$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa File: 0D63CCF6302911EEBEE85209C4F9AE02.roa (raw, json) Hash identifier: 11TbOYnZLTO5JoQdl3gV85E5ar5y8Lq+dP/Dfxn2/fs= Subject key identifier: C9:48:38:F6:89:41:AD:D6:F5:5B:23:9F:1E:9A:F3:41:18:C9:D0:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 88F0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa Signing time: Thu 30 May 2024 15:56:43 +0000 ROA not before: Thu 30 May 2024 15:56:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133315 IP address blocks: 43.250.132.0/22 maxlen: 24 43.250.208.0/22 maxlen: 24 103.78.168.0/23 maxlen: 24 103.81.250.0/23 maxlen: 24 103.166.95.0/24 maxlen: 24 103.169.76.0/23 maxlen: 24 103.171.43.0/24 maxlen: 24 103.232.8.0/22 maxlen: 24 103.235.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35056 (0x88f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:56:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a1bb-7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8e:7f:71:cb:24:bf:c8:7e:4c:96:93:ef:37: 0b:1d:4a:8e:f9:96:8c:4b:e9:bd:53:f7:2e:f7:0c: 35:91:03:26:91:8e:c7:60:7e:87:f4:ec:e9:ca:cf: da:c7:4e:ac:5e:46:c6:b1:4e:26:76:4b:ba:49:64: f1:ac:89:48:57:36:43:3d:0e:59:26:e6:f4:6f:e2: ed:ae:bf:58:eb:fc:1b:51:92:96:73:de:b8:35:32: 94:4b:63:a5:e1:4c:29:f5:5f:aa:a5:11:42:98:ad: 0e:2c:7f:54:b6:d5:76:e9:dd:1b:6d:1b:ea:69:25: b1:53:7d:66:9f:68:52:e1:d1:d0:7d:1c:a8:b7:1e: 5d:b5:50:4b:f2:8e:73:83:c6:db:6e:36:bc:06:64: 5f:f8:05:43:25:43:c7:d5:ee:1d:3f:1e:d4:5e:ef: c9:fb:63:8a:79:f5:f3:39:8e:dd:cc:8f:e9:a5:e3: 52:6b:83:1e:2b:1e:67:73:b2:e3:26:d9:ad:b7:9d: 88:64:d7:38:74:ab:db:f6:c5:01:70:8b:d5:3b:3c: b9:21:7c:30:f0:32:7b:bb:53:a9:3a:4a:f0:e7:d1: e3:1f:d1:33:1a:b2:df:d1:cb:f5:9a:6d:5d:bd:7c: d3:9f:61:f2:4e:2c:27:08:d3:a9:f8:63:98:1d:9f: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:48:38:F6:89:41:AD:D6:F5:5B:23:9F:1E:9A:F3:41:18:C9:D0:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.132.0/22 43.250.208.0/22 103.78.168.0/23 103.81.250.0/23 103.166.95.0/24 103.169.76.0/23 103.171.43.0/24 103.232.8.0/22 103.235.120.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:cc:14:42:37:2b:53:d6:da:e3:b3:9b:ef:ac:60:8a:6f:16: 87:b6:2a:c0:c6:b4:af:c9:cc:15:cc:56:b1:47:a4:22:e9:b1: 08:41:2b:d0:5f:6f:94:60:d9:ab:11:fa:3c:70:53:97:43:e1: a6:7a:8b:26:bd:72:a3:ab:90:50:70:84:a2:85:bd:08:25:df: a7:83:33:c6:68:f3:f3:98:e7:87:f7:fa:cf:80:4b:50:3c:49: d6:bb:de:e3:8c:50:36:4c:9d:1d:da:82:1a:0e:c0:03:f6:ba: f3:82:dd:67:2b:1e:fb:25:1a:81:aa:82:77:20:f2:85:80:9d: 1d:f3:6b:4a:47:ce:cf:39:14:b8:9a:8d:90:d6:d0:d3:2f:5b: 17:f4:60:f4:d6:87:da:d9:ef:9d:ec:b0:8f:50:9e:64:e2:dd: 1a:d0:52:b1:b8:24:34:f1:ac:3d:95:86:32:32:8b:6a:54:62: 55:19:2c:fb:d8:01:08:c8:d9:23:38:4b:b5:fa:3e:26:93:fb: c8:bd:28:b6:03:3f:3c:b8:ae:39:f6:aa:71:28:bf:95:50:31: 7c:ad:d1:72:cb:c2:f7:8f:03:fd:94:4f:6a:0f:40:d7:fa:a1: 08:bd:26:8b:4e:51:8e:f9:dc:1c:81:8d:bb:94:78:fd:33:89: 02:f2:1c:97 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIDAIjwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTY0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExYmItNzkzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPuOf3HLJL/IfkyWk+83Cx1KjvmWjEvpvVP3LvcMNZEDJpGOx2B+h/Ts6crP 2sdOrF5GxrFOJnZLuklk8ayJSFc2Qz0OWSbm9G/i7a6/WOv8G1GSlnPeuDUylEtj peFMKfVfqqURQpitDix/VLbVdundG20b6mklsVN9Zp9oUuHR0H0cqLceXbVQS/KO c4PG2242vAZkX/gFQyVDx9XuHT8e1F7vyftjinn18zmO3cyP6aXjUmuDHiseZ3Oy 4ybZrbediGTXOHSr2/bFAXCL1Ts8uSF8MPAye7tTqTpK8OfR4x/RMxqy39HL9Zpt Xb18059h8k4sJwjTqfhjmB2fEb0CAwEAAaOCAsUwggLBMB0GA1UdDgQWBBTJSDj2 iUGt1vVbI58emvNBGMnQzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBENjNDQ0Y2 MzAyOTExRUVCRUU4NTIwOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sME8GCCsGAQUFBwEHAQH/ BEAwPjA8BAIAATA2AwQCK/qEAwQCK/rQAwQBZ06oAwQBZ1H6AwQAZ6ZfAwQBZ6lM AwQAZ6srAwQCZ+gIAwQCZ+t4MA0GCSqGSIb3DQEBCwUAA4IBAQB+zBRCNytT1trj s5vvrGCKbxaHtirAxrSvycwVzFaxR6Qi6bEIQSvQX2+UYNmrEfo8cFOXQ+Gmeosm vXKjq5BQcISihb0IJd+ngzPGaPPzmOeH9/rPgEtQPEnWu97jjFA2TJ0d2oIaDsAD 9rrzgt1nKx77JRqBqoJ3IPKFgJ0d82tKR87PORS4mo2Q1tDTL1sX9GD01ofa2e+d 7LCPUJ5k4t0a0FKxuCQ08aw9lYYyMotqVGJVGSz72AEIyNkjOEu1+j4mk/vIvSi2 Az88uK459qpxKL+VUDF8rdFyy8L3jwP9lE9qD0DX+qEIvSaLTlGO+dwcgY27lHj9 M4kC8hyX -----END CERTIFICATE-----Generated at Sun Feb 16 20:35:08 2025 by rpki-client