$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa File: 08DB807ECFBC11EEA1200A35C4F9AE02.roa (raw, json) Hash identifier: vWEqBKvjf5elnnlTqGIVQiG/qUOXn/YZt85YWDQVC7A= Subject key identifier: 28:70:0B:87:D1:C2:2C:57:41:5F:99:52:A1:58:0C:FB:27:3A:36:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8EB7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa Signing time: Thu 30 May 2024 16:20:51 +0000 ROA not before: Thu 30 May 2024 16:20:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147277 IP address blocks: 103.109.44.0/22 maxlen: 24 103.176.188.0/24 maxlen: 24 2001:df2:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36535 (0x8eb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:20:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a762-1ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:fe:8b:b5:7e:32:fc:9b:49:71:b5:bf:b1: 1b:87:90:34:56:ba:8a:00:b1:32:8b:a3:17:3d:1a: 6a:77:d7:66:4d:c1:04:13:f4:ed:a6:40:ea:a4:6c: 5e:d8:74:ac:09:ec:50:18:5f:56:b9:2f:ca:19:56: 6c:02:1f:11:84:d8:d1:31:88:42:16:9e:04:ab:bb: 28:b0:ef:5a:3c:1e:ad:02:e5:f0:2e:9a:26:fd:c3: eb:e7:08:ed:0b:d1:92:92:54:0b:4d:26:10:91:b2: b6:fc:38:0d:35:3e:95:01:4b:4f:db:26:07:dd:c6: 46:a5:0a:70:06:00:5b:b1:37:99:4b:1f:dd:63:17: 93:ba:40:ef:37:e1:4b:7f:9c:2f:ba:41:33:6d:2e: aa:57:fe:b7:fb:61:2a:12:ef:15:8a:3b:65:09:a6: ab:55:b2:43:12:fb:d1:e4:bc:30:64:9a:94:b3:b6: 1d:6e:ad:3b:4a:c0:10:f4:96:1d:94:c3:36:86:68: 6f:82:6a:7e:e9:d6:ca:4b:76:46:8d:97:17:1e:62: ff:5d:33:60:9b:a9:41:c9:8a:2e:5c:ee:68:75:8d: 97:92:07:09:e3:5d:2f:97:f6:55:55:1e:f8:f6:a5: 93:52:bd:c4:71:d6:1c:e1:84:77:4e:14:b2:d0:d2: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:70:0B:87:D1:C2:2C:57:41:5F:99:52:A1:58:0C:FB:27:3A:36:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08DB807ECFBC11EEA1200A35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.44.0/22 103.176.188.0/24 IPv6: 2001:df2:140::/48 Signature Algorithm: sha256WithRSAEncryption 1f:f2:17:23:80:eb:cd:d0:93:35:a1:98:92:52:78:77:40:7c: c2:d4:16:7e:fc:42:f6:ab:23:d9:ff:59:0d:75:50:0a:4b:d4: a7:52:4c:9c:26:07:50:12:af:8f:86:98:f7:40:8c:8b:f7:82: 8e:cf:66:b2:83:5d:0f:a2:ae:e1:8d:d5:dc:de:8c:3f:c0:35: f3:31:bc:0c:9d:64:34:2b:26:33:10:c6:4a:6f:d1:a7:48:8e: 49:1e:f1:6b:67:be:55:61:3a:96:ac:ff:d3:44:b0:5c:49:94: 1e:aa:bf:9c:36:5c:c6:d7:e9:0f:02:5f:67:e7:4e:a9:d5:44: b1:da:c9:e8:86:52:16:0b:ea:ee:ec:86:91:5f:6f:74:b0:f2: 40:09:ac:49:4b:fd:33:b4:67:31:91:b4:32:07:b0:41:e5:e9: 57:e9:0d:78:d3:a4:f3:6b:77:5f:a1:f5:20:84:8f:b6:e3:e7: 06:f9:98:2c:b3:c1:01:3d:22:ed:ef:09:26:34:d7:c5:8a:7a: b6:f1:3d:e6:1c:d5:d4:11:2f:18:e3:77:89:a8:c6:b9:9b:85: 90:5a:ee:80:e1:b0:3b:7c:bd:6c:00:d7:34:23:53:bc:12:0f: e2:59:bb:17:75:aa:95:65:7d:30:32:0f:b7:97:41:4d:65:89: 1b:bf:a9:03 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAI63MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjA1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3NjItMWVlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8A/ou1fjL8m0lxtb+xG4eQNFa6igCxMoujFz0aanfXZk3BBBP07aZA6qRs Xth0rAnsUBhfVrkvyhlWbAIfEYTY0TGIQhaeBKu7KLDvWjwerQLl8C6aJv3D6+cI 7QvRkpJUC00mEJGytvw4DTU+lQFLT9smB93GRqUKcAYAW7E3mUsf3WMXk7pA7zfh S3+cL7pBM20uqlf+t/thKhLvFYo7ZQmmq1WyQxL70eS8MGSalLO2HW6tO0rAEPSW HZTDNoZob4JqfunWykt2Ro2XFx5i/10zYJupQcmKLlzuaHWNl5IHCeNdL5f2VVUe +Palk1K9xHHWHOGEd04UstDS9C8CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQocAuH 0cIsV0FfmVKhWAz7Jzo2/TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4REI4MDdF Q0ZCQzExRUVBMTIwMEEzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQCZ20sAwQAZ7C8MA8EAgACMAkDBwAgAQ3yAUAwDQYJKoZI hvcNAQELBQADggEBAB/yFyOA683QkzWhmJJSeHdAfMLUFn78QvarI9n/WQ11UApL 1KdSTJwmB1ASr4+GmPdAjIv3go7PZrKDXQ+iruGN1dzejD/ANfMxvAydZDQrJjMQ xkpv0adIjkke8WtnvlVhOpas/9NEsFxJlB6qv5w2XMbX6Q8CX2fnTqnVRLHayeiG UhYL6u7shpFfb3Sw8kAJrElL/TO0ZzGRtDIHsEHl6VfpDXjTpPNrd1+h9SCEj7bj 5wb5mCyzwQE9Iu3vCSY018WKerbxPeYc1dQRLxjjd4moxrmbhZBa7oDhsDt8vWwA 1zQjU7wSD+JZuxd1qpVlfTAyD7eXQU1liRu/qQM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:32 2024 by rpki-client on console-ams.rpki-client.org