$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2124D4CC803B11ED88B64D3DC4F9AE02.roa File: 2124D4CC803B11ED88B64D3DC4F9AE02.roa (raw, json) Hash identifier: 0dZtumRMOj0i8UyptiLGUvIgUjpb245kB7YtaKUY4PM= Subject key identifier: 34:ED:24:6E:89:95:D9:46:7D:E2:BD:AA:C3:FD:82:CC:7C:9E:B5:19 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8AE3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2124D4CC803B11ED88B64D3DC4F9AE02.roa Signing time: Thu 30 May 2024 16:04:51 +0000 ROA not before: Thu 30 May 2024 16:04:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136312 IP address blocks: 103.86.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35555 (0x8ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:04:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a3a3-d01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:cc:04:f8:d8:f9:9c:02:2b:2d:de:0c:46: 9b:f5:45:41:1a:b1:3b:0a:b2:58:e3:9a:df:a6:db: 46:a0:07:e7:8c:04:b1:50:c7:8e:be:f2:84:2e:b4: 93:4b:ab:43:f1:73:d0:a8:e9:cd:b2:7d:ac:a0:57: c0:c8:36:5e:d8:3f:51:09:85:e3:23:40:06:34:74: 1e:cf:3d:66:34:36:4f:ab:5b:8e:fb:27:c9:97:83: 96:c6:aa:36:bc:f0:9b:32:5e:e7:e6:9b:80:40:41: 81:e2:c6:4c:4f:f7:43:12:cc:bf:e7:10:e5:b6:4e: 41:a4:fe:77:c7:5e:5b:1d:0a:97:93:30:5b:f3:0e: af:4e:c2:db:e4:4f:c4:6c:75:8e:fe:50:1e:cc:29: 3f:7c:03:db:5b:cf:cb:1f:c4:c8:6f:bf:5d:4a:2c: d2:1d:ec:53:ab:be:e6:d5:5c:64:ad:a0:6e:8c:76: be:3a:da:02:89:24:09:d4:62:ab:06:f3:ff:7c:71: e9:4b:ad:25:21:6e:11:f1:ed:3b:a2:e6:e2:fc:7e: ff:c5:8b:e5:df:5c:c0:53:a0:4b:28:bd:3d:ff:c1: 67:5e:74:b9:3b:20:9c:6b:12:cd:d2:fb:38:37:7a: a2:97:b0:98:36:45:f6:88:37:fc:6f:d3:a0:17:69: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:ED:24:6E:89:95:D9:46:7D:E2:BD:AA:C3:FD:82:CC:7C:9E:B5:19 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2124D4CC803B11ED88B64D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.4.0/22 Signature Algorithm: sha256WithRSAEncryption ba:8e:14:c9:68:66:73:e9:57:eb:96:c2:68:69:f7:4f:e5:c5: 8c:1a:f7:ec:40:a0:30:45:93:99:ed:7f:1d:58:c4:ea:a1:ba: 01:59:2f:5d:a2:c8:70:d3:cb:9f:0a:54:b1:57:22:3b:14:80: 0d:8a:02:0b:c5:d0:df:24:ae:9f:d5:35:41:31:de:8b:7b:7e: 33:94:b5:73:88:f6:f0:9f:0b:15:ef:79:55:0d:d2:17:17:87: c6:9a:4b:f7:0a:bc:7a:76:98:71:25:14:8c:13:8f:7a:2b:d6: 7d:7b:61:e9:74:5e:3c:a1:4c:07:67:73:ae:46:35:02:c3:5b: 43:7e:3e:bc:dc:1d:cb:61:2a:fe:e0:9b:af:f2:88:15:18:91: e0:99:36:0b:bb:a9:1e:dd:b0:8a:a3:b2:d3:ff:e2:da:47:ae: 03:0e:41:ce:59:e9:06:af:4b:84:82:94:2d:c0:78:e2:0f:78: 9c:7d:92:f9:04:91:04:d7:ac:bb:13:47:db:f9:0d:56:d1:05: 1a:3a:f0:55:36:f7:af:65:a7:08:42:16:19:3f:d2:29:cf:37: 57:54:7d:01:13:ee:1c:2d:37:e1:54:3f:6d:55:c1:c6:10:e4: d7:ff:11:24:74:8d:b1:8d:fc:69:a1:5a:2d:5d:29:3b:30:de: 08:a6:b7:46 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIrjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDQ1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzYTMtZDAxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVHzAT42PmcAist3gxGm/VFQRqxOwqyWOOa36bbRqAH54wEsVDHjr7yhC60 k0urQ/Fz0KjpzbJ9rKBXwMg2Xtg/UQmF4yNABjR0Hs89ZjQ2T6tbjvsnyZeDlsaq NrzwmzJe5+abgEBBgeLGTE/3QxLMv+cQ5bZOQaT+d8deWx0Kl5MwW/MOr07C2+RP xGx1jv5QHswpP3wD21vPyx/EyG+/XUos0h3sU6u+5tVcZK2gbox2vjraAokkCdRi qwbz/3xx6UutJSFuEfHtO6Lm4vx+/8WL5d9cwFOgSyi9Pf/BZ150uTsgnGsSzdL7 ODd6opewmDZF9og3/G/ToBdpaV8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ07SRu iZXZRn3ivarD/YLMfJ61GTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIxMjRENEND ODAzQjExRUQ4OEI2NEQzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ1YEMA0GCSqGSIb3DQEBCwUAA4IBAQC6jhTJaGZz6Vfr lsJoafdP5cWMGvfsQKAwRZOZ7X8dWMTqoboBWS9doshw08ufClSxVyI7FIANigIL xdDfJK6f1TVBMd6Le34zlLVziPbwnwsV73lVDdIXF4fGmkv3Crx6dphxJRSME496 K9Z9e2HpdF48oUwHZ3OuRjUCw1tDfj683B3LYSr+4Juv8ogVGJHgmTYLu6ke3bCK o7LT/+LaR64DDkHOWekGr0uEgpQtwHjiD3icfZL5BJEE16y7E0fb+Q1W0QUaOvBV NvevZacIQhYZP9IpzzdXVH0BE+4cLTfhVD9tVcHGEOTX/xEkdI2xjfxpoVotXSk7 MN4IprdG -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:06 2024 by rpki-client on console-ams.rpki-client.org