
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa
File: 8EFF79AA9C9B11F09188945AC4F9AE02.roa (raw, json)
Hash identifier: vGe+KixEjqlg5WCoS+gdNG4Wuiu3wBG8EHGv4Rq3UEg=
Subject key identifier: 53:45:0F:86:F7:E3:93:EA:AF:CA:E3:3C:58:A1:35:5F:2A:C5:BA:37
Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial: 079F
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa
Signing time: Thu 08 Oct 2026 22:42:48 +0000
ROA not before: Thu 08 Oct 2026 22:42:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 401984
IP address blocks: 103.99.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Validity
Not Before: Oct 8 22:42:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac81c67-e815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:14:65:a9:14:14:0c:56:97:b6:ea:db:70:
06:59:cb:68:c3:26:cc:72:d7:ba:e8:03:df:f6:f9:
87:48:bc:c7:96:39:9e:60:d9:55:ae:a9:2b:9c:80:
06:5e:c8:85:f1:d3:4d:84:08:d6:dd:e7:8f:24:9a:
48:d9:2e:94:a3:d0:72:56:f9:b2:44:e7:30:c7:2c:
b1:e1:56:44:90:a9:08:78:33:e3:7a:15:cc:e0:4e:
ad:34:47:32:e2:e7:62:85:7f:13:84:fc:a8:96:a0:
46:83:60:67:66:4e:b9:3e:e4:5c:5b:81:41:94:50:
84:31:d6:14:22:83:9b:ea:e4:72:16:66:31:64:42:
fb:26:25:55:82:e7:9f:e7:54:ab:3b:1a:df:8d:41:
97:58:b9:8b:03:7b:2f:c4:17:5f:8b:a6:32:07:96:
4c:b7:6b:61:0a:7e:49:04:9c:81:63:79:55:16:a9:
b7:58:4e:8b:1f:39:98:12:a5:e7:2f:7f:be:1e:bc:
ac:f1:a0:e1:18:f3:65:b4:01:11:39:0c:db:5a:2f:
1d:4f:91:e8:b6:05:a6:23:c8:41:5b:a0:61:b3:e9:
13:02:2c:3b:67:1d:a5:b7:03:ec:18:ca:9b:17:9b:
1f:c5:58:da:a5:04:47:56:2f:2f:71:ac:35:c5:f1:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:0F:86:F7:E3:93:EA:AF:CA:E3:3C:58:A1:35:5F:2A:C5:BA:37
X509v3 Authority Key Identifier:
keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/8EFF79AA9C9B11F09188945AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.60.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:89:fb:59:3f:5c:47:3f:2b:c0:1b:7e:f0:b0:83:14:45:c8:
92:e0:00:07:5b:8d:b0:6e:79:bc:83:be:c4:03:29:07:bf:13:
e3:f7:17:63:f7:29:4f:1b:5c:54:02:52:36:c0:36:72:f2:e9:
37:eb:41:78:95:8b:d8:27:36:ab:19:b2:d0:7f:f2:01:02:d9:
59:e4:d4:b0:aa:97:02:15:88:8d:95:8d:f5:c2:ef:a7:93:f3:
85:16:da:48:90:71:dc:c4:e9:5b:4b:ca:12:1a:75:dd:3e:87:
87:6e:5d:1e:63:d7:5d:07:08:9b:9b:2d:68:21:74:0f:cc:33:
94:fd:a8:f4:53:fd:39:9f:a3:ef:37:e6:06:6d:6d:bc:d4:d8:
df:ef:c4:32:b2:c6:2a:20:7a:8d:f4:89:05:35:d5:e0:8d:55:
08:ef:0f:71:49:e0:0c:a1:72:7b:a9:cd:61:10:1d:64:5c:30:
93:5e:7c:5b:33:2f:1b:33:18:0d:00:b0:49:0e:8e:ed:ad:33:
2a:97:43:88:05:cb:ff:52:dd:bd:2a:22:4b:89:a0:29:ba:ce:
cd:c9:46:cd:aa:05:ef:69:d4:69:11:42:1f:97:ff:07:01:22:
de:cc:bf:45:8d:8b:31:d7:c8:02:8a:0e:61:41:9f:18:95:81:
6f:dc:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:22 2026 by rpki-client