$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/C43988E4472611EE8CB34245C4F9AE02.roa File: C43988E4472611EE8CB34245C4F9AE02.roa (raw, json) Hash identifier: IPa2jGw+gmZYuRp23YOrB1AB7oOM8mrN+aCuwNA+Alc= Subject key identifier: 04:88:DE:85:39:D8:5C:EA:F6:46:C4:45:8F:34:DF:13:1C:80:47:7A Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 024C Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/C43988E4472611EE8CB34245C4F9AE02.roa Signing time: Wed 19 Aug 2026 03:51:46 +0000 ROA not before: Wed 19 Aug 2026 03:51:46 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 58504 IP address blocks: 103.167.232.0/23 maxlen: 23 103.167.232.0/24 maxlen: 24 103.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Aug 19 03:51:46 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a852851-8f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:51:70:07:a4:b6:58:d3:20:f2:7e:90:05: 11:eb:77:b4:41:56:65:a1:36:e0:ad:73:27:e6:d7: 04:f2:db:af:db:92:e8:92:b3:53:78:da:a3:d7:0c: fb:c1:75:f6:fb:af:cc:4d:c6:40:d5:a1:c2:e0:4e: 62:4d:02:90:ca:73:29:f1:ec:04:c3:d9:da:90:8f: 5a:48:c7:80:40:d2:9a:de:b3:98:46:9c:84:d8:92: 3e:9f:e8:70:d4:41:a8:5d:43:e2:4a:15:2e:c1:01: 22:ad:67:d6:09:16:f0:7e:b9:49:4b:8f:0e:f4:b3: ab:f2:c6:2e:4c:0c:6d:93:d3:99:47:df:25:35:f4: 06:83:03:9e:7e:c4:76:46:ea:64:2f:08:f7:f1:7e: 8a:f8:18:d8:39:8a:24:63:f1:2d:67:7c:27:35:2a: f2:9e:38:ce:f7:1f:fb:9c:e3:be:e5:bc:47:d9:d5: 50:0a:f2:23:7a:86:06:e1:5c:65:47:88:b7:65:11: 26:c4:e5:e4:8d:86:52:aa:73:8c:b6:e0:12:90:82: 38:19:ee:04:6c:bb:a8:ec:ad:c6:f2:10:6d:7c:00: a9:50:ce:1b:11:19:37:3e:71:32:12:7c:ef:9a:a3: ef:b7:7b:b7:72:10:58:a2:d4:4e:94:ca:21:47:a2: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:DE:85:39:D8:5C:EA:F6:46:C4:45:8F:34:DF:13:1C:80:47:7A X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/C43988E4472611EE8CB34245C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.232.0/23 Signature Algorithm: sha256WithRSAEncryption 44:31:44:49:db:a4:b3:3c:40:e1:23:9a:c0:97:ee:0c:9f:6c: 4c:52:67:1a:e8:5e:63:98:ce:48:fe:b0:fc:47:a4:3c:f6:0c: a4:11:2d:9a:0d:95:d7:77:8c:36:01:c0:7e:6b:c4:33:39:db: 35:b6:a5:6c:73:f3:f6:c3:c8:ae:8a:c3:fb:97:01:8c:e1:c3: c5:86:2b:26:84:ea:f8:4f:89:47:c2:2a:37:cd:1a:92:2c:bf: 28:c9:3e:f8:51:5a:6d:61:dd:22:01:3f:39:e9:a9:14:2a:24: d8:d8:a6:7a:8f:06:b7:78:35:ea:eb:31:ba:4f:45:20:0c:af: 9c:ed:cb:2f:12:2a:ae:fd:30:0a:a6:55:49:67:ae:b8:4a:6d: c8:25:85:38:62:e1:43:9b:9c:8d:1f:67:61:00:77:60:99:7e: 05:e8:74:3d:91:81:b8:3a:44:9c:0c:72:81:eb:1a:49:7e:67: 75:09:f7:78:7c:9e:3c:0f:be:b0:fb:c3:91:85:d3:5e:11:47: ad:0e:30:04:dc:80:2c:81:44:4c:99:d6:05:b9:75:c2:8c:49: 8b:46:d8:c2:fb:0f:1c:d6:9b:b4:16:f8:3d:28:02:a3:b2:29: f9:5f:c6:10:3f:a4:cc:c9:3e:33:29:7d:33:71:b3:5a:4c:77: e7:df:bf:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjYwODE5MDM1MTQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg1Mjg1MS04ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozhRcAektljTIPJ+kAUR63e0QVZloTbgrXMn5tcE8tuv25LokrNTeNqj1wz7 wXX2+6/MTcZA1aHC4E5iTQKQynMp8ewEw9nakI9aSMeAQNKa3rOYRpyE2JI+n+hw 1EGoXUPiShUuwQEirWfWCRbwfrlJS48O9LOr8sYuTAxtk9OZR98lNfQGgwOefsR2 RupkLwj38X6K+BjYOYokY/EtZ3wnNSrynjjO9x/7nOO+5bxH2dVQCvIjeoYG4Vxl R4i3ZREmxOXkjYZSqnOMtuASkII4Ge4EbLuo7K3G8hBtfACpUM4bERk3PnEyEnzv mqPvt3u3chBYotROlMohR6JL7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFASI3oU5 2Fzq9kbERY803xMcgEd6MB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0ODAvNDVEQTNGRTYyQjgwMTFFRTlGRjJGNTc2QzRGOUFFMDIvQzQzOTg4RTQ0 NzI2MTFFRThDQjM0MjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6foMA0GCSqGSIb3DQEBCwUAA4IBAQBEMURJ26SzPEDhI5rAl+4M n2xMUmca6F5jmM5I/rD8R6Q89gykES2aDZXXd4w2AcB+a8QzOds1tqVsc/P2w8iu isP7lwGM4cPFhismhOr4T4lHwio3zRqSLL8oyT74UVptYd0iAT856akUKiTY2KZ6 jwa3eDXq6zG6T0UgDK+c7csvEiqu/TAKplVJZ664Sm3IJYU4YuFDm5yNH2dhAHdg mX4F6HQ9kYG4OkScDHKB6xpJfmd1Cfd4fJ48D76w+8ORhdNeEUetDjAE3IAsgURM mdYFuXXCjEmLRtjC+w8c1pu0Fvg9KAKjsin5X8YQP6TMyT4zKX0zcbNaTHfn378U -----END CERTIFICATE-----Generated at Tue Sep 22 04:21:59 2026 by rpki-client