$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09FCD2EEAEFB11EB87E37710C4F9AE02.roa File: 09FCD2EEAEFB11EB87E37710C4F9AE02.roa (raw, json) Hash identifier: IcrdzznWK1r/bvZ7UGgXzKsTdM3PWA/9byPvp9cX5rc= Subject key identifier: 99:18:CF:1B:80:32:F8:94:90:80:42:E5:76:B7:B1:67:73:C9:A2:E3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DD6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09FCD2EEAEFB11EB87E37710C4F9AE02.roa Signing time: Thu 30 May 2024 16:17:16 +0000 ROA not before: Thu 30 May 2024 16:17:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141862 IP address blocks: 103.166.188.0/23 maxlen: 24 2001:df2:9d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36310 (0x8dd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:17:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a68b-bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:be:82:7b:f3:85:df:7f:66:d3:83:c5:de:10: 7a:bf:f8:91:12:a1:e3:02:ca:34:e6:cd:ad:93:28: cc:d3:a9:6e:33:3f:29:e9:4b:b8:c5:0d:e0:f8:bc: cb:3b:2f:2d:6f:43:8f:4d:e8:dc:32:d8:14:fd:e0: d2:4f:c5:4c:2c:64:f8:b7:1d:97:25:a4:63:11:b7: 1b:a1:4f:58:91:de:6e:96:c6:1c:47:4f:4c:b7:a0: 77:a8:54:7c:e4:1e:7d:d0:5c:ec:19:10:99:f8:4f: 99:f9:4a:61:21:bd:51:f2:07:08:dc:e0:ff:30:b8: 4d:08:4e:3b:e6:c5:dd:c6:b8:99:48:4b:4c:15:3f: 59:1e:f5:71:13:21:5f:4c:58:6a:f5:84:87:7c:c3: 0c:a6:f0:48:6b:9c:cd:bf:a5:f8:b7:47:1b:b2:7c: da:fe:2d:e1:bd:b3:e4:a2:03:d2:17:91:45:c6:23: f3:e4:be:5c:01:37:fd:e9:b9:8d:22:32:c6:e5:7f: e8:fb:27:91:0c:6f:4d:75:54:70:80:3e:7c:86:a2: a0:b4:f4:8a:2f:e5:16:76:66:ba:11:36:1b:f6:8d: b9:00:9c:3a:27:23:4f:fe:54:32:00:14:fd:67:12: d3:2a:66:c9:48:d6:5e:43:53:71:71:7b:14:7e:f2: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:CF:1B:80:32:F8:94:90:80:42:E5:76:B7:B1:67:73:C9:A2:E3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09FCD2EEAEFB11EB87E37710C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.188.0/23 IPv6: 2001:df2:9d40::/48 Signature Algorithm: sha256WithRSAEncryption 64:24:57:7c:3f:b3:d9:82:81:32:6d:ee:50:4f:19:b0:0c:63: 97:d9:58:50:5a:12:d1:1a:89:e9:7d:6d:e1:97:8b:ce:fe:8a: 00:1d:e7:56:6f:de:58:a0:15:e0:56:35:9b:46:f4:26:97:0b: 60:b5:45:51:07:77:fd:01:09:73:d9:56:4a:58:e0:a1:76:af: 08:e8:02:ab:9c:1f:bb:ec:20:7d:84:ee:47:4a:1e:22:a8:72: 0a:ab:38:30:09:a8:78:a1:66:a1:d1:21:3f:18:19:60:ca:6d: 07:ba:af:ea:8d:a2:7e:14:cb:f8:f8:88:21:5b:18:fe:31:c1: 7c:a3:dc:5b:b6:5f:70:f8:22:1c:0a:20:4e:2e:8e:b8:c1:f6: 3c:4b:26:94:21:eb:2c:90:34:60:84:5d:17:f7:71:28:27:8b: 31:a7:46:50:9f:41:03:24:03:33:b1:c1:39:29:86:9b:9d:66: 79:d3:db:96:0b:2e:e4:b6:17:80:47:40:bd:d2:8f:11:d2:78: 2d:21:5e:02:15:11:f4:3f:93:4a:55:62:9b:1d:c7:80:19:1c: 80:c1:68:5d:7f:cb:90:b1:b8:75:41:64:7c:84:5d:65:c4:40: 54:98:d6:e1:a7:76:ec:19:cf:7c:9f:47:fc:59:5c:fb:8e:f4: aa:ac:13:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI3WMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTcxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2OGItYmJiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPK+gnvzhd9/ZtODxd4Qer/4kRKh4wLKNObNrZMozNOpbjM/KelLuMUN4Pi8 yzsvLW9Dj03o3DLYFP3g0k/FTCxk+LcdlyWkYxG3G6FPWJHebpbGHEdPTLegd6hU fOQefdBc7BkQmfhPmflKYSG9UfIHCNzg/zC4TQhOO+bF3ca4mUhLTBU/WR71cRMh X0xYavWEh3zDDKbwSGuczb+l+LdHG7J82v4t4b2z5KID0heRRcYj8+S+XAE3/em5 jSIyxuV/6PsnkQxvTXVUcIA+fIaioLT0ii/lFnZmuhE2G/aNuQCcOicjT/5UMgAU /WcS0ypmyUjWXkNTcXF7FH7yQzUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSZGM8b gDL4lJCAQuV2t7Fnc8mi4zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA5RkNEMkVF QUVGQjExRUI4N0UzNzcxMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6a8MA8EAgACMAkDBwAgAQ3ynUAwDQYJKoZIhvcNAQEL BQADggEBAGQkV3w/s9mCgTJt7lBPGbAMY5fZWFBaEtEaiel9beGXi87+igAd51Zv 3ligFeBWNZtG9CaXC2C1RVEHd/0BCXPZVkpY4KF2rwjoAqucH7vsIH2E7kdKHiKo cgqrODAJqHihZqHRIT8YGWDKbQe6r+qNon4Uy/j4iCFbGP4xwXyj3Fu2X3D4IhwK IE4ujrjB9jxLJpQh6yyQNGCEXRf3cSgnizGnRlCfQQMkAzOxwTkphpudZnnT25YL LuS2F4BHQL3SjxHSeC0hXgIVEfQ/k0pVYpsdx4AZHIDBaF1/y5CxuHVBZHyEXWXE QFSY1uGnduwZz3yfR/xZXPuO9KqsE6Q= -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:40 2024 by rpki-client on console-fra.rpki-client.org