$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/39B38CD6ACAE11EEAD36566EC4F9AE02.roa File: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (raw, json) Hash identifier: CVz2Xf9+JNVQc+OnMj39alF6Xn/77a8odRw6ivgbb84= Subject key identifier: C5:22:D7:F4:29:A7:CA:A6:50:9E:3B:95:40:E1:D6:D3:7A:B8:23:6E Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 0373 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/39B38CD6ACAE11EEAD36566EC4F9AE02.roa Signing time: Fri 07 Mar 2025 00:47:11 +0000 ROA not before: Fri 07 Mar 2025 00:47:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9304 IP address blocks: 103.182.96.0/24 maxlen: 24 103.182.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A Validity Not Before: Mar 7 00:47:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ca420f-3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8a:39:69:1e:b0:d4:22:5b:23:83:a0:cc:3e: 90:4c:fe:a6:ab:f3:4f:d9:6b:34:17:82:b4:48:a8: 62:71:f0:87:6a:f7:29:f8:4c:c7:7e:45:3e:44:90: 11:e0:c3:c1:d7:93:11:e2:08:6e:68:1d:95:06:29: fe:aa:87:47:fb:82:d7:05:9b:dd:e0:b7:27:90:00: 67:e7:8f:d5:90:6d:19:bc:b2:63:bb:26:9e:75:aa: 62:92:a4:fb:bb:b2:f5:84:3d:03:11:a1:da:ba:26: db:14:a7:e9:93:5b:c1:aa:a2:43:62:db:b9:91:2f: 62:45:97:bc:d3:6c:9b:4e:0d:e3:32:25:ec:63:bd: b4:3c:e4:0d:8b:96:4d:5d:dc:28:24:a7:fc:56:3e: 4b:ba:3a:d4:21:e1:f1:0f:54:47:99:1d:35:27:93: a1:2c:b8:d8:c9:28:42:f7:4f:61:75:0a:ff:ea:3e: 3e:ee:02:41:d6:10:44:3b:47:03:38:21:cd:58:0d: 42:aa:20:1a:16:73:de:88:ad:75:a3:d0:70:46:45: 7b:31:eb:73:8c:9c:2c:d5:75:78:88:51:37:f2:35: d7:f9:b1:9e:d6:1b:35:65:0a:b8:b9:da:c3:ab:fe: ed:dd:66:7e:01:2a:f2:2f:05:f3:7b:e1:16:d5:06: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:22:D7:F4:29:A7:CA:A6:50:9E:3B:95:40:E1:D6:D3:7A:B8:23:6E X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/39B38CD6ACAE11EEAD36566EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.96.0/23 Signature Algorithm: sha256WithRSAEncryption 07:68:b5:d7:0d:ab:a7:42:de:41:3a:a3:6b:f3:bd:53:e4:66: fb:6b:26:31:80:d8:b6:d6:72:ba:e4:b2:a6:2f:54:a5:3d:65: 06:3a:9d:19:c6:34:0c:3f:67:a5:b4:ba:03:90:fc:10:20:e8: 7c:6d:71:60:b1:7c:ca:dc:0d:38:5c:29:bd:52:b1:b8:14:66: 5e:58:ba:cb:55:87:78:da:4c:de:14:fd:17:a7:41:91:ea:d5: e5:09:c5:9b:a7:2d:49:69:7e:db:2e:80:cc:f0:b5:7f:90:e6: cd:0c:16:77:3f:9a:81:a1:fc:71:3e:e0:85:ff:b6:ee:4c:a9: cc:2a:17:f8:4b:01:ce:59:7b:b9:25:94:4a:40:e3:aa:90:ec: 77:fe:a1:91:2c:26:76:8c:20:cd:b6:6c:f7:f2:49:1c:50:aa: 08:a9:70:4d:8b:88:9d:8e:ae:cc:77:e9:f5:07:94:00:ac:76: 95:a6:33:01:d9:b9:96:7d:ea:8d:d8:cf:9e:44:0e:83:27:58: d8:da:a6:54:50:cd:85:a5:2a:7c:68:93:f4:b1:18:56:78:38: e0:76:6f:24:a5:24:8a:5f:cc:77:d8:78:52:0e:5b:4d:4f:c1: a3:fd:48:ec:bd:23:b4:1b:91:e0:49:7a:a8:64:e0:b9:74:ca: e2:0d:6e:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwMzA3MDA0NzExWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNDIwZi0zOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9oo5aR6w1CJbI4OgzD6QTP6mq/NP2Ws0F4K0SKhicfCHavcp+EzHfkU+RJAR 4MPB15MR4ghuaB2VBin+qodH+4LXBZvd4LcnkABn54/VkG0ZvLJjuyaedapikqT7 u7L1hD0DEaHauibbFKfpk1vBqqJDYtu5kS9iRZe802ybTg3jMiXsY720POQNi5ZN XdwoJKf8Vj5LujrUIeHxD1RHmR01J5OhLLjYyShC909hdQr/6j4+7gJB1hBEO0cD OCHNWA1CqiAaFnPeiK11o9BwRkV7MetzjJws1XV4iFE38jXX+bGe1hs1ZQq4udrD q/7t3WZ+ASryLwXze+EW1QYf2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUi1/Qp p8qmUJ47lUDh1tN6uCNuMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvMzlCMzhDRDZB Q0FFMTFFRUFEMzY1NjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntmAwDQYJKoZIhvcNAQELBQADggEBAAdotdcNq6dC3kE6 o2vzvVPkZvtrJjGA2LbWcrrksqYvVKU9ZQY6nRnGNAw/Z6W0ugOQ/BAg6HxtcWCx fMrcDThcKb1SsbgUZl5YustVh3jaTN4U/RenQZHq1eUJxZunLUlpftsugMzwtX+Q 5s0MFnc/moGh/HE+4IX/tu5MqcwqF/hLAc5Ze7kllEpA46qQ7Hf+oZEsJnaMIM22 bPfySRxQqgipcE2LiJ2Orsx36fUHlACsdpWmMwHZuZZ96o3Yz55EDoMnWNjaplRQ zYWlKnxok/SxGFZ4OOB2bySlJIpfzHfYeFIOW01PwaP9SOy9I7QbkeBJeqhk4Ll0 yuINbi0= -----END CERTIFICATE-----Generated at Sat Apr 5 01:45:08 2025 by rpki-client