$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa File: 1C522E3C44D811EFA66FAF17C4F9AE02.roa (raw, json) Hash identifier: 55Vab4kvke/ctPZCmCOzXcUuwwv6cFLgct+PsTBaYHo= Subject key identifier: 6F:FA:38:95:47:85:26:0E:EE:50:23:82:F6:A5:56:7E:9C:55:9C:62 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 94C7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa Signing time: Thu 18 Jul 2024 07:34:05 +0000 ROA not before: Thu 18 Jul 2024 07:34:05 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140033 IP address blocks: 103.147.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38087 (0x94c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jul 18 07:34:05 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6698c56d-9881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:84:72:51:08:be:99:a6:02:1b:f1:6c:b3:cd: d6:3c:6d:fc:a1:13:a9:d2:39:ce:00:8b:32:ef:8d: ad:2c:38:ed:cb:c2:aa:ce:0e:bb:25:93:d0:e5:50: 37:22:99:97:a7:8f:33:c7:8b:f4:60:82:e7:5f:34: 48:bc:67:d4:41:40:40:f7:07:cd:da:2d:80:aa:da: 35:ea:87:66:6b:ec:cc:d0:60:1e:82:95:76:c7:70: 89:b8:2c:5d:dd:ba:ae:26:07:e6:f8:07:86:17:63: 44:5f:92:26:b2:42:84:03:ec:01:6a:eb:40:90:c4: a5:38:ff:9c:85:62:fa:3f:ca:e2:d8:76:83:56:f6: ef:71:be:08:af:5e:3e:9e:50:c7:83:a7:f1:2d:98: d5:7a:e0:4b:1a:05:23:2f:6c:b0:38:1d:ca:9e:4e: 41:08:a0:ed:3b:ab:65:8b:b3:3c:6e:17:10:49:75: ea:53:18:48:ca:1d:42:f4:05:92:fa:1f:5f:e5:82: 3b:f3:59:f3:42:cd:27:14:52:b2:02:31:b0:51:86: 53:4e:0f:57:19:cb:c0:6f:c9:db:f7:6e:0e:9f:24: f4:43:08:c8:d9:c5:49:f0:72:b9:37:14:63:de:6a: bb:f0:12:0a:d3:82:bc:a8:36:27:de:ac:fd:a0:b0: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:38:95:47:85:26:0E:EE:50:23:82:F6:A5:56:7E:9C:55:9C:62 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C522E3C44D811EFA66FAF17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.138.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cc:2b:15:8e:6b:03:2c:3c:06:30:30:bc:6d:1c:4a:45:ee: ac:6f:fe:18:93:4d:62:fc:2c:cb:c0:cb:6f:fa:34:ed:2a:f7: 1c:64:13:27:06:31:7c:b1:4a:4a:44:f5:b5:b4:1c:06:d8:3c: b8:26:00:ae:a2:8a:73:99:fa:4f:9c:c7:e2:47:0d:c9:7d:50: 2c:0d:8c:e3:da:f2:c8:42:46:68:36:78:a9:a6:cd:9b:b7:a0: 98:2a:bc:d7:9a:71:37:9d:7d:4b:93:06:59:6c:a1:07:85:62: c9:95:2f:2c:3d:92:2d:a2:72:05:84:e7:da:36:1c:ae:e3:41: 37:41:1e:19:66:14:9e:30:8d:13:e6:96:5a:99:05:1e:3e:8e: 29:04:f9:da:49:89:24:31:ec:6f:32:7a:cb:df:63:f6:5c:57: 1b:61:dd:3b:f0:d7:17:5b:b0:9e:13:dd:8f:dd:24:c8:38:e6: 38:52:9d:e1:b5:4f:57:0c:bc:82:6a:e1:12:43:1b:12:66:1a: df:0a:6b:d5:f8:a1:3d:c6:79:e4:ee:7b:b1:e5:b6:c3:d9:4e: 25:49:c1:86:ad:3b:ea:74:16:70:f4:12:de:58:65:b7:7e:0c: f7:94:40:44:17:f6:5c:05:43:a9:78:9e:9a:7b:84:19:05:a8: a1:c1:43:cc -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJTHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDcxODA3MzQwNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY5OGM1NmQtOTg4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPuEclEIvpmmAhvxbLPN1jxt/KETqdI5zgCLMu+NrSw47cvCqs4OuyWT0OVQ NyKZl6ePM8eL9GCC5180SLxn1EFAQPcHzdotgKraNeqHZmvszNBgHoKVdsdwibgs Xd26riYH5vgHhhdjRF+SJrJChAPsAWrrQJDEpTj/nIVi+j/K4th2g1b273G+CK9e Pp5Qx4On8S2Y1XrgSxoFIy9ssDgdyp5OQQig7TurZYuzPG4XEEl16lMYSModQvQF kvofX+WCO/NZ80LNJxRSsgIxsFGGU04PVxnLwG/J2/duDp8k9EMIyNnFSfByuTcU Y95qu/ASCtOCvKg2J96s/aCwoJ8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRv+jiV R4UmDu5QI4L2pVZ+nFWcYjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFDNTIyRTND NDREODExRUZBNjZGQUYxN0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ5OKMA0GCSqGSIb3DQEBCwUAA4IBAQA6zCsVjmsDLDwG MDC8bRxKRe6sb/4Yk01i/CzLwMtv+jTtKvccZBMnBjF8sUpKRPW1tBwG2Dy4JgCu oopzmfpPnMfiRw3JfVAsDYzj2vLIQkZoNnipps2bt6CYKrzXmnE3nX1LkwZZbKEH hWLJlS8sPZItonIFhOfaNhyu40E3QR4ZZhSeMI0T5pZamQUePo4pBPnaSYkkMexv MnrL32P2XFcbYd078NcXW7CeE92P3STIOOY4Up3htU9XDLyCauESQxsSZhrfCmvV +KE9xnnk7nux5bbD2U4lScGGrTvqdBZw9BLeWGW3fgz3lEBEF/ZcBUOpeJ6ae4QZ BaihwUPM -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:42 2025 by rpki-client