$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa File: 88E1581E93C611F093DD4E26C4F9AE02.roa (raw, json) Hash identifier: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM= Subject key identifier: DF:8F:03:8D:11:4D:0D:79:FC:65:9C:67:6C:03:97:4A:6B:1C:DC:D7 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 030D Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa Signing time: Wed 17 Sep 2025 13:05:41 +0000 ROA not before: Wed 17 Sep 2025 13:05:41 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 54801 IP address blocks: 103.40.8.0/22 maxlen: 24 103.180.160.0/23 maxlen: 23 103.180.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Sep 17 13:05:41 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68cab225-6b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:00:29:57:d9:f9:e1:26:1d:7c:35:da:01:5f: fa:c1:9e:39:2a:c1:34:71:35:b2:bb:60:d4:46:f2: ef:1e:4d:84:e6:f1:5d:40:4a:dc:1a:ad:2b:52:59: 51:2e:4f:fc:eb:16:75:01:5c:0e:87:eb:35:67:58: 72:1f:a7:68:1b:65:dd:67:fc:86:d2:e0:03:a6:fa: 31:ed:c7:c3:79:04:2f:93:49:8a:48:7f:fa:08:37: 39:64:4b:74:b7:4b:f1:ad:8a:0e:98:87:2e:14:16: d6:df:30:c0:17:b4:5d:8a:14:9a:32:6d:a3:80:63: 99:09:f1:9d:a9:9e:0f:4f:5d:eb:7f:60:47:ad:93: 44:94:49:bb:e8:96:e3:94:ca:69:06:83:ca:00:8a: f4:be:a4:de:ee:6b:13:5d:e9:ac:a0:7c:db:2b:c9: 39:da:30:12:77:58:a2:95:62:06:1f:10:f6:8a:38: 57:6f:95:38:ad:03:29:cb:d3:b1:4f:92:7c:e7:a2: eb:dc:61:cf:94:5e:a8:78:f9:49:cc:fb:9e:55:a2: ba:4e:75:70:fc:77:54:b6:ff:14:da:2e:f1:9c:d8: b8:ee:56:05:ed:4b:ee:6d:7f:41:77:95:47:85:ae: 51:45:2e:dc:67:dc:ce:1c:a6:6c:99:8e:46:83:bd: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8F:03:8D:11:4D:0D:79:FC:65:9C:67:6C:03:97:4A:6B:1C:DC:D7 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/88E1581E93C611F093DD4E26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.8.0/22 103.180.160.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:9c:7b:1a:fa:67:12:15:ef:14:12:59:6b:86:9f:b5:2b:39: f3:ca:a0:34:a1:51:2e:80:03:53:ee:a8:cd:94:2b:5e:d1:22: 9b:44:6c:85:cb:6e:1c:6f:5c:de:69:04:e6:8c:13:5e:cc:20: c4:d1:0d:7b:4e:6c:24:9b:f4:14:51:d8:ec:1f:6b:9c:e8:f4: 10:b6:f0:5f:53:d2:37:df:c8:88:c8:43:5b:90:45:49:8e:5c: 5c:94:a0:84:8f:99:cd:d5:58:d3:c1:bb:22:5c:34:8b:b0:1e: da:55:f2:65:d6:91:3b:13:a8:c6:ba:9b:b5:ae:e8:d9:b4:e6: c7:5b:45:bd:05:d9:1c:44:d4:48:3f:b7:e2:0c:74:eb:8d:22: 45:7f:69:ac:30:48:c2:a5:ba:8d:17:37:8e:be:22:fd:2c:2f: ad:8a:42:87:3c:d3:27:23:89:92:f5:67:e5:bd:ea:93:96:67: db:87:78:50:ba:8e:3d:4b:c9:5c:01:b9:cc:77:74:63:aa:be: bc:28:e5:66:74:9c:90:87:52:45:1a:49:ad:47:53:f2:e8:25: cb:a6:cd:62:85:c4:6d:e9:2a:a4:87:59:73:b6:81:86:06:cb: 54:cc:5e:f6:27:41:4b:da:a0:7a:be:70:fa:8e:65:5d:e0:d4: 73:d0:7d:29 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwOTE3MTMwNTQxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGNhYjIyNS02YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wApV9n54SYdfDXaAV/6wZ45KsE0cTWyu2DURvLvHk2E5vFdQErcGq0rUllR Lk/86xZ1AVwOh+s1Z1hyH6doG2XdZ/yG0uADpvox7cfDeQQvk0mKSH/6CDc5ZEt0 t0vxrYoOmIcuFBbW3zDAF7RdihSaMm2jgGOZCfGdqZ4PT13rf2BHrZNElEm76Jbj lMppBoPKAIr0vqTe7msTXemsoHzbK8k52jASd1iilWIGHxD2ijhXb5U4rQMpy9Ox T5J856Lr3GHPlF6oePlJzPueVaK6TnVw/HdUtv8U2i7xnNi47lYF7UvubX9Bd5VH ha5RRS7cZ9zOHKZsmY5Gg71kvwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN+PA40R TQ15/GWcZ2wDl0prHNzXMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvODhFMTU4MUU5 M0M2MTFGMDkzREQ0RTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnKAgDBAFntKAwDQYJKoZIhvcNAQELBQADggEBAA2cexr6 ZxIV7xQSWWuGn7UrOfPKoDShUS6AA1PuqM2UK17RIptEbIXLbhxvXN5pBOaME17M IMTRDXtObCSb9BRR2Owfa5zo9BC28F9T0jffyIjIQ1uQRUmOXFyUoISPmc3VWNPB uyJcNIuwHtpV8mXWkTsTqMa6m7Wu6Nm05sdbRb0F2RxE1Eg/t+IMdOuNIkV/aaww SMKluo0XN46+Iv0sL62KQoc80ycjiZL1Z+W96pOWZ9uHeFC6jj1LyVwBucx3dGOq vrwo5WZ0nJCHUkUaSa1HU/LoJcumzWKFxG3pKqSHWXO2gYYGy1TMXvYnQUvaoHq+ cPqOZV3g1HPQfSk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:52:13 2025 by rpki-client