$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa File: 8158A3A6943211F0843A1075C4F9AE02.roa (raw, json) Hash identifier: 0lN/Ng3NrJ/5kCvRcvb8gFvnW3r3YxhFiq3R/rO55bM= Subject key identifier: B4:79:D7:16:A5:4B:D5:78:63:87:B5:12:A4:EE:DD:25:DA:BE:D2:1D Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 06CC Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa Signing time: Wed 22 Oct 2025 23:42:14 +0000 ROA not before: Wed 22 Oct 2025 23:42:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9304 IP address blocks: 103.99.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Oct 22 23:42:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f96bd5-44ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:7e:7b:a1:20:92:53:f5:21:3a:32:10:ee: 09:3a:9b:7c:bb:36:0c:85:10:75:64:7c:b5:65:c6: b4:5c:02:6d:bd:cb:ce:d1:61:24:8e:44:db:b6:8f: c8:21:1e:a6:00:13:22:b9:b2:42:73:30:ab:ed:f8: e6:5e:93:93:f0:61:21:4c:33:31:5c:d8:23:82:52: 37:ab:2b:97:68:25:12:1b:6b:e3:8f:cc:f4:ee:56: 1f:dc:de:b6:f3:9f:83:91:f6:14:c7:bb:ca:14:1b: 0c:28:23:b7:36:14:60:58:98:c9:2c:b6:02:bb:18: be:69:1e:36:2f:1c:1e:a5:3f:6f:0c:76:cd:60:97: 5b:db:b5:24:48:f8:d6:46:4f:6c:69:9c:e5:6c:d4: a5:8c:69:04:b4:9a:28:33:17:7b:35:a5:a8:76:b0: b4:60:57:3e:09:d6:d0:28:a2:e9:c9:9f:71:32:29: 4e:db:87:5d:9c:b4:46:0e:ca:e2:83:1c:5b:26:91: c7:11:35:9e:72:82:30:87:d0:8f:2e:da:c8:b2:da: d0:df:f5:c7:b2:50:14:6f:c6:33:5f:1b:87:cd:33: 2e:36:04:a5:1d:df:75:bd:c2:ac:58:77:c4:54:7e: 09:12:6c:5f:49:06:57:dd:13:b2:7c:ee:6a:f5:e3: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:D7:16:A5:4B:D5:78:63:87:B5:12:A4:EE:DD:25:DA:BE:D2:1D X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.62.0/24 Signature Algorithm: sha256WithRSAEncryption 38:a1:c9:36:95:ee:d7:ad:fd:af:a0:4c:3f:2e:c5:ea:38:71: 00:2b:82:e9:9c:c7:cd:e6:75:c8:65:8b:f8:68:af:9c:ed:bb: b4:7b:a2:6d:12:18:c8:c1:43:d7:2d:e1:a1:9e:9a:5a:bb:ef: fd:fa:5c:6e:4e:20:1d:53:85:f4:f9:ec:f7:08:ad:13:f1:63: df:56:31:ae:98:b1:4b:19:d5:88:ca:55:d2:0e:07:84:bf:c6: db:e0:e0:1a:d8:05:55:00:c2:51:6e:6c:e9:04:20:eb:7a:63: 43:15:b7:6d:e6:eb:4e:27:7b:aa:54:10:21:23:b1:fb:ce:ad: 4e:cc:43:25:01:6a:f6:85:48:88:7b:89:80:c3:27:36:4e:3d: 6e:18:d9:e8:26:94:b5:fa:eb:09:4e:93:07:a6:fb:50:63:5d: d7:63:f0:90:d1:02:79:bc:d6:b5:5e:39:6f:46:44:c6:5e:9d: e9:0f:99:aa:c1:f8:4b:b8:12:93:dc:f4:cc:45:76:e6:f9:05: 01:61:9e:74:60:fe:cd:2d:82:f4:49:73:73:7a:37:24:d9:60: 9b:68:e5:b5:24:a7:5b:b3:eb:ef:be:0e:99:a3:36:7f:99:60: d4:30:3b:eb:55:e4:2b:ac:30:47:89:0d:76:f1:65:37:a4:bf: 94:b3:5c:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUxMDIyMjM0MjE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NmJkNS00NGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2md+e6EgklP1IToyEO4JOpt8uzYMhRB1ZHy1Zca0XAJtvcvO0WEkjkTbto/I IR6mABMiubJCczCr7fjmXpOT8GEhTDMxXNgjglI3qyuXaCUSG2vjj8z07lYf3N62 85+DkfYUx7vKFBsMKCO3NhRgWJjJLLYCuxi+aR42LxwepT9vDHbNYJdb27UkSPjW Rk9saZzlbNSljGkEtJooMxd7NaWodrC0YFc+CdbQKKLpyZ9xMilO24ddnLRGDsri gxxbJpHHETWecoIwh9CPLtrIstrQ3/XHslAUb8YzXxuHzTMuNgSlHd91vcKsWHfE VH4JEmxfSQZX3ROyfO5q9eMKZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLR51xal S9V4Y4e1EqTu3SXavtIdMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvODE1OEEzQTY5 NDMyMTFGMDg0M0ExMDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYz4wDQYJKoZIhvcNAQELBQADggEBADihyTaV7tet/a+g TD8uxeo4cQArgumcx83mdchli/hor5ztu7R7om0SGMjBQ9ct4aGemlq77/36XG5O IB1ThfT57PcIrRPxY99WMa6YsUsZ1YjKVdIOB4S/xtvg4BrYBVUAwlFubOkEIOt6 Y0MVt23m604ne6pUECEjsfvOrU7MQyUBavaFSIh7iYDDJzZOPW4Y2egmlLX66wlO kwem+1BjXddj8JDRAnm81rVeOW9GRMZenekPmarB+Eu4EpPc9MxFdub5BQFhnnRg /s0tgvRJc3N6NyTZYJto5bUkp1uz6+++DpmjNn+ZYNQwO+tV5CusMEeJDXbxZTek v5SzXKE= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:50 2025 by rpki-client