$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa File: 1B7AC2FC90B811EC99577E23C4F9AE02.roa (raw, json) Hash identifier: AoevjmOtS8nxa9fOupFzQA1FrEYOscciLM6EO53p6Nc= Subject key identifier: 9E:BB:EE:28:23:42:CD:B0:9C:9A:6B:AE:D4:C5:49:2A:7C:F1:A9:3A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8EB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa Signing time: Thu 30 May 2024 16:20:47 +0000 ROA not before: Thu 30 May 2024 16:20:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147271 IP address blocks: 103.177.62.0/23 maxlen: 24 2001:df0:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36531 (0x8eb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:20:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a75f-8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:e7:98:fc:7b:b4:bb:f7:3d:8e:67:f0:6b: 55:e3:7c:50:b1:e4:53:c5:85:bb:e4:0f:95:d0:69: 65:32:b8:ab:1c:3f:5d:61:93:71:5b:0e:4b:01:87: 6f:75:6b:c7:2c:fb:09:2d:57:59:04:19:ab:69:cb: f2:db:4a:b4:2f:28:88:38:99:6d:d3:d5:85:b0:91: 4e:ff:66:77:e4:d3:5d:fa:77:b4:92:40:a8:f2:5b: d2:49:15:83:29:05:17:23:a4:73:d6:de:95:07:0b: ae:8c:df:46:68:4b:7b:9b:03:3e:2f:70:6c:50:48: 69:22:9a:6f:71:5a:a9:10:7b:73:df:5a:81:47:73: f6:06:c3:19:3c:72:65:4c:00:4b:d2:25:75:c6:87: e4:d8:c2:71:e9:3e:3a:e5:0a:26:cc:bb:12:f2:8e: 79:c2:f1:ac:cf:2c:05:97:cf:ce:72:0a:2b:21:67: 39:fc:7b:9a:a6:3f:67:ea:de:b1:c9:e2:87:c7:95: 9c:ed:b5:28:cf:23:c1:0e:c4:e6:11:6b:74:60:0d: cf:4e:ea:54:a5:ab:32:fc:b5:3a:1c:b2:db:ca:bb: 16:3d:05:03:ba:3b:de:4f:30:62:6a:02:fc:87:e4: ab:2b:6e:f1:7e:09:f2:08:5e:12:73:9e:97:c4:bb: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BB:EE:28:23:42:CD:B0:9C:9A:6B:AE:D4:C5:49:2A:7C:F1:A9:3A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.62.0/23 IPv6: 2001:df0:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:92:f5:0b:2e:86:6b:7d:a5:88:1f:c1:cf:e0:8d:f4:87:ee: 38:d9:b0:cb:ad:a8:32:b5:65:a7:da:1f:e3:1d:6b:5e:46:26: 09:34:44:90:e8:57:fb:80:a5:9b:f3:48:b4:11:26:97:19:7a: a6:a0:71:f7:ba:12:fa:a1:b6:50:19:8f:34:2d:39:80:b2:14: 75:41:c7:32:eb:81:2b:84:66:5f:a6:53:f3:a1:4a:89:e0:f2: 0d:31:44:23:36:53:71:26:b1:1a:e6:f8:8c:ce:3a:8d:23:ed: 4b:db:6b:a0:ce:f6:7d:45:6b:38:d3:97:d1:62:b7:0f:57:21: 25:fc:60:90:9b:e3:16:b2:d0:52:a1:6a:9c:72:56:46:03:ef: 00:60:e5:5a:35:47:e5:6a:d6:bf:ed:e3:6e:65:22:29:39:13: be:a8:8c:61:fb:27:00:10:45:6f:17:99:5d:09:2b:82:33:aa: 1b:c7:67:00:23:ec:c3:a1:00:8f:3d:3b:bf:80:f4:be:b2:3a: 0c:d3:28:3c:df:c9:61:0a:7e:75:28:f0:35:57:90:3b:55:30: b1:c7:b1:06:b7:8b:b5:68:8c:8f:e1:2e:2b:ae:4b:5c:0b:51: 50:2a:59:26:03:36:44:b9:92:fb:ac:ec:41:4a:cb:cf:e4:38: 1f:f0:40:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI6zMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjA0N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3NWYtOGVmMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1t55j8e7S79z2OZ/BrVeN8ULHkU8WFu+QPldBpZTK4qxw/XWGTcVsOSwGH b3Vrxyz7CS1XWQQZq2nL8ttKtC8oiDiZbdPVhbCRTv9md+TTXfp3tJJAqPJb0kkV gykFFyOkc9belQcLrozfRmhLe5sDPi9wbFBIaSKab3FaqRB7c99agUdz9gbDGTxy ZUwAS9IldcaH5NjCcek+OuUKJsy7EvKOecLxrM8sBZfPznIKKyFnOfx7mqY/Z+re scnih8eVnO21KM8jwQ7E5hFrdGANz07qVKWrMvy1Ohyy28q7Fj0FA7o73k8wYmoC /Ifkqytu8X4J8gheEnOel8S7DBUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSeu+4o I0LNsJyaa67UxUkqfPGpOjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFCN0FDMkZD OTBCODExRUM5OTU3N0UyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7E+MA8EAgACMAkDBwAgAQ3wHcAwDQYJKoZIhvcNAQEL BQADggEBAG+S9Qsuhmt9pYgfwc/gjfSH7jjZsMutqDK1ZafaH+Mda15GJgk0RJDo V/uApZvzSLQRJpcZeqagcfe6EvqhtlAZjzQtOYCyFHVBxzLrgSuEZl+mU/OhSong 8g0xRCM2U3EmsRrm+IzOOo0j7Uvba6DO9n1FazjTl9Fitw9XISX8YJCb4xay0FKh apxyVkYD7wBg5Vo1R+Vq1r/t425lIik5E76ojGH7JwAQRW8XmV0JK4IzqhvHZwAj 7MOhAI89O7+A9L6yOgzTKDzfyWEKfnUo8DVXkDtVMLHHsQa3i7VojI/hLiuuS1wL UVAqWSYDNkS5kvus7EFKy8/kOB/wQDA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:35 2024 by rpki-client on console-ams.rpki-client.org