$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa File: 888B4AC26B3611E6A149F871C4F9AE02.roa (raw, json) Hash identifier: C0V7rJkkp2JIZ4YaUDj+rMPHF5Fx4yPepeCUU5377D8= Subject key identifier: E7:60:1E:66:C7:B3:17:35:FF:91:88:82:40:90:8C:1C:A2:71:41:54 Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1EE9 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa Signing time: Sun 28 Sep 2025 16:14:27 +0000 ROA not before: Sun 28 Sep 2025 16:14:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132443 IP address blocks: 103.73.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7913 (0x1ee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Sep 28 16:14:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d95ee3-0251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:08:e2:e3:70:9a:1d:f3:c1:61:d6:bd:3f: 7f:72:26:0f:b8:1c:71:d8:89:a9:a2:92:cb:19:25: e7:61:e3:4c:ab:51:7e:ee:d4:b3:9b:28:16:a1:d0: 28:f1:3f:51:ea:b8:77:4d:f7:ea:36:9e:74:76:80: 9d:b7:b0:57:ec:86:6e:33:67:35:48:0d:97:92:ae: 5f:df:84:e6:ff:d6:5a:66:4e:ed:18:bc:7b:03:16: 89:0c:10:e3:ca:0e:56:99:f6:7d:02:07:d5:a0:6f: c8:a8:64:33:e5:b7:ee:6c:98:91:e9:06:59:a2:45: a0:3f:0e:cf:c9:79:12:98:c7:74:0c:4d:48:58:14: 02:7a:78:cc:fe:da:01:55:4b:e4:32:34:97:9e:e5: 50:c7:21:07:d8:09:38:c4:5c:71:27:2f:45:6a:eb: 9f:45:09:39:0b:ab:89:cf:2c:f6:5e:c9:30:b3:5f: f8:10:f9:ee:86:fd:25:90:fd:c1:fc:53:ae:ef:8c: 2b:b6:b3:da:de:8f:5e:1f:d1:bb:01:00:a3:d2:46: ff:5c:5e:0c:ba:a8:bf:fd:90:66:43:b9:a7:5e:74: 52:b4:2a:e7:bf:1c:1c:bc:b9:93:7f:05:72:4d:aa: 61:27:82:82:29:00:5e:a4:13:01:d5:74:cf:a4:6d: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:1E:66:C7:B3:17:35:FF:91:88:82:40:90:8C:1C:A2:71:41:54 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/888B4AC26B3611E6A149F871C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.56.0/24 Signature Algorithm: sha256WithRSAEncryption b3:02:21:5f:12:fc:00:0e:bc:f2:a4:d6:6b:ef:0d:a7:d7:11: 17:fd:7c:ce:0f:26:84:31:cd:3b:38:75:e0:e4:c9:a0:bf:1c: 2d:37:8b:2a:03:80:18:a0:89:26:b7:05:82:7d:07:99:8d:b5: 6a:c9:80:39:81:61:ad:59:7c:b7:a6:c7:a5:6f:76:2f:82:a8: 96:6e:08:98:59:b9:18:f6:da:c4:27:ff:e5:65:40:cf:3f:aa: 0c:0b:cd:40:e9:4b:19:41:11:94:eb:ff:9e:ed:34:99:17:36: af:7e:8a:b7:f0:b3:05:b1:e9:ee:1c:83:49:c6:cd:e8:ac:46: 21:f8:42:7e:fe:7c:d1:f6:13:dc:6e:6d:d9:3b:f2:e2:e6:3a: 35:96:31:65:93:72:88:67:d4:6a:d6:e2:ba:13:b5:38:70:48: 45:a1:93:1e:4a:5f:f9:ed:f6:81:69:97:a4:3a:d2:99:16:27: d1:2a:23:30:82:ab:fd:e1:9b:ba:fa:31:18:70:7f:b1:02:78: 79:7f:c5:4d:0f:ce:c5:ff:37:ff:4e:06:c8:9e:ee:be:79:92: 5f:ae:17:2a:75:af:79:6d:99:27:7d:61:a9:29:32:af:15:8d: 75:be:1a:ce:85:ff:d6:33:3c:ea:14:a6:ce:27:fe:89:2f:15: d1:a0:79:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwOTI4MTYxNDI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5NWVlMy0wMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMkI4uNwmh3zwWHWvT9/ciYPuBxx2ImpopLLGSXnYeNMq1F+7tSzmygWodAo 8T9R6rh3TffqNp50doCdt7BX7IZuM2c1SA2Xkq5f34Tm/9ZaZk7tGLx7AxaJDBDj yg5WmfZ9AgfVoG/IqGQz5bfubJiR6QZZokWgPw7PyXkSmMd0DE1IWBQCenjM/toB VUvkMjSXnuVQxyEH2Ak4xFxxJy9FauufRQk5C6uJzyz2Xskws1/4EPnuhv0lkP3B /FOu74wrtrPa3o9eH9G7AQCj0kb/XF4Muqi//ZBmQ7mnXnRStCrnvxwcvLmTfwVy TaphJ4KCKQBepBMB1XTPpG1rIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOdgHmbH sxc1/5GIgkCQjByicUFUMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg0RjgvMjI4QUQzRUE2QjMyMTFFNjk0MTY2MjY1QzRGOUFFMDIvODg4QjRBQzI2 QjM2MTFFNkExNDlGODcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnSTgwDQYJKoZIhvcNAQELBQADggEBALMCIV8S/AAOvPKk 1mvvDafXERf9fM4PJoQxzTs4deDkyaC/HC03iyoDgBigiSa3BYJ9B5mNtWrJgDmB Ya1ZfLemx6Vvdi+CqJZuCJhZuRj22sQn/+VlQM8/qgwLzUDpSxlBEZTr/57tNJkX Nq9+irfwswWx6e4cg0nGzeisRiH4Qn7+fNH2E9xubdk78uLmOjWWMWWTcohn1GrW 4roTtThwSEWhkx5KX/nt9oFpl6Q60pkWJ9EqIzCCq/3hm7r6MRhwf7ECeHl/xU0P zsX/N/9OBsie7r55kl+uFyp1r3ltmSd9YakpMq8VjXW+Gs6F/9YzPOoUps4n/okv FdGgebg= -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:43 2025 by rpki-client