$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa File: 230A1090248C11EEA9EE1935C4F9AE02.roa (raw, json) Hash identifier: 4HA85tehk5/AiNaVc0PdrtNvf1FpOWqjUJ6QboHlbHs= Subject key identifier: 5F:CA:9C:DB:A7:A3:42:3B:07:EA:31:99:0A:1A:6B:D6:44:23:3F:6C Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0193 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa Signing time: Wed 27 Aug 2025 04:08:48 +0000 ROA not before: Wed 27 Aug 2025 04:08:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138640 IP address blocks: 103.238.216.0/23 maxlen: 24 2001:df2:b240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Aug 27 04:08:48 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae84d0-5098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:7b:c6:da:e6:fa:82:68:bb:a0:ac:90:23: 71:8b:f8:60:c9:57:90:65:65:a1:69:bb:1a:4f:a2: 62:c3:7d:f6:6f:d8:a9:93:0d:93:09:8d:d5:29:97: 61:1c:81:ab:c5:8b:e7:78:fa:31:3d:2f:6f:46:a0: bd:8b:9d:17:c9:f4:cf:19:30:4e:bc:0b:96:67:ae: 63:30:3e:cd:aa:1e:33:1c:38:47:19:7e:c1:9b:05: 47:36:7e:d7:c2:21:08:cd:dd:e8:b8:86:f8:0c:3a: 55:5b:a8:5f:76:99:da:88:8d:3f:b0:6d:c7:90:67: 8b:4b:d6:d9:f7:c5:4f:1c:42:27:c5:1b:62:b9:5a: b7:ac:35:d7:b7:cf:5d:7c:64:85:78:de:7d:c9:73: 38:37:78:c8:f0:e5:7a:ef:3a:c4:1e:5b:ea:91:3e: 60:85:67:2e:a5:1c:f4:e1:57:45:35:12:2a:af:31: f1:96:ee:e5:33:a8:82:32:9e:2e:9a:7b:65:09:9f: d0:fb:e9:5a:c4:aa:ed:26:d3:9e:5a:f4:ad:d5:fb: 0e:2b:c6:fd:27:29:31:b0:51:84:e8:97:5d:b5:8c: 1e:0a:9f:a7:ea:86:2c:ac:4a:7b:f7:f1:97:2c:4e: be:5f:20:5a:9c:bd:bc:d3:d0:b1:5b:8b:39:1a:24: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CA:9C:DB:A7:A3:42:3B:07:EA:31:99:0A:1A:6B:D6:44:23:3F:6C X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/230A1090248C11EEA9EE1935C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.216.0/23 IPv6: 2001:df2:b240::/48 Signature Algorithm: sha256WithRSAEncryption b6:ea:e9:3e:b3:68:9c:2b:6f:35:85:9e:a1:e4:86:93:38:b2: 19:2f:8a:38:95:5c:a2:2c:52:2a:a7:99:c8:67:36:09:74:0d: 1b:7a:f1:42:10:04:35:ed:04:8f:24:fa:2a:b7:63:1d:13:b7: d2:76:8c:2d:6d:5c:5b:c4:cd:1f:4f:5e:d0:02:36:e4:3b:ba: 62:d3:22:62:70:5b:75:59:54:8f:96:2b:b4:e4:d6:35:83:e6: 24:ec:6d:18:67:d1:30:cc:a1:60:66:28:f2:d5:57:13:e1:a4: a6:c4:5f:e6:0a:28:f6:fb:8a:b7:53:fe:29:d4:94:9e:5d:44: 5e:af:56:2a:65:eb:3b:f8:41:29:19:e5:a3:2f:ce:31:28:1e: ca:6f:4b:f0:04:f6:b2:80:c5:c6:be:cc:c1:c2:09:7d:02:eb: d2:d4:c4:0d:04:9a:7c:cd:eb:e2:91:1a:01:d5:dd:e8:df:08: fe:ff:e5:49:7c:b0:96:e1:db:37:d8:72:f3:aa:61:2f:67:ab: 67:04:f9:40:9b:73:48:c7:7c:9c:58:9f:30:e9:00:48:69:4a: 7a:5a:5b:55:bf:c4:96:cc:a2:f5:4b:6b:ad:0b:b0:77:88:f2: 41:49:c0:3c:2b:ae:14:27:f3:b6:76:a8:4c:58:17:3c:84:f5: e0:71:68:1d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwODI3MDQwODQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlODRkMC01MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGN7xtrm+oJou6CskCNxi/hgyVeQZWWhabsaT6Jiw332b9ipkw2TCY3VKZdh HIGrxYvnePoxPS9vRqC9i50XyfTPGTBOvAuWZ65jMD7Nqh4zHDhHGX7BmwVHNn7X wiEIzd3ouIb4DDpVW6hfdpnaiI0/sG3HkGeLS9bZ98VPHEInxRtiuVq3rDXXt89d fGSFeN59yXM4N3jI8OV67zrEHlvqkT5ghWcupRz04VdFNRIqrzHxlu7lM6iCMp4u mntlCZ/Q++laxKrtJtOeWvSt1fsOK8b9JykxsFGE6JddtYweCp+n6oYsrEp79/GX LE6+XyBanL2809CxW4s5GiT/kwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFF/KnNun o0I7B+oxmQoaa9ZEIz9sMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZERkMvQkU0MEMxMzYyNDhCMTFFRUEzNEY2RjM0QzRGOUFFMDIvMjMwQTEwOTAy NDhDMTFFRUE5RUUxOTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn7tgwDwQCAAIwCQMHACABDfKyQDANBgkqhkiG9w0BAQsF AAOCAQEAturpPrNonCtvNYWeoeSGkziyGS+KOJVcoixSKqeZyGc2CXQNG3rxQhAE Ne0EjyT6KrdjHRO30naMLW1cW8TNH09e0AI25Du6YtMiYnBbdVlUj5YrtOTWNYPm JOxtGGfRMMyhYGYo8tVXE+GkpsRf5goo9vuKt1P+KdSUnl1EXq9WKmXrO/hBKRnl oy/OMSgeym9L8AT2soDFxr7MwcIJfQLr0tTEDQSafM3r4pEaAdXd6N8I/v/lSXyw luHbN9hy86phL2erZwT5QJtzSMd8nFifMOkASGlKelpbVb/Elsyi9UtrrQuwd4jy QUnAPCuuFCfztnaoTFgXPIT14HFoHQ== -----END CERTIFICATE-----Generated at Wed Sep 10 09:14:49 2025 by rpki-client