$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa File: 13BB8E269AE411ECAE14410EC4F9AE02.roa (raw, json) Hash identifier: 6l5h4K36q0eDoAu4tkN56Ew/iC7m6f8V5wns2INOl9c= Subject key identifier: D7:D7:CE:8A:65:C1:68:18:DB:96:91:76:5A:F4:32:81:67:63:55:0D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8D17 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa Signing time: Thu 30 May 2024 16:14:11 +0000 ROA not before: Thu 30 May 2024 16:14:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141275 IP address blocks: 103.99.196.0/23 maxlen: 24 103.182.134.0/23 maxlen: 24 2400:df20::/32 maxlen: 32 2400:df20:1::/48 maxlen: 48 2400:df20:2::/48 maxlen: 48 2400:df20:3::/48 maxlen: 48 2400:df20:4::/48 maxlen: 48 2400:df20:5::/48 maxlen: 48 2400:df20:6::/48 maxlen: 48 2400:df20:7::/48 maxlen: 48 2400:df20:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36119 (0x8d17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:14:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a5d3-4502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:a3:d5:36:62:d8:a1:38:0b:3b:1b:a9:a5: ce:cb:e7:f0:20:b9:04:5f:85:88:67:f8:04:b2:a8: 4b:3b:a8:60:bc:44:da:39:86:48:df:63:3c:60:5f: 26:fc:d4:ed:ad:9d:83:32:c5:77:aa:ad:8d:f1:ab: 9c:2e:d1:f1:70:94:25:f8:73:d6:d4:55:09:dd:a0: 4f:a5:5a:95:75:34:4a:92:23:95:db:41:1b:6c:54: c4:7a:bb:6d:6c:e6:fe:85:fd:be:26:dc:da:92:6a: 9b:c2:f9:97:7c:45:c4:95:f6:d2:10:6d:6a:1b:76: 78:37:b6:25:04:ff:ac:0e:95:4a:e7:49:77:8a:ee: 5f:f0:6d:ad:1c:e6:00:bf:e3:96:9a:d9:ee:e1:c1: 98:e9:31:e2:41:e6:98:49:91:23:91:fe:ac:d9:d4: e2:ba:ca:6a:6d:3d:1e:12:72:59:5f:9a:e6:12:52: d6:8c:18:45:b0:d6:03:44:07:38:87:8d:e6:66:f7: 69:f5:46:15:61:99:0e:2f:6f:3d:94:f9:f9:1e:33: 11:a2:a5:6d:63:a5:9a:cf:c4:c9:01:7f:0a:a3:6a: cd:9b:23:5e:68:20:d9:b8:79:c3:61:1d:8b:7f:b6: 66:a0:07:d1:d6:8d:79:de:f0:39:f6:b4:e7:b0:95: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D7:CE:8A:65:C1:68:18:DB:96:91:76:5A:F4:32:81:67:63:55:0D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.196.0/23 103.182.134.0/23 IPv6: 2400:df20::/32 Signature Algorithm: sha256WithRSAEncryption 94:4e:ff:ff:a1:ba:0c:77:0d:a4:7a:75:93:28:fc:2e:ef:3c: bf:26:f4:4a:75:3f:cd:fe:ba:47:10:83:51:35:5b:af:35:d2: a8:eb:e4:31:cc:1c:21:cf:a5:1c:1f:59:41:8c:53:67:63:fd: cd:69:ca:50:c9:98:14:b4:8f:c0:85:a0:a5:05:e7:fd:61:5c: b1:39:e8:2b:43:d2:7d:1e:5e:c6:4d:8f:88:71:49:ed:25:44: 45:06:83:3b:04:ef:d4:a7:99:31:6a:41:bf:48:ec:b2:9c:1e: 05:0c:ff:8b:33:2a:06:69:a4:bf:c4:53:c3:fd:7b:68:7a:23: 3b:2d:f6:30:cd:2c:f4:ff:fa:c6:5d:ca:d6:20:b4:5e:73:10: 8d:eb:6a:1f:71:12:83:cc:a9:b4:65:05:7d:d7:5b:68:6a:b6: ab:ca:c0:17:c6:70:35:df:5d:26:06:eb:18:0e:22:0e:8c:8b: fd:56:ef:e0:b6:0b:16:4d:94:c7:31:65:35:db:d7:e9:e7:aa: af:59:df:13:61:ae:27:b9:10:a8:9f:1c:7f:6a:a4:ad:15:a9: 14:be:07:e9:78:53:b8:90:a7:0e:de:3b:2c:59:75:51:b3:06: a2:d2:6e:67:c3:65:0d:9c:d8:15:bc:84:be:ad:85:18:c6:5a: 9d:b4:ac:a7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDAI0XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTQxMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE1ZDMtNDUwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFco9U2YtihOAs7G6mlzsvn8CC5BF+FiGf4BLKoSzuoYLxE2jmGSN9jPGBf JvzU7a2dgzLFd6qtjfGrnC7R8XCUJfhz1tRVCd2gT6ValXU0SpIjldtBG2xUxHq7 bWzm/oX9vibc2pJqm8L5l3xFxJX20hBtaht2eDe2JQT/rA6VSudJd4ruX/BtrRzm AL/jlprZ7uHBmOkx4kHmmEmRI5H+rNnU4rrKam09HhJyWV+a5hJS1owYRbDWA0QH OIeN5mb3afVGFWGZDi9vPZT5+R4zEaKlbWOlms/EyQF/CqNqzZsjXmgg2bh5w2Ed i3+2ZqAH0daNed7wOfa057CVS08CAwEAAaOCAqowggKmMB0GA1UdDgQWBBTX186K ZcFoGNuWkXZa9DKBZ2NVDTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEzQkI4RTI2 OUFFNDExRUNBRTE0NDEwRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQBZ2PEAwQBZ7aGMA0EAgACMAcDBQAkAN8gMA0GCSqGSIb3 DQEBCwUAA4IBAQCUTv//oboMdw2kenWTKPwu7zy/JvRKdT/N/rpHEINRNVuvNdKo 6+QxzBwhz6UcH1lBjFNnY/3NacpQyZgUtI/AhaClBef9YVyxOegrQ9J9Hl7GTY+I cUntJURFBoM7BO/Up5kxakG/SOyynB4FDP+LMyoGaaS/xFPD/XtoeiM7LfYwzSz0 //rGXcrWILRecxCN62ofcRKDzKm0ZQV911toararysAXxnA1310mBusYDiIOjIv9 Vu/gtgsWTZTHMWU129fp56qvWd8TYa4nuRConxx/aqStFakUvgfpeFO4kKcO3jss WXVRswai0m5nw2UNnNgVvIS+rYUYxlqdtKyn -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:42 2024 by rpki-client on console-fra.rpki-client.org