$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D7F39D8E6C511EA8A7F365CC4F9AE02.roa File: 0D7F39D8E6C511EA8A7F365CC4F9AE02.roa (raw, json) Hash identifier: iGLE8SRxtdAil6u/V45sJiMRA4rI24UX1IJOKZoZSLw= Subject key identifier: F4:43:44:20:61:85:11:E8:FA:7C:59:C7:EA:B4:39:7C:0C:AD:03:BA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89CD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D7F39D8E6C511EA8A7F365CC4F9AE02.roa Signing time: Thu 30 May 2024 16:00:22 +0000 ROA not before: Thu 30 May 2024 16:00:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134872 IP address blocks: 103.207.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35277 (0x89cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:00:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a296-4a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:f5:6f:c5:7c:af:6d:23:1e:e3:38:68:f3: ea:ff:2b:e9:e6:e8:60:e3:a5:b7:7b:ff:59:dd:32: e4:bd:07:f1:9c:c7:02:0d:90:e8:a0:c7:80:5d:25: c9:98:e2:57:ed:69:4b:1b:9e:04:9a:1d:fc:6a:12: cc:a5:fd:3d:6e:fd:0a:50:e5:c4:8a:16:81:2c:2a: a6:ab:37:32:33:7a:c9:8d:14:42:33:c0:48:02:97: 84:89:24:94:82:0f:dd:72:aa:27:8e:50:23:aa:9b: c6:5c:84:fd:c3:af:f0:08:2c:2a:bf:cb:89:50:11: b7:2c:20:ad:4a:08:23:6c:5d:b8:cf:1f:56:ee:3d: 36:8f:fa:38:11:2d:be:c1:a9:21:06:89:91:26:95: ec:63:0e:dd:c5:c1:fb:cf:37:80:40:8f:b6:13:2a: e8:18:29:a7:f0:d0:f5:09:a1:97:c2:33:b1:eb:6f: 06:a6:a2:11:13:c9:0d:cd:75:d9:43:7b:0a:3e:17: f0:bd:af:29:ca:27:11:40:6b:0b:b8:3c:52:bc:89: 70:44:ce:da:e6:2c:32:e2:20:c7:53:3a:d2:6e:b0: a8:57:78:32:16:ea:1c:47:11:53:2c:82:71:60:fc: 17:51:c4:82:a5:91:ee:b7:7e:28:0d:cf:fe:1c:3a: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:43:44:20:61:85:11:E8:FA:7C:59:C7:EA:B4:39:7C:0C:AD:03:BA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D7F39D8E6C511EA8A7F365CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:cd:ca:ad:d1:be:93:f8:a0:98:c0:fc:ac:b5:66:b0:bd:25: 03:78:0e:b5:39:00:82:f1:5b:9c:0b:21:f9:e2:2b:e5:25:4e: b6:4a:97:44:09:74:4d:3b:4a:bb:41:c2:d4:2d:88:1e:a2:1c: 96:2f:01:e7:87:7c:76:83:cf:bf:7a:cc:3c:48:f7:81:07:80: 6b:a5:4a:a3:b2:ff:38:55:a3:18:b3:c3:19:d4:cd:14:1a:8e: 00:72:e4:79:e4:d1:10:11:97:c0:5a:be:1e:33:1f:58:f0:97: 0d:ce:5a:bf:f0:60:14:f0:99:b4:aa:fd:f7:40:6e:4f:a8:5f: 7f:56:c7:2f:81:b4:dd:37:64:c7:16:8f:26:3a:2d:85:57:b5: 16:d6:1d:9b:83:f9:bc:e7:c4:91:f3:49:54:bf:16:6a:f1:74: bf:ca:bc:d0:81:11:f4:8b:96:a9:d4:35:e6:59:4a:4f:81:0d: 9d:b8:85:39:85:3d:cf:60:6a:66:4a:38:86:cc:84:d4:71:e5: ca:32:02:2b:8b:e2:a4:f3:e1:4b:43:cf:ac:c5:49:85:fb:01: 7c:c1:3c:aa:23:7f:1c:ee:08:5d:12:11:50:9e:2f:1c:8d:0b: 91:6a:a8:33:dc:04:da:78:18:98:2c:04:9d:8b:9a:a4:a9:d8: 06:81:88:3c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAInNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAyMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyOTYtNGEwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwH9W/FfK9tIx7jOGjz6v8r6eboYOOlt3v/Wd0y5L0H8ZzHAg2Q6KDHgF0l yZjiV+1pSxueBJod/GoSzKX9PW79ClDlxIoWgSwqpqs3MjN6yY0UQjPASAKXhIkk lIIP3XKqJ45QI6qbxlyE/cOv8AgsKr/LiVARtywgrUoII2xduM8fVu49No/6OBEt vsGpIQaJkSaV7GMO3cXB+883gECPthMq6Bgpp/DQ9Qmhl8IzsetvBqaiERPJDc11 2UN7Cj4X8L2vKconEUBrC7g8UryJcETO2uYsMuIgx1M60m6wqFd4MhbqHEcRUyyC cWD8F1HEgqWR7rd+KA3P/hw6pssCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT0Q0Qg YYUR6Pp8WcfqtDl8DK0DujAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBEN0YzOUQ4 RTZDNTExRUE4QTdGMzY1Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ8+sMA0GCSqGSIb3DQEBCwUAA4IBAQBezcqt0b6T+KCY wPystWawvSUDeA61OQCC8VucCyH54ivlJU62SpdECXRNO0q7QcLULYgeohyWLwHn h3x2g8+/esw8SPeBB4BrpUqjsv84VaMYs8MZ1M0UGo4AcuR55NEQEZfAWr4eMx9Y 8JcNzlq/8GAU8Jm0qv33QG5PqF9/VscvgbTdN2THFo8mOi2FV7UW1h2bg/m858SR 80lUvxZq8XS/yrzQgRH0i5ap1DXmWUpPgQ2duIU5hT3PYGpmSjiGzITUceXKMgIr i+Kk8+FLQ8+sxUmF+wF8wTyqI38c7ghdEhFQni8cjQuRaqgz3ATaeBiYLASdi5qk qdgGgYg8 -----END CERTIFICATE-----Generated at Fri Nov 22 13:34:48 2024 by rpki-client on console-fra.rpki-client.org