$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa File: 23B1A0120FA511EFB28F5235C4F9AE02.roa (raw, json) Hash identifier: 1j2rFTty2/H954Iwvk/ZWmtqptjhE7lYs+ZEPtYw42E= Subject key identifier: 1A:21:88:BD:3D:6D:71:23:61:C3:F2:5D:FF:9C:7E:42:AB:97:E7:14 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: D1 Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa Signing time: Fri 13 Jun 2025 05:14:59 +0000 ROA not before: Fri 13 Jun 2025 05:14:59 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 46015 IP address blocks: 103.233.0.0/22 maxlen: 22 103.233.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 04:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jun 13 05:14:59 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684bb3d3-b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:21:67:c4:09:a9:5c:23:b8:16:16:16:00: 3c:ee:99:c0:da:92:d1:5d:94:4b:f7:39:68:1f:31: 35:81:e4:d6:08:1c:da:c5:00:27:87:4d:4e:12:6b: d7:28:22:7d:64:cd:22:f2:84:0b:76:85:33:54:24: 7e:90:59:1e:a0:af:9e:d0:70:b1:38:f7:1a:a2:1b: 38:50:a1:69:7f:14:e6:d2:e6:0b:79:b8:a9:e1:26: d0:cf:34:00:1b:eb:16:a9:49:af:20:14:84:a7:37: f5:42:20:2a:73:28:1f:09:5e:cf:7a:98:0a:24:07: 18:1f:27:94:5b:cf:65:00:75:fb:e5:41:37:83:d5: a1:e1:f4:a5:29:9b:26:24:c2:59:7d:0c:33:d7:58: 7e:a3:a8:9c:1c:d8:4e:b0:ed:03:f6:6e:38:9b:85: 32:f9:69:ef:82:0c:e3:f1:bc:11:c0:c5:e5:c2:a4: 42:ae:83:27:c1:41:65:56:f2:c6:bd:b1:06:72:82: a0:c8:d5:b2:98:5b:6a:23:1c:7d:6f:fd:3f:aa:68: 68:d3:8c:9b:fd:d7:44:bc:0c:5f:b8:6c:a1:9c:b2: 1a:aa:72:c4:40:08:6a:cd:f0:90:ac:10:c8:3f:66: 6f:3e:c7:b9:8f:03:83:2c:ae:a8:b1:e4:96:b0:70: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:88:BD:3D:6D:71:23:61:C3:F2:5D:FF:9C:7E:42:AB:97:E7:14 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/23B1A0120FA511EFB28F5235C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.0.0/22 Signature Algorithm: sha256WithRSAEncryption b1:de:a4:aa:5b:51:16:30:1e:65:bc:2b:8c:41:c4:41:80:b6: 81:84:05:f8:50:d5:6a:d2:a3:4a:10:c7:b3:2c:38:4b:22:47: 9e:28:2e:ed:10:cd:f2:32:09:67:87:99:24:03:62:15:ee:10: 30:ac:06:64:98:9f:81:40:24:2c:89:01:5e:eb:c8:a6:6f:ae: 6f:ea:97:40:9a:c4:24:ea:19:46:2b:8a:8f:a3:5a:c4:64:00: 9a:f1:16:59:6b:1f:a4:73:5e:d9:8d:c0:ca:b9:9e:31:ed:8a: 09:f7:ff:5d:ca:90:dd:ed:cd:6b:81:5c:83:99:ca:13:a3:55: 3f:dc:f0:e5:26:f6:cf:44:1c:ac:2e:53:00:8a:0f:5c:17:67: 25:c0:77:6b:e3:0c:de:ab:bb:68:f6:44:69:4a:a3:93:1b:79: 0b:87:69:09:d7:12:9e:97:c2:95:18:23:18:66:9f:0f:90:b3: e5:e4:bc:05:2a:65:e3:51:38:54:de:46:95:71:d5:32:e5:eb: df:52:38:42:b2:c1:70:99:a1:c6:15:ab:85:56:07:f7:ad:1d: a7:9a:cd:96:1d:12:77:9b:63:ca:e2:b5:1e:63:53:f3:11:a2: 3d:9b:d3:4c:d8:c4:61:90:f7:d6:7b:60:83:f1:a2:4f:c9:6a: 36:e7:cb:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjUwNjEzMDUxNDU5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiYjNkMy1iNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2UhZ8QJqVwjuBYWFgA87pnA2pLRXZRL9zloHzE1geTWCBzaxQAnh01OEmvX KCJ9ZM0i8oQLdoUzVCR+kFkeoK+e0HCxOPcaohs4UKFpfxTm0uYLebip4SbQzzQA G+sWqUmvIBSEpzf1QiAqcygfCV7PepgKJAcYHyeUW89lAHX75UE3g9Wh4fSlKZsm JMJZfQwz11h+o6icHNhOsO0D9m44m4Uy+Wnvggzj8bwRwMXlwqRCroMnwUFlVvLG vbEGcoKgyNWymFtqIxx9b/0/qmho04yb/ddEvAxfuGyhnLIaqnLEQAhqzfCQrBDI P2ZvPse5jwODLK6oseSWsHAE3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBohiL09 bXEjYcPyXf+cfkKrl+cUMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzNCNDcvODcxQjkyOTQwRkE0MTFFRkExQTE2OTM0QzRGOUFFMDIvMjNCMUEwMTIw RkE1MTFFRkIyOEY1MjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn6QAwDQYJKoZIhvcNAQELBQADggEBALHepKpbURYwHmW8 K4xBxEGAtoGEBfhQ1WrSo0oQx7MsOEsiR54oLu0QzfIyCWeHmSQDYhXuEDCsBmSY n4FAJCyJAV7ryKZvrm/ql0CaxCTqGUYrio+jWsRkAJrxFllrH6RzXtmNwMq5njHt ign3/13KkN3tzWuBXIOZyhOjVT/c8OUm9s9EHKwuUwCKD1wXZyXAd2vjDN6ru2j2 RGlKo5MbeQuHaQnXEp6XwpUYIxhmnw+Qs+XkvAUqZeNROFTeRpVx1TLl699SOEKy wXCZocYVq4VWB/etHaeazZYdEnebY8ritR5jU/MRoj2b00zYxGGQ99Z7YIPxok/J ajbny04= -----END CERTIFICATE-----Generated at Sat Jun 21 16:21:36 2025 by rpki-client