$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa File: 23B1A0120FA511EFB28F5235C4F9AE02.roa (raw, json) Hash identifier: U8i0qlU1iG7iGGOct1cXwPlwr4Q9fN1z2Du4FOYXcDw= Subject key identifier: 50:1D:65:91:C0:86:B7:9F:73:B2:BD:9A:FF:0F:AB:C0:A4:25:72:C9 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 015D Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:58:30 +0000 ROA not before: Fri 13 Jun 2025 05:14:59 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 46015 IP address blocks: 103.233.0.0/22 maxlen: 22 103.233.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jun 13 05:14:59 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59786-a645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:49:52:a2:9d:fa:ca:9d:0f:f9:1c:ca:30: a4:6c:29:f5:4a:de:87:76:20:7e:57:7c:fe:68:93: ab:19:63:e9:d6:eb:96:65:6f:a9:78:14:62:13:b4: 57:d3:06:4e:08:c9:c3:58:e5:c1:c9:57:3d:04:ce: f0:3d:1e:bf:a8:27:1b:a2:ca:db:09:79:c7:3e:b6: 52:4f:1e:8d:4e:e8:0e:bd:35:9c:dd:f5:66:05:45: 64:56:3e:de:de:f1:d2:0b:bf:34:66:f8:60:19:b6: 37:3e:34:e4:af:de:e3:52:5a:7f:c2:7c:06:b8:ec: 97:7e:41:76:c2:9f:6e:54:d3:ea:c1:70:50:7a:30: 74:f0:27:42:d5:19:13:9c:e3:93:cc:a6:38:2c:e1: 1a:c3:97:d0:52:29:7f:90:6f:51:5d:94:b8:4d:48: 42:52:c2:b2:da:97:4b:65:55:83:d6:46:0b:d8:36: 4b:fb:dc:22:83:c5:1e:1c:43:7c:4f:04:8f:31:4c: 15:45:6c:c4:fe:2c:e9:5f:22:aa:ae:5b:19:a6:7e: c7:1a:58:00:8c:49:02:15:2e:09:8c:7e:c3:65:31: 94:49:19:c1:9b:09:c1:00:2d:a8:54:3c:94:20:24: 34:80:7b:48:e5:86:27:39:f7:3b:5d:bf:f3:18:40: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1D:65:91:C0:86:B7:9F:73:B2:BD:9A:FF:0F:AB:C0:A4:25:72:C9 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.0.0/22 Signature Algorithm: sha256WithRSAEncryption 23:89:d9:15:b7:49:8b:1b:e4:f9:97:15:0f:95:60:bf:6e:16: d6:07:fc:74:9c:0d:1f:89:22:71:75:25:3f:88:4e:34:13:f6: 15:a2:44:30:10:ab:50:45:5f:b9:e7:82:ef:76:93:2b:a3:32: 81:ec:68:4b:71:4f:5a:d8:f7:d7:d7:a3:fb:0b:cc:29:62:51: 14:14:70:b5:a0:f7:50:28:68:b6:70:f1:e3:35:a5:d9:60:72: 8a:4d:1f:85:01:7f:00:e8:56:46:d5:2d:5a:1f:8c:32:ce:d4: 51:c0:9f:89:ee:2e:ff:fb:07:21:32:6f:7a:85:62:bc:72:05: 15:33:06:14:62:3e:9f:22:0d:89:62:0c:5f:ae:e0:9d:27:3e: 80:89:f4:dd:76:fd:5e:85:18:2c:16:f7:6a:8a:18:ca:a3:27: 18:c1:d4:eb:b9:89:c0:04:72:0e:af:05:92:45:91:f9:d3:3b: ae:dd:3a:80:1a:1e:fe:e3:f4:d3:65:e0:29:f5:84:fd:92:8f: 2a:82:b0:99:d8:10:5b:1c:6c:8d:9c:af:0f:9b:0e:ca:c1:48: 48:3d:eb:26:c7:2e:4d:12:4e:48:68:32:a5:33:4d:e6:5f:8d: da:23:d3:98:dc:59:e5:12:90:d1:76:bd:f2:da:fc:f7:e5:b5: c3:9a:15:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjUwNjEzMDUxNDU5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTc4Ni1hNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GhJUqKd+sqdD/kcyjCkbCn1St6HdiB+V3z+aJOrGWPp1uuWZW+peBRiE7RX 0wZOCMnDWOXByVc9BM7wPR6/qCcbosrbCXnHPrZSTx6NTugOvTWc3fVmBUVkVj7e 3vHSC780ZvhgGbY3PjTkr97jUlp/wnwGuOyXfkF2wp9uVNPqwXBQejB08CdC1RkT nOOTzKY4LOEaw5fQUil/kG9RXZS4TUhCUsKy2pdLZVWD1kYL2DZL+9wig8UeHEN8 TwSPMUwVRWzE/izpXyKqrlsZpn7HGlgAjEkCFS4JjH7DZTGUSRnBmwnBAC2oVDyU ICQ0gHtI5YYnOfc7Xb/zGECNrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFAdZZHA hrefc7K9mv8Pq8CkJXLJMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzNCNDcvODcxQjkyOTQwRkE0MTFFRkExQTE2OTM0QzRGOUFFMDIvMjNCMUEwMTIw RkE1MTFFRkIyOEY1MjM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+kAMA0GCSqGSIb3DQEBCwUAA4IBAQAjidkVt0mLG+T5lxUPlWC/ bhbWB/x0nA0fiSJxdSU/iE40E/YVokQwEKtQRV+554LvdpMrozKB7GhLcU9a2PfX 16P7C8wpYlEUFHC1oPdQKGi2cPHjNaXZYHKKTR+FAX8A6FZG1S1aH4wyztRRwJ+J 7i7/+wchMm96hWK8cgUVMwYUYj6fIg2JYgxfruCdJz6AifTddv1ehRgsFvdqihjK oycYwdTruYnABHIOrwWSRZH50zuu3TqAGh7+4/TTZeAp9YT9ko8qgrCZ2BBbHGyN nK8Pmw7KwUhIPesmxy5NEk5IaDKlM03mX43aI9OY3FnlEpDRdr3y2vz35bXDmhUk -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:53 2026 by rpki-client