$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa File: 0D72E57A370A11EC89F66342C4F9AE02.roa (raw, json) Hash identifier: wihQkiLrydy+hCa+YtsnDcUO74mTIBsdh8wQ8IrO4q8= Subject key identifier: 71:33:A3:AC:6C:76:0C:91:6F:E0:EF:FA:E9:08:83:D0:4C:68:25:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 97BD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa Signing time: Wed 28 Aug 2024 09:09:29 +0000 ROA not before: Wed 28 Aug 2024 09:09:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59173 IP address blocks: 103.41.88.0/24 maxlen: 24 103.41.89.0/24 maxlen: 24 103.41.91.0/24 maxlen: 24 103.77.238.0/23 maxlen: 24 2001:df0:fc00::/48 maxlen: 48 2001:df0:fc01::/48 maxlen: 48 2400:daa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38845 (0x97bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 28 09:09:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66cee949-b676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:10:fb:6a:9a:72:8b:d1:bc:1b:3d:48:bb: 19:6e:47:88:1c:36:67:31:96:4a:80:2a:c8:03:f1: 6a:31:a9:59:88:f2:fc:95:a3:22:d3:b0:b1:8a:ba: f1:d9:cd:3f:ea:28:73:c5:17:84:bc:39:cc:cf:da: 98:e2:a7:67:9e:00:83:af:24:a8:8f:cf:ff:b3:2a: 63:fd:cd:a1:c9:c6:d1:2e:aa:15:39:5b:4c:03:8d: 89:d7:4b:fd:68:fd:1b:00:68:20:ea:19:4b:5d:fc: d1:d8:01:a4:29:64:f9:e8:b7:bd:47:82:54:17:a4: d8:c9:8a:58:03:d3:cd:53:84:ff:3b:ae:31:6f:15: 09:6f:de:41:f9:eb:01:61:2e:12:50:d0:c9:de:ce: 4e:94:91:6e:bb:c1:7f:2b:04:0c:07:09:c7:66:f5: 72:d3:65:de:2e:19:44:b0:86:5c:8a:e6:80:b9:34: d2:52:ce:c2:d3:5a:27:b6:cc:7b:bb:d6:bf:ec:74: 77:e0:45:d5:7a:ee:6b:95:4b:b3:45:9f:4d:32:45: 9f:c6:97:11:a8:dc:f0:d0:02:28:ad:e6:d5:a3:4b: 8e:df:6a:22:fd:07:27:a5:79:21:e4:f6:42:61:7f: a8:00:2e:96:b1:a0:51:41:a8:ae:97:2f:ff:08:f1: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:A3:AC:6C:76:0C:91:6F:E0:EF:FA:E9:08:83:D0:4C:68:25:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D72E57A370A11EC89F66342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.41.88.0/23 103.41.91.0/24 103.77.238.0/23 IPv6: 2001:df0:fc00::/47 2400:daa0::/32 Signature Algorithm: sha256WithRSAEncryption 56:ce:f1:ac:cf:d5:53:02:d2:83:6e:a5:cb:58:59:e4:7e:35: a4:0e:ac:65:54:0b:45:3e:1b:ba:d2:65:5e:f0:64:6c:6b:f1: 0d:64:c9:74:3b:8d:e5:03:75:8a:92:0e:f7:83:36:eb:9f:97: 2a:d3:0b:99:6e:26:12:17:ab:17:0a:31:12:f0:8f:53:24:63: be:f3:3c:15:ff:f5:cd:66:e5:b0:ca:ec:d7:3d:d3:e0:a2:d9: 46:62:76:ec:29:8d:6d:46:61:23:b2:12:91:a6:01:37:8f:dc: 7c:29:47:56:99:86:d1:ad:72:fc:20:76:16:d4:e0:b1:9d:10: 93:42:79:c0:50:67:94:61:07:3a:8e:3f:66:b3:18:d4:9d:80: 12:e0:f2:28:d7:66:8b:bf:56:cb:67:ec:8c:5d:ba:ce:79:c6: ca:ac:66:c0:59:ce:94:df:5d:40:25:89:f2:ab:87:50:e6:eb: ae:39:5f:e8:ca:32:6a:f4:7c:ee:b9:a9:4f:2b:f2:d4:2e:f8: d0:cb:65:12:2f:a0:e7:73:48:11:5e:c9:47:5b:88:bc:3a:ff: df:b8:b7:51:8d:c8:c5:7e:5b:63:b8:0d:a2:51:1f:98:ab:04: eb:d8:da:d7:d4:cd:1f:55:fd:7b:75:9b:ca:3e:4e:70:7d:97: 28:86:75:c6 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAJe9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDgyODA5MDkyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZjZWU5NDktYjY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcNEPtqmnKL0bwbPUi7GW5HiBw2ZzGWSoAqyAPxajGpWYjy/JWjItOwsYq6 8dnNP+ooc8UXhLw5zM/amOKnZ54Ag68kqI/P/7MqY/3NocnG0S6qFTlbTAONiddL /Wj9GwBoIOoZS1380dgBpClk+ei3vUeCVBek2MmKWAPTzVOE/zuuMW8VCW/eQfnr AWEuElDQyd7OTpSRbrvBfysEDAcJx2b1ctNl3i4ZRLCGXIrmgLk00lLOwtNaJ7bM e7vWv+x0d+BF1Xrua5VLs0WfTTJFn8aXEajc8NACKK3m1aNLjt9qIv0HJ6V5IeT2 QmF/qAAulrGgUUGorpcv/wjxZJECAwEAAaOCArkwggK1MB0GA1UdDgQWBBRxM6Os bHYMkW/g7/rpCIPQTGglzjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBENzJFNTdB MzcwQTExRUM4OUY2NjM0MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/ BDQwMjAYBAIAATASAwQBZylYAwQAZylbAwQBZ03uMBYEAgACMBADBwEgAQ3w/AAD BQAkANqgMA0GCSqGSIb3DQEBCwUAA4IBAQBWzvGsz9VTAtKDbqXLWFnkfjWkDqxl VAtFPhu60mVe8GRsa/ENZMl0O43lA3WKkg73gzbrn5cq0wuZbiYSF6sXCjES8I9T JGO+8zwV//XNZuWwyuzXPdPgotlGYnbsKY1tRmEjshKRpgE3j9x8KUdWmYbRrXL8 IHYW1OCxnRCTQnnAUGeUYQc6jj9msxjUnYAS4PIo12aLv1bLZ+yMXbrOecbKrGbA Wc6U311AJYnyq4dQ5uuuOV/oyjJq9HzuualPK/LULvjQy2USL6Dnc0gRXslHW4i8 Ov/fuLdRjcjFfltjuA2iUR+YqwTr2NrX1M0fVf17dZvKPk5wfZcohnXG -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:33 2024 by rpki-client on console-ams.rpki-client.org