$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/38E23C8AACAE11EEAD36566EC4F9AE02.roa File: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (raw, json) Hash identifier: WV0++0ZN/bagS69tHu4GzxXJWra/B4BQBtuEVcU79xQ= Subject key identifier: C2:59:B6:19:CA:40:AD:AA:2E:32:77:68:D2:10:9C:3F:39:2E:66:33 Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 036F Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/38E23C8AACAE11EEAD36566EC4F9AE02.roa Signing time: Fri 07 Mar 2025 00:47:07 +0000 ROA not before: Fri 07 Mar 2025 00:47:07 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137897 IP address blocks: 103.182.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A Validity Not Before: Mar 7 00:47:07 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ca420a-f925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:39:c4:08:f0:61:bc:ad:56:54:66:bf:57: 9c:84:05:cc:39:41:93:df:3b:ad:16:43:f5:79:be: e0:6b:7a:98:95:ed:33:1b:af:e3:c6:aa:16:8d:25: 1b:07:73:b4:fd:90:ad:00:67:e2:e2:48:09:c8:f5: 43:27:8b:4e:4a:1c:27:a9:6a:9e:b6:39:fc:7c:b0: 90:48:18:a4:15:05:7a:69:35:55:7c:73:b2:b2:ad: fb:59:ae:17:a9:5c:af:72:be:c5:80:80:fb:f4:e6: 25:97:e9:2d:eb:81:6f:b8:21:a7:55:93:c6:ef:aa: bf:ed:b4:0a:29:96:fa:e4:69:46:2b:c4:70:43:f5: e0:c5:fe:18:7b:9f:c3:0f:d4:ff:4b:d3:b2:a4:06: ea:a7:28:cc:24:bd:b9:97:e3:b9:cf:59:62:b5:a6: d4:ea:8e:b5:67:28:6a:be:76:f9:95:ff:59:9f:c5: 54:90:68:a1:04:92:b5:34:a2:50:06:61:14:64:cb: 03:bf:db:11:f4:a0:54:e1:79:3d:60:19:cf:bb:51: f7:52:49:97:57:dc:21:2f:73:01:de:2a:33:1a:a6: 38:63:0d:6b:d3:4a:64:a6:e8:bc:48:20:c4:e0:ee: 41:bb:bb:1a:57:64:02:d9:66:c8:04:8b:22:84:58: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:B6:19:CA:40:AD:AA:2E:32:77:68:D2:10:9C:3F:39:2E:66:33 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/38E23C8AACAE11EEAD36566EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.96.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:84:24:d9:b4:2b:43:97:f0:23:32:71:a1:d4:01:d4:3f:eb: 20:58:54:78:16:20:2a:d0:c4:a5:69:7e:13:2e:69:59:37:f6: 9e:45:47:93:cb:cc:50:19:89:b6:27:92:1f:00:5c:83:6d:63: 8a:ab:d5:46:b3:84:7e:df:ad:fd:f5:a1:96:5b:2e:3e:90:8e: 33:f4:d1:b9:a3:c9:5d:45:30:cd:85:cb:dd:24:85:14:5d:d8: c0:bf:69:6c:65:b2:66:8e:cf:41:a2:77:6a:73:6b:f0:f3:07: 2b:32:d2:17:4e:d5:6f:0e:3a:50:6b:7a:4c:1b:54:f0:0f:7d: 87:cc:cb:fb:dc:f2:d2:12:49:35:de:57:72:fc:10:31:23:ba: b7:88:ea:f5:d4:fd:ce:06:1d:89:38:77:b0:27:d7:31:c6:24: 3a:ec:2a:dc:82:5e:71:dd:51:8b:eb:9c:fe:9b:6b:7b:dd:3a: 31:44:6c:e2:e3:12:24:4c:56:b8:c8:0c:92:4c:98:f0:b3:87: 3d:36:02:8b:72:57:e1:33:04:6c:94:98:94:06:ca:7f:85:67: 39:5e:89:58:09:ba:62:18:7f:86:98:83:da:a1:67:10:d2:6e: 6e:0f:87:21:1e:a3:1b:2b:b5:56:24:9d:74:11:eb:2d:05:08: bc:0f:f3:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwMzA3MDA0NzA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNDIwYS1mOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR45xAjwYbytVlRmv1echAXMOUGT3zutFkP1eb7ga3qYle0zG6/jxqoWjSUb B3O0/ZCtAGfi4kgJyPVDJ4tOShwnqWqetjn8fLCQSBikFQV6aTVVfHOysq37Wa4X qVyvcr7FgID79OYll+kt64FvuCGnVZPG76q/7bQKKZb65GlGK8RwQ/Xgxf4Ye5/D D9T/S9OypAbqpyjMJL25l+O5z1litabU6o61Zyhqvnb5lf9Zn8VUkGihBJK1NKJQ BmEUZMsDv9sR9KBU4Xk9YBnPu1H3UkmXV9whL3MB3iozGqY4Yw1r00pkpui8SCDE 4O5Bu7saV2QC2WbIBIsihFiZSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMJZthnK QK2qLjJ3aNIQnD85LmYzMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvMzhFMjNDOEFB Q0FFMTFFRUFEMzY1NjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABntmAwDQYJKoZIhvcNAQELBQADggEBAC2EJNm0K0OX8CMy caHUAdQ/6yBYVHgWICrQxKVpfhMuaVk39p5FR5PLzFAZibYnkh8AXINtY4qr1Uaz hH7frf31oZZbLj6QjjP00bmjyV1FMM2Fy90khRRd2MC/aWxlsmaOz0Gid2pza/Dz Bysy0hdO1W8OOlBrekwbVPAPfYfMy/vc8tISSTXeV3L8EDEjureI6vXU/c4GHYk4 d7An1zHGJDrsKtyCXnHdUYvrnP6ba3vdOjFEbOLjEiRMVrjIDJJMmPCzhz02Aoty V+EzBGyUmJQGyn+FZzleiVgJumIYf4aYg9qhZxDSbm4PhyEeoxsrtVYknXQR6y0F CLwP8xU= -----END CERTIFICATE-----Generated at Sat Apr 5 01:42:44 2025 by rpki-client