$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa File: 14CC134C57E811EC8A0ADB28C4F9AE02.roa (raw, json) Hash identifier: mtg5d2WhZ0M9hL/myYEFqDnwWxFUIQXIf6OxOS4C7H0= Subject key identifier: DF:E7:10:9D:FA:71:DB:38:6D:AD:74:B4:24:E6:7B:00:5E:1E:22:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9AAD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa Signing time: Fri 04 Oct 2024 07:46:17 +0000 ROA not before: Fri 04 Oct 2024 07:46:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147264 IP address blocks: 103.177.172.0/23 maxlen: 24 2001:df4:55c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39597 (0x9aad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Oct 4 07:46:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66ff9d48-dd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:34:e4:5b:ce:ae:53:99:24:a3:ec:2e:8f: 9f:bc:69:18:d9:1f:95:fc:8a:be:8c:51:8f:5e:ad: cd:b7:25:35:f8:0c:ca:07:5d:16:4c:76:b1:4f:3a: 8e:c0:4d:f3:01:30:61:78:9b:cd:96:b9:4b:60:9a: 01:71:45:b4:34:15:68:ec:fe:2e:14:54:9c:89:22: ae:dc:04:50:19:b9:03:d0:9a:d3:1c:07:20:12:fa: 2d:ee:38:87:ca:a2:37:3a:88:d8:e4:f7:49:34:7d: 6b:2b:c1:78:e2:44:12:4e:8b:62:d1:91:52:36:c1: b0:78:c4:63:1a:ea:61:79:cc:cd:80:34:7f:91:71: d1:00:75:9b:26:cf:5f:50:60:01:62:e7:cb:0d:5f: b7:10:d2:8c:60:cc:2f:c4:a7:e7:79:e5:e9:6c:b3: c3:ad:31:8d:e4:c4:b3:be:db:bc:28:3a:b0:06:59: 36:22:76:a2:c0:e3:61:0a:53:7e:22:88:4e:aa:04: be:36:94:fe:2b:fd:9f:60:ec:16:b6:51:42:40:b8: 69:50:47:4f:7b:9c:6e:e6:75:08:f2:99:6b:e8:b9: b3:ac:de:9e:69:bc:73:e9:5a:bc:d8:49:b7:8a:cd: 73:88:47:81:d5:53:35:ae:cf:ec:4a:3f:b6:dc:dc: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E7:10:9D:FA:71:DB:38:6D:AD:74:B4:24:E6:7B:00:5E:1E:22:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.172.0/23 IPv6: 2001:df4:55c0::/48 Signature Algorithm: sha256WithRSAEncryption 04:78:44:2b:9b:f6:4e:71:db:5a:ec:91:4c:27:77:57:8d:db: 1c:ee:54:95:d6:11:4c:19:aa:83:59:78:8b:3b:46:bc:95:3b: dd:93:3d:10:da:bc:e4:a4:11:1f:53:b2:bd:16:37:af:6b:48: 76:a7:34:2a:d3:eb:dd:80:8d:19:b4:75:7d:1c:a9:5c:96:4b: ec:cc:3c:7e:56:e3:25:81:89:2a:10:db:c0:07:d0:17:74:46: a9:48:e3:b1:45:e1:3c:2f:ab:4b:0d:3a:5c:b3:08:d3:bc:a3: cf:ed:75:e8:43:d4:fd:17:b1:6e:b6:b9:f7:24:30:f1:62:c0: d1:3f:89:f6:1c:42:c6:a6:78:a5:a4:27:35:c2:ce:63:29:9d: 14:bd:a3:69:b2:e5:fe:93:42:32:6d:5b:fb:fa:96:31:e0:c0: f1:3b:ac:e4:fb:66:d9:bf:60:f7:6a:4a:7e:cf:f7:9f:17:57: a0:7d:65:8b:f2:9d:31:7d:1b:9a:bb:c8:9d:51:6b:79:60:03: ae:62:27:5b:0b:b9:1e:09:f0:60:48:a0:a0:2f:95:67:db:c9: 64:75:bd:4c:55:e7:e9:e3:ac:46:86:49:41:96:35:b6:b3:c5: a2:43:6c:79:cd:da:da:7e:3f:05:58:93:b2:10:f8:35:ae:f8: ec:11:40:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAJqtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTAwNDA3NDYxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZmZjlkNDgtZGQ4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8mNORbzq5TmSSj7C6Pn7xpGNkflfyKvoxRj16tzbclNfgMygddFkx2sU86 jsBN8wEwYXibzZa5S2CaAXFFtDQVaOz+LhRUnIkirtwEUBm5A9Ca0xwHIBL6Le44 h8qiNzqI2OT3STR9ayvBeOJEEk6LYtGRUjbBsHjEYxrqYXnMzYA0f5Fx0QB1mybP X1BgAWLnyw1ftxDSjGDML8Sn53nl6Wyzw60xjeTEs77bvCg6sAZZNiJ2osDjYQpT fiKITqoEvjaU/iv9n2DsFrZRQkC4aVBHT3ucbuZ1CPKZa+i5s6zenmm8c+lavNhJ t4rNc4hHgdVTNa7P7Eo/ttzc5icCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTf5xCd +nHbOG2tdLQk5nsAXh4igjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0Q0MxMzRD NTdFODExRUM4QTBBREIyOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7GsMA8EAgACMAkDBwAgAQ30VcAwDQYJKoZIhvcNAQEL BQADggEBAAR4RCub9k5x21rskUwnd1eN2xzuVJXWEUwZqoNZeIs7RryVO92TPRDa vOSkER9Tsr0WN69rSHanNCrT692AjRm0dX0cqVyWS+zMPH5W4yWBiSoQ28AH0Bd0 RqlI47FF4Twvq0sNOlyzCNO8o8/tdehD1P0XsW62ufckMPFiwNE/ifYcQsameKWk JzXCzmMpnRS9o2my5f6TQjJtW/v6ljHgwPE7rOT7Ztm/YPdqSn7P958XV6B9ZYvy nTF9G5q7yJ1Ra3lgA65iJ1sLuR4J8GBIoKAvlWfbyWR1vUxV5+njrEaGSUGWNbaz xaJDbHnN2tp+PwVYk7IQ+DWu+OwRQAE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:29 2025 by rpki-client