$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa File: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (raw, json) Hash identifier: JfTwkLqNbv+/ppvA7/w5eNK8LGWrJTjTZsuLQ37vMVQ= Subject key identifier: EC:68:36:D4:C0:C7:FC:81:D1:D0:7F:30:AA:75:0A:37:5B:5A:4E:C2 Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Certificate serial: 1192 Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa Signing time: Mon 31 Mar 2025 17:16:01 +0000 ROA not before: Mon 31 Mar 2025 17:16:01 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 133043 IP address blocks: 103.206.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4498 (0x1192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Validity Not Before: Mar 31 17:16:01 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eacdd0-6cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:8b:36:62:dc:b9:e4:db:f7:e8:8a:83:e8: 66:ed:7e:0e:92:72:a1:11:fd:6b:c3:2d:43:7a:8d: b8:26:72:66:85:b7:4b:ab:59:69:d9:aa:30:b2:d2: 47:16:2d:06:97:30:b0:de:2c:a6:73:40:8d:cc:05: 64:b6:10:2c:be:1d:7c:12:70:87:6d:38:55:cd:4b: 65:23:67:55:01:1b:28:3f:b8:40:74:80:a0:16:99: 0e:70:55:d6:03:0d:eb:fc:ff:38:46:58:72:f4:0e: 72:ad:c9:e1:21:8a:1e:40:91:88:5b:16:47:c6:4f: 07:00:e9:b8:cb:11:8a:6b:da:d7:43:60:ca:ec:78: 41:4c:6e:f4:4c:42:e5:66:23:87:aa:e7:f0:d8:8b: 69:cb:93:28:6a:9a:7e:0e:49:d8:07:bb:17:2e:67: 48:a5:1c:b9:e9:86:d5:74:0d:e6:92:49:57:a9:58: 2b:cd:01:2a:1e:a0:eb:a4:4a:fd:d6:84:2c:71:7b: 2c:8f:f6:fe:61:52:a7:d5:7f:7d:41:03:6f:a5:71: 95:40:bf:6f:84:95:62:bc:f3:6c:01:e3:af:ae:78: ca:73:95:bd:c6:9a:d2:d2:4b:4a:84:a7:c5:54:a0: 8e:ff:11:17:49:13:ad:bf:08:e4:7e:b1:f3:44:fa: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:36:D4:C0:C7:FC:81:D1:D0:7F:30:AA:75:0A:37:5B:5A:4E:C2 X509v3 Authority Key Identifier: keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:29:73:9b:05:e8:a4:dd:19:b5:2d:b1:47:26:25:2a:97:c0: e1:bf:c3:c3:4d:9f:fd:5c:ad:de:96:d9:59:70:08:b0:52:07: 9b:79:ee:8c:94:c1:56:28:4c:eb:4b:69:80:6a:e8:90:0e:e0: 8f:e5:03:2f:38:9f:a5:4c:09:60:85:fe:2e:9e:16:a4:b7:69: 6e:a0:71:eb:5b:60:39:4d:66:5a:11:ad:79:33:52:0a:76:53: 42:c8:2c:86:bf:13:3c:4e:7d:15:b7:61:3e:72:2a:31:1a:39: 7f:03:b8:c9:1e:c1:2a:5e:a1:0d:5c:65:5d:eb:97:7d:a9:fd: 1f:b8:b7:72:f3:9f:12:71:fd:a4:07:f7:37:1a:76:c5:3d:a5: 97:37:0e:5c:f7:e6:e3:86:f6:79:f2:80:3c:35:42:10:89:fa: fa:56:c3:03:be:1b:f9:56:55:a0:88:83:29:de:a1:99:53:85: 8c:70:1d:e0:b2:44:5e:20:c1:f9:a4:ba:dc:ac:74:3f:01:02: 78:9a:4b:66:0e:d2:83:d9:1f:31:bd:42:64:5c:d3:7f:63:c2: 9c:b3:c7:69:fd:b4:d6:a9:18:d5:83:4b:c1:98:a6:cc:f2:14: 8f:fa:bf:f8:4d:71:e4:a8:a0:cd:27:fc:e1:32:ad:0b:a2:dd: bf:34:19:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC MjFBNDMzRUMwHhcNMjUwMzMxMTcxNjAxWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhY2RkMC02Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+SLNmLcueTb9+iKg+hm7X4OknKhEf1rwy1Deo24JnJmhbdLq1lp2aowstJH Fi0GlzCw3iymc0CNzAVkthAsvh18EnCHbThVzUtlI2dVARsoP7hAdICgFpkOcFXW Aw3r/P84Rlhy9A5yrcnhIYoeQJGIWxZHxk8HAOm4yxGKa9rXQ2DK7HhBTG70TELl ZiOHqufw2Itpy5Moapp+DknYB7sXLmdIpRy56YbVdA3mkklXqVgrzQEqHqDrpEr9 1oQscXssj/b+YVKn1X99QQNvpXGVQL9vhJVivPNsAeOvrnjKc5W9xprS0ktKhKfF VKCO/xEXSROtvwjkfrHzRPoqYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOxoNtTA x/yB0dB/MKp1CjdbWk7CMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJGQkMvQTMzNUIyNThGQ0U0MTFFODkwRkMxRTM3QzRGOUFFMDIvMzdCQzY3QjRC MTg3MTFFQzlGOUZBMDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnziIwDQYJKoZIhvcNAQELBQADggEBAH8pc5sF6KTdGbUt sUcmJSqXwOG/w8NNn/1crd6W2VlwCLBSB5t57oyUwVYoTOtLaYBq6JAO4I/lAy84 n6VMCWCF/i6eFqS3aW6gcetbYDlNZloRrXkzUgp2U0LILIa/EzxOfRW3YT5yKjEa OX8DuMkewSpeoQ1cZV3rl32p/R+4t3LznxJx/aQH9zcadsU9pZc3Dlz35uOG9nny gDw1QhCJ+vpWwwO+G/lWVaCIgyneoZlThYxwHeCyRF4gwfmkutysdD8BAniaS2YO 0oPZHzG9QmRc039jwpyzx2n9tNapGNWDS8GYpszyFI/6v/hNceSooM0n/OEyrQui 3b80GcA= -----END CERTIFICATE-----Generated at Sat Apr 26 09:19:09 2025 by rpki-client