$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa File: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (raw, json) Hash identifier: aG9Ky47AV0GPRw+yhEkTWuhgTxt+050Je5yrrl9/SOw= Subject key identifier: 47:DE:03:7B:5A:9A:A5:1A:A5:86:B3:B8:4F:F6:9D:F0:E5:76:A8:F7 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D35 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa Signing time: Sun 26 Oct 2025 14:44:17 +0000 ROA not before: Sun 26 Oct 2025 14:44:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 212238 IP address blocks: 103.99.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Oct 26 14:44:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68fe33c1-c333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:63:0e:50:d0:cd:64:af:03:e8:68:4a:7f: 7e:60:b5:b2:62:01:05:25:90:30:da:6b:ae:a4:ed: 16:85:58:4d:9f:44:f9:47:e4:15:8d:e8:74:0d:0c: 62:8d:72:33:fc:44:c0:a6:55:ab:79:e0:31:50:9a: 2d:b5:d1:5d:29:37:5f:9a:4f:1c:26:21:5b:67:8e: 64:7f:ce:4f:f6:a9:03:6c:9d:07:10:18:b6:76:c1: 23:1a:80:60:19:6c:7b:ec:c4:49:2e:2a:f8:b5:e2: a9:4e:95:c3:41:0b:54:aa:d4:10:8f:df:3d:43:67: b6:24:2e:4f:6e:ea:c4:12:02:71:c6:33:49:69:f2: 96:35:99:d5:bf:c0:e9:ab:6d:92:c6:df:3d:ce:a8: 47:8e:b2:a1:ba:1e:b6:a0:75:69:68:8b:e4:63:19: b5:8a:45:f5:41:16:8f:52:aa:2e:92:a4:69:2e:71: 2d:07:9d:9b:1b:de:20:a3:b9:f7:d4:17:e3:06:70: 6e:e8:e6:ca:a6:c2:c7:f9:3b:62:2e:20:d5:a5:10: ad:0f:7c:a9:b8:25:a8:07:0d:d0:ce:d0:99:1f:5c: 9c:ce:64:5b:54:a8:99:b5:21:59:05:2f:ae:f5:9c: 62:c8:77:2b:43:52:f8:3a:d1:bb:80:3b:6d:49:81: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DE:03:7B:5A:9A:A5:1A:A5:86:B3:B8:4F:F6:9D:F0:E5:76:A8:F7 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.87.0/24 Signature Algorithm: sha256WithRSAEncryption c0:80:3e:9c:89:c1:78:d8:0b:89:d8:55:c9:d9:4b:98:84:09: 5b:1e:44:ff:78:16:d2:09:24:6e:a9:0e:80:d1:55:cf:a8:16: 04:38:9b:91:9c:19:b4:9e:96:e7:dd:2f:15:54:c9:cb:91:3a: b1:33:b3:f0:67:e8:35:07:ce:41:61:3d:7f:f0:69:63:70:31: 11:99:83:9a:e3:4e:d9:0e:6a:f5:7c:59:6f:ae:5a:a8:f3:4b: 13:27:a4:d2:df:c6:5c:ac:ac:8f:cb:cc:ac:e4:a8:36:ba:76: 4b:98:1a:b5:4a:7c:77:82:47:bc:f0:c0:d0:01:36:b7:ab:b1: e6:a0:2e:05:78:ff:fc:b5:58:81:e4:35:f6:d5:c1:ac:a2:f1: 91:bd:1c:c6:72:9a:0c:e9:de:96:37:67:f0:c6:19:68:1e:16: d8:a5:8f:3d:a6:69:2c:8d:02:6a:2b:70:c3:20:3a:8a:ff:05: 3c:7e:30:c1:dc:52:79:3b:36:d4:93:0b:cb:9a:75:3d:cd:69: 30:7b:38:97:e9:78:7b:84:7d:fc:56:dc:d5:88:4d:4a:9e:68: 75:18:62:36:f8:69:3e:cd:4f:5c:b7:73:e7:f3:74:f7:5c:1b: c7:91:12:c8:e1:53:14:f1:da:8f:7c:e5:13:2e:3f:b0:4b:5f: 5c:f0:39:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUxMDI2MTQ0NDE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZlMzNjMS1jMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv39jDlDQzWSvA+hoSn9+YLWyYgEFJZAw2muupO0WhVhNn0T5R+QVjeh0DQxi jXIz/ETAplWreeAxUJottdFdKTdfmk8cJiFbZ45kf85P9qkDbJ0HEBi2dsEjGoBg GWx77MRJLir4teKpTpXDQQtUqtQQj989Q2e2JC5PburEEgJxxjNJafKWNZnVv8Dp q22Sxt89zqhHjrKhuh62oHVpaIvkYxm1ikX1QRaPUqoukqRpLnEtB52bG94go7n3 1BfjBnBu6ObKpsLH+TtiLiDVpRCtD3ypuCWoBw3QztCZH1yczmRbVKiZtSFZBS+u 9ZxiyHcrQ1L4OtG7gDttSYFC7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEfeA3ta mqUapYazuE/2nfDldqj3MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI1NTEvREJGNkUxRDRFMkU0MTFFOTlDRDBBOTY5QzRGOUFFMDIvM0Y2QUM1OUVC MjdBMTFGMDk1QjlDNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnY1cwDQYJKoZIhvcNAQELBQADggEBAMCAPpyJwXjYC4nY VcnZS5iECVseRP94FtIJJG6pDoDRVc+oFgQ4m5GcGbSelufdLxVUycuROrEzs/Bn 6DUHzkFhPX/waWNwMRGZg5rjTtkOavV8WW+uWqjzSxMnpNLfxlysrI/LzKzkqDa6 dkuYGrVKfHeCR7zwwNABNrerseagLgV4//y1WIHkNfbVwayi8ZG9HMZymgzp3pY3 Z/DGGWgeFtiljz2maSyNAmorcMMgOor/BTx+MMHcUnk7NtSTC8uadT3NaTB7OJfp eHuEffxW3NWITUqeaHUYYjb4aT7NT1y3c+fzdPdcG8eREsjhUxTx2o985RMuP7BL X1zwOaY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:56:25 2025 by rpki-client