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 401984 IP address blocks: 103.99.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Sep 28 18:47:18 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68d982b6-3129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:cb:4f:41:21:ab:96:ad:f1:06:fe:89:8a: 25:0a:c2:56:8b:f3:60:01:0a:d4:dc:7a:2d:e2:57: 8c:c1:e9:cf:bb:64:5e:62:38:e6:8b:49:9a:49:06: 70:c3:73:04:e3:54:23:7c:fc:91:2d:b8:b1:4b:c5: 7e:69:9f:da:92:ec:89:ac:53:63:7b:78:26:34:b9: d6:da:45:af:71:40:ff:b2:6b:fc:2a:94:26:81:2c: 1a:ae:ae:f5:cb:93:0e:1e:42:9d:3b:c7:a6:23:c6: ee:b7:b0:dd:40:aa:0a:e5:34:26:a0:ea:31:51:c2: a6:41:b1:16:c0:db:5f:02:00:bb:af:15:5d:57:75: d8:02:8f:6d:69:0a:9b:1b:89:07:4f:6b:70:e3:8d: 52:79:ca:a9:a2:8e:74:3e:76:a4:43:b6:b8:d7:a5: cd:14:39:e9:99:4a:23:91:6d:02:4f:6a:52:64:ea: 0e:5c:3f:54:cb:fc:68:2a:1d:4c:63:e2:21:f3:f2: 45:d4:5c:32:a2:22:00:86:87:f9:88:92:3d:71:af: b3:e1:97:bb:e8:af:2f:53:d9:d4:0d:e4:ea:d9:2c: c3:0b:e7:fd:ff:20:0f:4b:c0:5c:e7:4a:d3:4e:72: 71:0c:a5:0c:55:cc:61:3f:04:96:4f:82:dd:67:9c: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:70:2E:4C:46:E5:51:CF:21:5B:13:54:7A:72:E2:C0:E8:F7:98 X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.60.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:0b:70:36:a9:21:6b:cb:87:ce:bf:d6:34:4d:8c:79:00:58: 56:ae:d4:7e:ef:f1:bd:0e:fe:05:30:33:92:7f:0f:ee:3a:88: d5:4d:9d:ec:34:bc:1d:c0:5b:45:73:90:f3:e3:24:c3:c6:61: ca:bc:1e:8e:29:8b:c1:7b:b0:b8:08:e8:74:2d:72:6a:a2:43: 91:2c:b6:7e:d7:99:aa:7a:f1:d3:73:7c:e2:5c:22:ee:2a:15: 2e:09:ba:74:16:71:fa:ca:29:d6:52:fc:f6:0b:1c:dc:07:6f: 55:ff:77:64:f4:7f:a3:f1:4a:20:8b:0f:93:59:5c:a4:32:5a: 61:76:99:ad:65:bf:5c:7d:9c:d3:05:3e:fb:e5:01:da:d1:6a: 8d:6b:53:95:73:04:c4:8d:e5:ed:49:00:cd:6b:ba:7a:b8:c7: 6f:1a:04:0c:fa:00:dc:c5:34:86:9b:88:03:c4:0d:51:49:e1: bf:c7:22:60:69:71:9b:29:09:cd:9c:63:26:d9:f8:9e:94:b5: ad:ff:6e:c9:50:74:16:89:a9:23:45:87:f3:e1:b9:a1:7a:cb: b4:0a:ce:23:b3:1a:98:04:75:55:06:5e:07:10:9d:87:ca:98: 39:d9:2f:d4:42:53:7a:2b:fb:e7:80:94:06:e1:43:75:8e:3a: 8e:d5:e6:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUwOTI4MTg0NzE4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5ODJiNi0zMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY/LT0Ehq5at8Qb+iYolCsJWi/NgAQrU3Hot4leMwenPu2ReYjjmi0maSQZw w3ME41QjfPyRLbixS8V+aZ/akuyJrFNje3gmNLnW2kWvcUD/smv8KpQmgSwarq71 y5MOHkKdO8emI8but7DdQKoK5TQmoOoxUcKmQbEWwNtfAgC7rxVdV3XYAo9taQqb G4kHT2tw441Secqpoo50PnakQ7a416XNFDnpmUojkW0CT2pSZOoOXD9Uy/xoKh1M Y+Ih8/JF1FwyoiIAhof5iJI9ca+z4Ze76K8vU9nUDeTq2SzDC+f9/yAPS8Bc50rT TnJxDKUMVcxhPwSWT4LdZ5zCFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD7ucC5M RuVRzyFbE1R6cuLA6PeYMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvOEVGRjc5QUE5 QzlCMTFGMDkxODg5NDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnYzwwDQYJKoZIhvcNAQELBQADggEBAD0LcDapIWvLh86/ 1jRNjHkAWFau1H7v8b0O/gUwM5J/D+46iNVNnew0vB3AW0VzkPPjJMPGYcq8Ho4p i8F7sLgI6HQtcmqiQ5Estn7Xmap68dNzfOJcIu4qFS4JunQWcfrKKdZS/PYLHNwH b1X/d2T0f6PxSiCLD5NZXKQyWmF2ma1lv1x9nNMFPvvlAdrRao1rU5VzBMSN5e1J AM1runq4x28aBAz6ANzFNIabiAPEDVFJ4b/HImBpcZspCc2cYybZ+J6Uta3/bslQ dBaJqSNFh/PhuaF6y7QKziOzGpgEdVUGXgcQnYfKmDnZL9RCU3or++eAlAbhQ3WO Oo7V5hE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:39 2025 by rpki-client