$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa File: 034D0ED0C01A11EA99DE2279C4F9AE02.roa (raw, json) Hash identifier: X50ktI4BAhxO0PdnvitfhHrtNhMqR3Ej3Cw8nsrQ2B4= Subject key identifier: 42:8E:F8:C5:55:03:ED:8E:C3:5E:6D:5B:B6:3B:26:C1:A8:EF:60:E8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BBB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa Signing time: Thu 30 May 2024 16:08:26 +0000 ROA not before: Thu 30 May 2024 16:08:26 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137622 IP address blocks: 103.118.168.0/22 maxlen: 24 2400:cde0::/32 maxlen: 32 2400:cde0::/48 maxlen: 48 2400:cde0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35771 (0x8bbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:08:26 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a47a-92a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:8f:0f:43:14:7f:6a:85:99:5c:9e:3a:f8: 66:4e:cc:91:b1:25:78:bf:a8:34:c3:c3:34:38:ab: ea:e8:1e:13:ad:5a:67:e8:a0:d2:95:55:fc:a0:8a: 2a:c1:34:d7:90:7d:dc:ec:93:a9:11:a4:a5:bb:40: cc:7d:2c:01:20:03:f2:51:8c:6b:b8:3a:6b:e3:4f: 36:8b:18:ac:42:02:1b:85:82:7c:dc:03:b1:0c:69: e0:15:64:3e:33:7d:f6:b8:87:1d:d7:dc:c0:b9:6a: 78:11:b3:8c:93:75:e7:a2:a0:3c:bf:1b:7f:dd:6f: 32:dd:2a:9e:7a:eb:ed:f8:c1:40:7a:47:46:7f:45: 33:6f:25:23:cb:a5:9e:d1:92:30:8d:fb:ed:26:a3: ac:1c:bd:c9:79:fc:0c:71:e6:56:68:bb:2e:1a:16: f8:00:4d:41:a5:5a:9f:23:36:2c:94:b8:15:82:4c: 3f:e2:8f:24:7b:5e:b4:6c:29:be:68:5f:77:b3:a0: d0:19:c8:be:c5:db:14:75:6f:94:bd:3e:2b:f0:5a: 0d:b2:64:78:4b:bc:5c:ea:9a:69:8d:14:20:52:00: b3:9c:1f:db:6f:ce:38:6c:c1:c9:16:0d:43:68:6a: c6:1e:c8:5d:6c:69:e2:43:1b:5c:d1:9e:3e:3a:c9: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:F8:C5:55:03:ED:8E:C3:5E:6D:5B:B6:3B:26:C1:A8:EF:60:E8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.168.0/22 IPv6: 2400:cde0::/32 Signature Algorithm: sha256WithRSAEncryption 06:d5:af:ca:1a:bf:1a:62:ef:c1:98:5e:cb:a4:e1:e1:da:75: 42:d2:ec:1b:00:b4:0c:32:a6:f8:18:42:b6:65:35:46:90:97: 07:4d:a3:5a:c4:e8:e4:5a:60:51:d6:1c:30:08:d1:7c:8d:3d: 2c:da:9c:31:13:92:c7:2e:c4:85:56:56:61:86:d1:fa:c2:e5: f5:38:60:ce:39:a5:8a:21:ba:22:b7:61:ba:ae:99:5c:61:be: da:b0:41:f2:d7:a6:c9:32:ea:4b:10:63:62:f9:2a:40:33:ed: 2f:7b:b2:48:17:e1:6a:a2:cc:65:92:01:d8:f2:81:47:a2:6c: ed:61:13:88:f9:4f:52:17:ed:b3:2b:be:99:3b:c9:db:68:ae: 55:2a:11:1c:98:46:c5:96:89:38:f6:a9:eb:60:96:01:54:10: 6d:f3:76:6e:13:85:48:21:88:ea:e7:44:05:82:02:54:5d:99: 21:79:9e:b5:4a:43:24:f9:b4:45:4b:f2:51:7b:62:57:2a:35: e7:c1:da:92:8b:13:9f:59:1b:98:7f:60:e5:8c:11:6e:d8:27: 15:c3:3d:7e:d7:df:d1:bd:62:f9:f4:41:31:84:13:de:2f:6f: de:4d:b0:de:2d:c0:38:4b:a1:db:31:d2:20:de:a3:69:91:3d: ec:4e:03:67 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAIu7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDgyNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0N2EtOTJhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtijw9DFH9qhZlcnjr4Zk7MkbEleL+oNMPDNDir6ugeE61aZ+ig0pVV/KCK KsE015B93OyTqRGkpbtAzH0sASAD8lGMa7g6a+NPNosYrEICG4WCfNwDsQxp4BVk PjN99riHHdfcwLlqeBGzjJN156KgPL8bf91vMt0qnnrr7fjBQHpHRn9FM28lI8ul ntGSMI377SajrBy9yXn8DHHmVmi7LhoW+ABNQaVanyM2LJS4FYJMP+KPJHtetGwp vmhfd7Og0BnIvsXbFHVvlL0+K/BaDbJkeEu8XOqaaY0UIFIAs5wf22/OOGzByRYN Q2hqxh7IXWxp4kMbXNGePjrJcAMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRCjvjF VQPtjsNebVu2OybBqO9g6DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAzNEQwRUQw QzAxQTExRUE5OURFMjI3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ3aoMA0EAgACMAcDBQAkAM3gMA0GCSqGSIb3DQEBCwUA A4IBAQAG1a/KGr8aYu/BmF7LpOHh2nVC0uwbALQMMqb4GEK2ZTVGkJcHTaNaxOjk WmBR1hwwCNF8jT0s2pwxE5LHLsSFVlZhhtH6wuX1OGDOOaWKIboit2G6rplcYb7a sEHy16bJMupLEGNi+SpAM+0ve7JIF+FqosxlkgHY8oFHomztYROI+U9SF+2zK76Z O8nbaK5VKhEcmEbFlok49qnrYJYBVBBt83ZuE4VIIYjq50QFggJUXZkheZ61SkMk +bRFS/JRe2JXKjXnwdqSixOfWRuYf2DljBFu2CcVwz1+19/RvWL59EExhBPeL2/e TbDeLcA4S6HbMdIg3qNpkT3sTgNn -----END CERTIFICATE-----Generated at Sun Feb 16 20:13:10 2025 by rpki-client