$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ADB36406BF11EF91D6DB51C4F9AE02.roa File: 24ADB36406BF11EF91D6DB51C4F9AE02.roa (raw, json) Hash identifier: F0ojCx+NcHpVpVWxVVpZN9Vv0ZtCmRgFi3pdeYJKkYI= Subject key identifier: 6C:52:96:D9:31:C0:0B:17:98:58:2E:BF:B5:A4:F2:46:4F:0F:F4:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8967 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ADB36406BF11EF91D6DB51C4F9AE02.roa Signing time: Thu 30 May 2024 15:58:42 +0000 ROA not before: Thu 30 May 2024 15:58:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134041 IP address blocks: 103.6.90.0/23 maxlen: 24 103.61.195.0/24 maxlen: 24 103.117.176.0/24 maxlen: 24 103.159.182.0/23 maxlen: 24 103.162.178.0/24 maxlen: 24 103.178.193.0/24 maxlen: 24 103.193.255.0/24 maxlen: 24 103.216.200.0/24 maxlen: 24 2402:ccc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35175 (0x8967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:58:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a231-f4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:82:be:5c:fd:75:e7:69:10:5e:fe:73:7c: 24:0c:93:37:67:ac:81:9b:7d:0d:9c:7a:6b:ff:16: 16:a9:12:f4:fc:61:f7:65:c3:53:46:c3:df:05:ae: 46:66:f0:e4:50:cc:f7:57:21:b2:e6:6c:78:cc:c8: 53:39:d7:67:60:82:35:5d:29:c6:17:d8:f2:22:18: 32:7c:60:b3:75:5b:a7:e1:4c:bc:09:7a:8f:ee:dc: 44:d0:51:06:cc:3d:c8:5c:58:b7:d6:c9:a4:d6:ff: e8:57:59:da:2f:c5:15:30:f8:32:3c:27:9b:67:98: 35:03:c6:b2:3d:f4:e9:78:2d:2a:0c:fa:4e:e9:9e: 6c:b4:c5:f5:bb:de:52:93:cb:34:78:9b:dd:08:bd: b7:9f:48:ef:de:d8:e3:8e:99:b9:e6:68:89:7c:95: 79:1e:ac:85:16:70:5d:de:14:e2:65:74:ed:44:3c: 36:80:fd:b1:78:a3:3d:07:d6:65:e5:f2:7f:6a:66: 03:76:cb:38:3d:27:7f:cc:b6:70:9a:4d:bb:81:ca: 90:70:29:3d:80:b3:de:59:be:2b:13:b7:4e:9f:60: f0:0d:ae:96:19:f5:5d:08:60:ef:e0:0a:23:74:e7: 97:4c:e4:8c:ff:4f:15:45:ae:06:ff:14:60:71:a6: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:52:96:D9:31:C0:0B:17:98:58:2E:BF:B5:A4:F2:46:4F:0F:F4:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ADB36406BF11EF91D6DB51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.90.0/23 103.61.195.0/24 103.117.176.0/24 103.159.182.0/23 103.162.178.0/24 103.178.193.0/24 103.193.255.0/24 103.216.200.0/24 IPv6: 2402:ccc0::/32 Signature Algorithm: sha256WithRSAEncryption 21:a2:d6:d5:0a:e4:98:66:84:0f:dd:ed:ee:e1:17:0b:47:9a: 90:ac:28:cf:d0:e6:9c:2a:a9:0f:66:38:41:ef:48:bf:0d:59: f7:1c:78:c2:82:5c:4a:d5:67:26:c5:90:f0:21:25:eb:ac:b3: ef:ba:1b:0b:b4:53:af:e2:43:29:0e:6d:0d:70:9c:f1:4e:fd: e0:30:f6:ce:f1:f2:1e:6a:5e:46:b2:3d:44:e6:43:05:6c:59: 0e:6b:f6:33:f8:12:88:fe:9c:8a:a8:96:1b:a5:a0:71:b5:cd: 46:c0:93:7a:2a:bd:e5:20:72:f3:0b:d2:8e:90:c2:e2:ea:b2: 90:70:8a:9b:24:62:f2:25:0e:6a:ae:e2:67:e1:b7:d6:ea:be: 03:4f:05:53:89:64:48:ae:75:ae:b6:6b:bb:f5:45:7b:d6:c1: b7:89:c2:6e:ce:2a:fc:45:02:02:04:f7:19:96:6f:ac:c3:28: cd:6a:de:d6:8b:25:61:8d:11:c2:3f:fb:26:3c:aa:03:c4:91: 2a:7e:39:f2:bd:9c:b8:db:20:c1:f7:e0:4f:c2:05:ec:3d:f0: a0:b2:3e:bf:53:3b:49:00:fd:95:bd:33:ab:f5:1c:e8:a5:58: e7:b8:4a:98:89:96:ec:ca:c9:26:7d:48:bc:60:7e:3c:62:cf: f4:b7:7f:77 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIDAIlnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTg0MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyMzEtZjRiYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6Kgr5c/XXnaRBe/nN8JAyTN2esgZt9DZx6a/8WFqkS9Pxh92XDU0bD3wWu Rmbw5FDM91chsuZseMzIUznXZ2CCNV0pxhfY8iIYMnxgs3Vbp+FMvAl6j+7cRNBR Bsw9yFxYt9bJpNb/6FdZ2i/FFTD4Mjwnm2eYNQPGsj306XgtKgz6TumebLTF9bve UpPLNHib3Qi9t59I797Y446ZueZoiXyVeR6shRZwXd4U4mV07UQ8NoD9sXijPQfW ZeXyf2pmA3bLOD0nf8y2cJpNu4HKkHApPYCz3lm+KxO3Tp9g8A2ulhn1XQhg7+AK I3Tnl0zkjP9PFUWuBv8UYHGmgNECAwEAAaOCAs4wggLKMB0GA1UdDgQWBBRsUpbZ McALF5hYLr+1pPJGTw/0qzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI0QURCMzY0 MDZCRjExRUY5MUQ2REI1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFgGCCsGAQUFBwEHAQH/ BEkwRzA2BAIAATAwAwQBZwZaAwQAZz3DAwQAZ3WwAwQBZ5+2AwQAZ6KyAwQAZ7LB AwQAZ8H/AwQAZ9jIMA0EAgACMAcDBQAkAszAMA0GCSqGSIb3DQEBCwUAA4IBAQAh otbVCuSYZoQP3e3u4RcLR5qQrCjP0OacKqkPZjhB70i/DVn3HHjCglxK1WcmxZDw ISXrrLPvuhsLtFOv4kMpDm0NcJzxTv3gMPbO8fIeal5Gsj1E5kMFbFkOa/Yz+BKI /pyKqJYbpaBxtc1GwJN6Kr3lIHLzC9KOkMLi6rKQcIqbJGLyJQ5qruJn4bfW6r4D TwVTiWRIrnWutmu79UV71sG3icJuzir8RQICBPcZlm+swyjNat7WiyVhjRHCP/sm PKoDxJEqfjnyvZy42yDB9+BPwgXsPfCgsj6/UztJAP2VvTOr9RzopVjnuEqYiZbs yskmfUi8YH48Ys/0t393 -----END CERTIFICATE-----Generated at Sun Feb 16 20:18:46 2025 by rpki-client