$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa File: 8158A3A6943211F0843A1075C4F9AE02.roa (raw, json) Hash identifier: aJKX9bflIZ/GB6hCa4dj7Tw5KiF9/0GhzGAFQ3kUJ0s= Subject key identifier: 6B:8B:08:15:F8:80:A0:5B:8B:F9:E8:FA:CB:6F:8A:9E:95:AF:74:A1 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 06B2 Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa Signing time: Thu 18 Sep 2025 01:55:09 +0000 ROA not before: Thu 18 Sep 2025 01:55:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9304 IP address blocks: 103.99.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 01:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Sep 18 01:55:09 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68cb667d-1544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:06:e7:db:e5:25:31:e9:ef:ce:69:0c:41: c5:24:71:38:5a:aa:0b:31:a4:a0:3a:9a:f3:50:33: 33:3a:f2:db:92:33:13:cd:dd:8b:2e:3b:98:ee:c0: 3c:32:82:a4:7e:5b:bf:55:69:67:78:5a:f2:f7:ce: 10:43:e8:98:ae:af:14:01:4d:d0:66:af:ef:63:7e: c7:fe:4a:f3:9e:47:f5:49:fe:a0:74:d0:f9:e6:26: b9:81:1a:eb:a8:2c:12:ea:b7:20:a4:ae:e3:8f:d2: ca:be:3b:76:01:42:95:4c:6c:fe:e4:5d:ac:98:ef: 9b:8b:8d:3d:b5:a5:9a:89:d3:81:19:76:d7:d9:ef: a2:6b:33:49:14:31:1f:95:da:47:b8:8f:6a:da:3c: c1:1a:c3:43:f5:25:73:aa:42:1a:54:51:d0:8f:db: 3f:38:ff:68:c0:be:dd:db:32:a8:e2:50:2c:f2:43: 9c:2e:fc:3a:14:2d:d9:f3:87:f8:d4:98:31:f8:8b: 16:20:fc:8b:4c:d6:b8:fb:0f:51:10:3f:3c:0d:93: b9:f5:83:6f:3a:e1:6c:ae:a3:91:24:c4:ed:eb:2a: e9:77:d3:b9:c4:25:82:ac:0f:03:cb:33:d4:ad:43: e2:0d:5a:40:c9:fb:bb:d1:2c:b3:9f:63:0e:46:e2: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8B:08:15:F8:80:A0:5B:8B:F9:E8:FA:CB:6F:8A:9E:95:AF:74:A1 X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8158A3A6943211F0843A1075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.62.0/24 Signature Algorithm: sha256WithRSAEncryption 70:50:f3:6a:6b:1e:c2:06:81:d9:fa:bd:aa:d3:71:b2:c6:23: 6a:33:b0:37:0f:60:87:05:f0:88:92:c3:0c:84:34:b5:37:f4: 34:29:30:97:df:c7:63:f0:68:81:e0:5d:8e:9e:b2:02:68:11: 22:b1:3e:3f:3e:c8:cd:8d:b6:1c:05:2e:b8:82:8b:c8:71:e5: ca:f1:d7:86:69:7d:e4:65:42:bb:b6:5a:c1:31:95:3b:a6:aa: 73:0e:25:4a:40:75:ab:11:40:08:6a:f8:11:5a:4b:3f:37:44: 06:0c:9a:0e:1b:3a:8d:11:be:96:05:f1:82:cd:72:77:cb:72: a2:a3:c3:96:6f:7f:39:6a:d7:ee:ad:10:78:35:37:2e:de:1b: 3f:53:ee:de:a2:75:b1:3d:51:4e:20:30:cf:82:e7:81:1d:50: b2:84:b1:da:bf:7a:a0:68:70:64:10:e8:b1:ad:36:5e:32:e8: 13:84:17:d5:cb:f7:6d:7a:5e:de:05:5a:f7:c0:63:4d:9a:7a: d8:fb:52:3e:06:9c:e3:8f:84:0d:24:cd:f5:a3:ef:b2:a0:49: db:14:a2:d0:15:65:a5:35:a8:31:a6:30:52:e2:ee:d3:e9:bc: 3c:9c:7d:93:98:57:bf:89:d7:92:2b:72:df:00:f6:e0:32:a7: ba:ac:65:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjUwOTE4MDE1NTA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNiNjY3ZC0xNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QMG59vlJTHp785pDEHFJHE4WqoLMaSgOprzUDMzOvLbkjMTzd2LLjuY7sA8 MoKkflu/VWlneFry984QQ+iYrq8UAU3QZq/vY37H/krznkf1Sf6gdND55ia5gRrr qCwS6rcgpK7jj9LKvjt2AUKVTGz+5F2smO+bi409taWaidOBGXbX2e+iazNJFDEf ldpHuI9q2jzBGsND9SVzqkIaVFHQj9s/OP9owL7d2zKo4lAs8kOcLvw6FC3Z84f4 1Jgx+IsWIPyLTNa4+w9RED88DZO59YNvOuFsrqORJMTt6yrpd9O5xCWCrA8DyzPU rUPiDVpAyfu70Syzn2MORuL1bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGuLCBX4 gKBbi/no+stvip6Vr3ShMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvODE1OEEzQTY5 NDMyMTFGMDg0M0ExMDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYz4wDQYJKoZIhvcNAQELBQADggEBAHBQ82prHsIGgdn6 varTcbLGI2ozsDcPYIcF8IiSwwyENLU39DQpMJffx2PwaIHgXY6esgJoESKxPj8+ yM2NthwFLriCi8hx5crx14ZpfeRlQru2WsExlTumqnMOJUpAdasRQAhq+BFaSz83 RAYMmg4bOo0RvpYF8YLNcnfLcqKjw5Zvfzlq1+6tEHg1Ny7eGz9T7t6idbE9UU4g MM+C54EdULKEsdq/eqBocGQQ6LGtNl4y6BOEF9XL9216Xt4FWvfAY02aetj7Uj4G nOOPhA0kzfWj77KgSdsUotAVZaU1qDGmMFLi7tPpvDycfZOYV7+J15Irct8A9uAy p7qsZWY= -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:09 2025 by rpki-client