$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/38F5C602B18711EC9F9FA058C4F9AE02.roa File: 38F5C602B18711EC9F9FA058C4F9AE02.roa (raw, json) Hash identifier: 94kimPGOonrh9/22CnRNhQEUbVH3UGVmy/9MoC69JLQ= Subject key identifier: C3:C9:1F:F7:55:4C:D8:A1:C2:DB:29:5B:5E:FD:25:5F:72:D3:A8:95 Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Certificate serial: 1193 Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/38F5C602B18711EC9F9FA058C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:16:02 +0000 ROA not before: Mon 31 Mar 2025 17:16:02 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 135023 IP address blocks: 103.206.32.0/22 maxlen: 23 103.206.32.0/24 maxlen: 24 103.206.33.0/24 maxlen: 24 103.206.35.0/24 maxlen: 24 182.161.56.0/22 maxlen: 24 2402:9740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FBC Validity Not Before: Mar 31 17:16:02 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eacdd1-2190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:25:e3:5c:8d:98:fb:18:5a:ff:26:7b:e9: e8:e5:26:af:22:87:d6:ba:32:db:d3:53:70:1f:e6: ba:c8:52:ac:fa:a2:16:72:1e:58:3e:11:07:e6:99: f4:c9:10:a7:58:19:68:bb:5f:e1:61:4e:09:70:7f: 7e:04:65:f6:20:f1:8a:f7:c9:0c:c5:f4:33:e2:3b: 54:1d:86:29:ee:fd:76:5d:fd:6f:d6:de:e8:5f:a6: 43:d7:0c:75:b8:b6:65:fb:02:1e:f5:dc:00:e6:ab: d1:e9:2c:0d:8b:9f:5d:31:09:cb:dc:8b:58:6f:dc: ff:cb:22:14:e1:c5:72:84:f8:86:09:70:77:43:98: 50:39:e0:a9:af:41:7d:2d:68:2c:bd:36:56:d7:fe: 83:50:a7:69:2b:40:55:da:b5:13:53:fb:7b:00:fa: 78:6f:ce:41:72:e1:62:32:47:fd:eb:de:1d:24:37: 00:75:8c:3b:c3:d1:fc:d8:08:3d:bb:b5:6f:bd:f1: 24:47:49:86:43:80:10:8d:ea:7d:ab:26:23:c9:94: 74:76:cf:8d:78:f6:66:63:dd:f6:d3:81:fc:e8:eb: 73:7a:48:c0:9e:03:cf:62:56:d9:87:c4:db:72:b7: 07:12:78:17:74:0f:fd:83:95:3a:39:7f:3f:89:f3: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:1F:F7:55:4C:D8:A1:C2:DB:29:5B:5E:FD:25:5F:72:D3:A8:95 X509v3 Authority Key Identifier: keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/38F5C602B18711EC9F9FA058C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.32.0/22 182.161.56.0/22 IPv6: 2402:9740::/32 Signature Algorithm: sha256WithRSAEncryption 84:d6:fd:da:de:4b:78:39:fc:ce:10:7f:3b:66:2f:c6:1c:a5: ce:c9:da:6d:db:be:ce:d4:e6:db:6b:14:c9:6c:20:33:e6:fb: d5:2e:75:f0:7b:9f:9a:7e:12:28:5d:63:46:37:65:d0:d5:1e: 45:f7:a4:ba:d8:9f:6e:e5:ac:08:b7:42:cf:b8:6a:f6:f7:35: bf:7e:9d:ae:2e:91:28:79:e4:d0:5f:8e:9f:74:8d:7c:9d:73: 55:29:88:98:d1:fa:de:6f:95:ce:8c:db:e9:09:c9:85:06:22: 79:78:22:9f:53:c3:0a:35:4a:07:b2:d0:be:73:0b:07:b8:ec: e2:b7:55:90:9e:52:04:a2:1b:06:49:b2:7e:e0:07:32:65:02: 3d:89:34:d3:09:06:72:7c:b7:5d:09:b8:c6:dc:09:07:0b:40: 4a:01:22:f8:90:c0:31:a5:91:99:ba:df:a0:b4:cf:a4:86:90: 7b:77:e0:33:90:cb:14:2d:b1:25:74:94:57:1a:fb:1e:9e:ab: bf:b0:54:30:9e:07:40:66:f2:06:6b:b9:5e:e2:91:60:be:c8: 0d:0b:65:cb:bc:b1:ac:45:75:02:a2:ac:13:08:9a:a2:3f:a1: 96:1c:b3:a8:13:6f:7c:69:09:e6:39:e7:c0:33:55:55:8c:e2: e5:90:37:af -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC MjFBNDMzRUMwHhcNMjUwMzMxMTcxNjAyWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhY2RkMS0yMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH8l41yNmPsYWv8me+no5SavIofWujLb01NwH+a6yFKs+qIWch5YPhEH5pn0 yRCnWBlou1/hYU4JcH9+BGX2IPGK98kMxfQz4jtUHYYp7v12Xf1v1t7oX6ZD1wx1 uLZl+wIe9dwA5qvR6SwNi59dMQnL3ItYb9z/yyIU4cVyhPiGCXB3Q5hQOeCpr0F9 LWgsvTZW1/6DUKdpK0BV2rUTU/t7APp4b85BcuFiMkf9694dJDcAdYw7w9H82Ag9 u7VvvfEkR0mGQ4AQjep9qyYjyZR0ds+NePZmY93204H86OtzekjAngPPYlbZh8Tb crcHEngXdA/9g5U6OX8/ifNWvwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMPJH/dV TNihwtspW179JV9y06iVMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJGQkMvQTMzNUIyNThGQ0U0MTFFODkwRkMxRTM3QzRGOUFFMDIvMzhGNUM2MDJC MTg3MTFFQzlGOUZBMDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnziADBAK2oTgwDQQCAAIwBwMFACQCl0AwDQYJKoZIhvcN AQELBQADggEBAITW/dreS3g5/M4QfztmL8Ycpc7J2m3bvs7U5ttrFMlsIDPm+9Uu dfB7n5p+EihdY0Y3ZdDVHkX3pLrYn27lrAi3Qs+4avb3Nb9+na4ukSh55NBfjp90 jXydc1UpiJjR+t5vlc6M2+kJyYUGInl4Ip9Twwo1Sgey0L5zCwe47OK3VZCeUgSi GwZJsn7gBzJlAj2JNNMJBnJ8t10JuMbcCQcLQEoBIviQwDGlkZm636C0z6SGkHt3 4DOQyxQtsSV0lFca+x6eq7+wVDCeB0Bm8gZruV7ikWC+yA0LZcu8saxFdQKirBMI mqI/oZYcs6gTb3xpCeY558AzVVWM4uWQN68= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:29 2025 by rpki-client