$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa File: 0AB540B2F36C11EB8AC12660C4F9AE02.roa (raw, json) Hash identifier: Sbl9NQ3huJdxvlLitk+oJmk7tc2WjIwCVXEDHVqmoX0= Subject key identifier: E7:64:86:5E:28:16:D6:7B:12:31:50:A3:C0:A5:37:A7:16:12:0C:E6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E02 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa Signing time: Thu 30 May 2024 16:17:55 +0000 ROA not before: Thu 30 May 2024 16:17:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142471 IP address blocks: 103.170.88.0/24 maxlen: 24 2001:df1:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36354 (0x8e02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:17:55 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6b3-b525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:ac:37:a7:be:0b:b9:b8:65:52:50:f4:5c: f1:ae:fa:4b:16:13:80:e4:ba:dc:d2:47:8b:7c:4c: d7:22:1d:e7:30:25:e5:81:9f:f1:87:94:c0:87:31: 00:f9:a8:18:bf:19:1c:d4:24:41:2a:69:34:8d:ad: b2:45:f9:82:ab:32:f4:ff:60:3b:07:6b:79:45:60: 78:4f:9f:99:16:30:8e:05:0b:ca:d7:20:a1:f9:c4: 85:de:6a:1c:a4:9d:32:ac:29:9b:95:18:66:94:22: c6:38:2f:2b:ca:fa:d3:11:55:12:18:cf:5c:81:cc: 3a:2b:a4:29:5c:60:26:5b:e5:91:35:ea:25:43:7d: 3b:28:8b:d4:18:2e:38:3b:7f:7c:c2:4a:a6:63:e0: fe:3b:8a:47:58:ef:43:38:24:eb:9c:54:ae:d3:8e: 10:f1:33:db:89:72:2b:82:42:09:a1:34:b6:09:7d: 22:a2:fe:9f:4b:74:16:fe:39:7a:0d:f3:09:9f:58: d7:f9:85:79:4b:84:fd:88:74:43:47:56:9e:0c:9b: c1:a2:2c:91:ed:c2:71:e2:bd:ed:e5:60:ed:08:bf: ce:b6:eb:6c:d4:89:64:e8:da:e4:45:c9:f7:2a:1f: d3:27:30:8e:21:af:a9:66:98:24:15:d7:8d:8e:a5: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:86:5E:28:16:D6:7B:12:31:50:A3:C0:A5:37:A7:16:12:0C:E6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.88.0/24 IPv6: 2001:df1:a940::/48 Signature Algorithm: sha256WithRSAEncryption 7f:8f:84:54:28:87:00:27:e8:fa:e6:99:b1:92:1d:30:72:14: 62:12:4f:f1:4c:d2:85:fd:a1:f5:31:a5:96:15:75:6b:df:ee: 33:d4:9c:a3:29:4c:ad:8f:e1:8a:e1:a5:c0:a1:46:e2:ec:eb: e8:f4:c6:00:0c:23:07:22:54:31:61:dc:4e:7d:e7:5a:ae:19: 79:a1:d0:7a:78:f2:ce:61:5c:8f:bb:39:05:4d:e9:5c:39:94: f6:32:d2:29:68:f1:f9:69:8a:28:f3:e1:9a:a2:f6:be:7f:6a: d2:9c:07:16:e9:7e:d0:2d:a4:da:32:ca:26:b8:b1:eb:3f:87: 73:a7:3a:f8:63:e4:f2:fa:f9:cc:bc:85:56:13:8f:6c:d8:fd: 32:38:88:ba:41:24:f2:cb:f2:b3:da:8f:30:36:9b:ac:87:79: 96:9d:e9:32:55:bc:38:f0:7e:4d:b2:16:51:32:bf:06:c5:5e: 4d:db:77:06:a3:a5:61:c4:87:54:ee:1f:e9:25:04:ed:a7:f8: 31:6e:1f:ad:f0:2e:b6:6e:b1:82:ff:98:8e:f3:6e:e0:e4:a1: d5:e6:09:09:01:3e:f8:51:1a:40:ba:4a:08:2f:1b:f4:34:da: dc:94:54:21:a5:b6:14:47:8d:dd:a7:64:bc:dd:fc:f8:a1:33: 10:4f:44:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI4CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTc1NVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2YjMtYjUyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgdrDenvgu5uGVSUPRc8a76SxYTgOS63NJHi3xM1yId5zAl5YGf8YeUwIcx APmoGL8ZHNQkQSppNI2tskX5gqsy9P9gOwdreUVgeE+fmRYwjgULytcgofnEhd5q HKSdMqwpm5UYZpQixjgvK8r60xFVEhjPXIHMOiukKVxgJlvlkTXqJUN9OyiL1Bgu ODt/fMJKpmPg/juKR1jvQzgk65xUrtOOEPEz24lyK4JCCaE0tgl9IqL+n0t0Fv45 eg3zCZ9Y1/mFeUuE/Yh0Q0dWngybwaIske3CceK97eVg7Qi/zrbrbNSJZOja5EXJ 9yof0ycwjiGvqWaYJBXXjY6ld88CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTnZIZe KBbWexIxUKPApTenFhIM5jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBBQjU0MEIy RjM2QzExRUI4QUMxMjY2MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ6pYMA8EAgACMAkDBwAgAQ3xqUAwDQYJKoZIhvcNAQEL BQADggEBAH+PhFQohwAn6PrmmbGSHTByFGIST/FM0oX9ofUxpZYVdWvf7jPUnKMp TK2P4YrhpcChRuLs6+j0xgAMIwciVDFh3E5951quGXmh0Hp48s5hXI+7OQVN6Vw5 lPYy0ilo8flpiijz4Zqi9r5/atKcBxbpftAtpNoyyia4ses/h3OnOvhj5PL6+cy8 hVYTj2zY/TI4iLpBJPLL8rPajzA2m6yHeZad6TJVvDjwfk2yFlEyvwbFXk3bdwaj pWHEh1TuH+klBO2n+DFuH63wLrZusYL/mI7zbuDkodXmCQkBPvhRGkC6SggvG/Q0 2tyUVCGlthRHjd2nZLzd/PihMxBPREI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:32 2024 by rpki-client on console-ams.rpki-client.org