$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa File: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (raw, json) Hash identifier: KcabN84FuC1RCZKB2biZEnUyMb0N5RBlFWlu2grfP8Y= Subject key identifier: 9A:F1:77:DD:1B:DC:41:6D:CD:59:5E:AD:2C:4F:41:20:0F:DD:D4:F6 Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0855 Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa Signing time: Sun 22 Dec 2024 20:28:45 +0000 ROA not before: Sun 22 Dec 2024 20:28:45 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 21859 IP address blocks: 103.146.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Dec 22 20:28:45 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6768767d-def4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:08:89:be:27:f5:68:08:16:85:0d:d7:b5: 1f:a1:3e:0d:df:90:b5:cb:e5:d6:03:b1:00:f1:6e: 5d:f9:68:51:ce:01:f1:29:b0:c0:62:58:84:9f:7f: 7c:6a:fc:9e:97:1d:82:f8:d3:d6:6f:cd:d9:dd:40: 00:52:bf:29:2e:57:47:15:74:14:c9:b6:ce:19:d0: 80:8d:6a:85:b6:1c:c9:a0:e8:f9:1f:1b:e8:02:09: af:e7:43:43:91:fb:af:e8:54:f8:6d:ee:b2:1d:78: 10:25:64:60:0a:f1:fd:87:e1:a7:65:ef:4a:b9:10: 43:d8:8d:b7:ce:29:d2:ba:03:70:8b:1c:a8:0f:08: e5:13:30:fe:f2:41:2f:d6:3c:ed:a7:73:a2:76:61: 79:4b:dc:d6:c3:12:e6:6f:48:f3:4a:16:f6:50:98: ab:94:bd:ca:6e:e3:a7:7f:84:aa:82:25:19:e0:c1: 5a:d0:1a:64:ae:8a:c9:a3:72:40:7b:f3:b3:21:2e: 14:59:34:e0:ef:23:01:9b:82:f7:b7:20:c6:0c:d3: 3c:32:09:86:61:6e:8a:a5:6e:2c:41:fe:80:00:2f: 81:ac:a0:f8:e6:4a:39:fc:0d:05:93:28:0c:6d:ff: cf:fc:4d:5d:38:e3:91:5f:ff:9f:56:40:9b:76:16: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:77:DD:1B:DC:41:6D:CD:59:5E:AD:2C:4F:41:20:0F:DD:D4:F6 X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.83.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d3:c3:89:f7:af:ec:f4:ad:b7:af:b0:a3:92:2c:ed:d3:52: ef:0d:aa:20:92:c8:91:de:26:b7:9e:1e:87:18:d3:37:33:d6: 6a:45:ef:68:10:97:f1:c3:ff:39:52:17:45:c0:6e:a3:c6:c3: 78:5f:4d:bd:76:24:59:42:dd:9f:b6:81:54:ea:da:7a:08:9e: 75:96:d3:58:cd:d8:c9:e6:59:21:ec:aa:f8:84:5c:a4:bf:f0: a2:34:58:0c:38:ab:e3:42:c5:96:96:d5:a1:18:e1:97:bb:91: 5c:6f:a6:57:42:c2:a9:a5:c2:6f:bc:04:51:53:3e:74:6d:02: a2:48:52:d8:e5:f7:6b:32:22:40:c1:cf:9b:03:91:26:1c:db: d9:5e:dd:b4:f1:53:8d:6c:16:f3:b4:8b:ca:2f:0a:3e:c3:46: 55:30:9b:23:89:dd:d5:cf:09:23:ef:c0:52:e3:00:2e:c0:c6: 61:d7:4e:4b:a7:a6:57:1d:72:fd:c7:05:1e:85:91:8c:f3:e7: 18:4e:f2:54:0e:46:26:69:b4:6d:0a:ba:e3:c7:8a:bf:3b:92: 7c:71:a4:aa:3e:4d:71:c1:75:ea:01:4e:dd:fa:38:1b:e1:d7: ba:3b:3c:ce:b2:63:b3:49:32:80:ef:1a:17:07:30:0a:95:30: 0d:71:23:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjQxMjIyMjAyODQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NzY3ZC1kZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCgIib4n9WgIFoUN17UfoT4N35C1y+XWA7EA8W5d+WhRzgHxKbDAYliEn398 avyelx2C+NPWb83Z3UAAUr8pLldHFXQUybbOGdCAjWqFthzJoOj5HxvoAgmv50ND kfuv6FT4be6yHXgQJWRgCvH9h+GnZe9KuRBD2I23zinSugNwixyoDwjlEzD+8kEv 1jztp3OidmF5S9zWwxLmb0jzShb2UJirlL3KbuOnf4SqgiUZ4MFa0BpkrorJo3JA e/OzIS4UWTTg7yMBm4L3tyDGDNM8MgmGYW6KpW4sQf6AAC+BrKD45ko5/A0FkygM bf/P/E1dOOORX/+fVkCbdhbEewIDAQABo4IClTCCApEwHQYDVR0OBBYEFJrxd90b 3EFtzVlerSxPQSAP3dT2MB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1M0YvQkRBNTdGRkVCQzE2MTFFQTlGMkI3NDEyQzRGOUFFMDIvMzhCOTJGNTRF MTdEMTFFREJDQUZDMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnklMwDQYJKoZIhvcNAQELBQADggEBAKnTw4n3r+z0rbev sKOSLO3TUu8NqiCSyJHeJreeHocY0zcz1mpF72gQl/HD/zlSF0XAbqPGw3hfTb12 JFlC3Z+2gVTq2noInnWW01jN2MnmWSHsqviEXKS/8KI0WAw4q+NCxZaW1aEY4Ze7 kVxvpldCwqmlwm+8BFFTPnRtAqJIUtjl92syIkDBz5sDkSYc29le3bTxU41sFvO0 i8ovCj7DRlUwmyOJ3dXPCSPvwFLjAC7AxmHXTkunplcdcv3HBR6FkYzz5xhO8lQO RiZptG0KuuPHir87knxxpKo+TXHBdeoBTt36OBvh17o7PM6yY7NJMoDvGhcHMAqV MA1xI84= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:53 2025 by rpki-client