$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa File: 2D812ABA2A8111ECA6F7183CC4F9AE02.roa (raw, json) Hash identifier: mgne3tYXUtHg+mYS8pNlpgyOHTIweJIgVY7jZJYX/JU= Subject key identifier: AD:C7:3E:52:B7:A2:5B:51:53:47:01:2E:0B:25:27:97:49:25:04:5A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DC8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa Signing time: Thu 30 May 2024 16:17:00 +0000 ROA not before: Thu 30 May 2024 16:17:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141843 IP address blocks: 103.167.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36296 (0x8dc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:17:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a67c-6b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:0d:c7:bb:ef:1e:f5:77:59:c0:7f:4d:8e: 4d:05:d8:71:c0:46:94:15:55:1f:19:b7:f6:b4:b4: f4:5e:40:85:15:86:0c:4e:6c:1d:98:e1:da:7a:09: ca:48:de:c8:95:e5:1c:cb:da:81:22:e2:42:1d:14: 80:0d:41:67:04:63:99:19:73:f4:29:b1:80:89:de: f5:17:13:1f:02:ec:2e:cd:4e:1a:92:e4:30:5c:b5: 15:b8:36:6e:a8:b3:58:ae:3a:8c:1b:3c:0b:24:fd: 29:4a:cf:45:17:49:04:9e:a0:19:86:37:7e:f9:2d: 4f:12:70:6e:b1:26:bb:18:fd:7f:4c:8b:7b:b1:7a: 59:b2:49:ba:ed:d3:60:3c:51:8b:c9:a5:7b:34:b1: e2:e1:07:0b:86:57:2a:3b:be:ed:1f:26:36:5f:a0: f4:e5:b9:67:f8:65:be:1e:1f:3a:cd:bf:d5:cd:1a: ed:4f:a9:09:f5:6d:57:96:2c:12:89:ec:2a:0c:21: 96:e4:60:20:fe:5c:cd:74:70:d4:63:d8:d0:05:9b: 36:18:0f:79:3b:d2:fc:c0:f9:92:07:c0:d5:45:1d: 5e:1f:ea:5a:e4:39:56:c0:64:93:62:a4:55:3f:db: 91:ba:d2:40:dc:45:84:e6:45:9c:fd:99:a0:e0:5f: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C7:3E:52:B7:A2:5B:51:53:47:01:2E:0B:25:27:97:49:25:04:5A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.223.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b9:02:e8:eb:09:65:0e:4c:4c:1f:45:08:5c:57:0b:58:88: 2b:b0:5b:ab:bf:d5:20:c8:23:fe:12:b1:ea:66:30:99:00:b2: d4:42:f4:9b:fe:b0:b1:55:84:3d:9f:72:c7:c8:00:27:4d:2e: bc:28:a9:4c:c8:4c:f9:47:ea:3a:bd:5c:61:91:fd:fa:11:f7: eb:32:50:59:ed:61:15:fb:d7:93:db:0f:9f:32:83:57:96:a1: b4:f6:ec:62:ea:40:b7:9c:b6:5b:98:5c:47:85:15:28:ab:42: 9e:a1:e4:d7:cd:3d:bd:97:3b:47:51:fa:f7:28:b2:17:56:73: 69:f5:79:bb:f1:74:ef:81:f9:d1:43:0a:72:c5:82:39:59:9c: 0d:a1:48:1d:1b:d3:5e:73:19:69:d1:f3:1d:74:9c:43:f5:af: 0d:e1:f4:73:8f:6e:0c:f3:53:0d:40:79:b0:47:2c:f7:5e:52: 05:5f:ab:01:58:5f:6f:93:f2:45:ed:04:d6:b4:b2:9f:02:11: 21:30:87:29:ed:9b:17:74:0c:f6:c8:1f:68:a6:46:58:64:62: f0:52:b2:0f:f2:e0:bb:d5:7f:b1:07:f3:43:fe:fb:a0:46:c9: 0e:bb:14:90:94:7d:e0:4f:57:f4:57:ad:d7:e2:c5:a9:c8:ce: 49:59:3a:b5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI3IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTcwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2N2MtNmI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMT5Dce77x71d1nAf02OTQXYccBGlBVVHxm39rS09F5AhRWGDE5sHZjh2noJ ykjeyJXlHMvagSLiQh0UgA1BZwRjmRlz9CmxgIne9RcTHwLsLs1OGpLkMFy1Fbg2 bqizWK46jBs8CyT9KUrPRRdJBJ6gGYY3fvktTxJwbrEmuxj9f0yLe7F6WbJJuu3T YDxRi8mlezSx4uEHC4ZXKju+7R8mNl+g9OW5Z/hlvh4fOs2/1c0a7U+pCfVtV5Ys EonsKgwhluRgIP5czXRw1GPY0AWbNhgPeTvS/MD5kgfA1UUdXh/qWuQ5VsBkk2Kk VT/bkbrSQNxFhOZFnP2ZoOBfB80CAwEAAaOCApUwggKRMB0GA1UdDgQWBBStxz5S t6JbUVNHAS4LJSeXSSUEWjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJEODEyQUJB MkE4MTExRUNBNkY3MTgzQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6ffMA0GCSqGSIb3DQEBCwUAA4IBAQAEuQLo6wllDkxM H0UIXFcLWIgrsFurv9UgyCP+ErHqZjCZALLUQvSb/rCxVYQ9n3LHyAAnTS68KKlM yEz5R+o6vVxhkf36EffrMlBZ7WEV+9eT2w+fMoNXlqG09uxi6kC3nLZbmFxHhRUo q0KeoeTXzT29lztHUfr3KLIXVnNp9Xm78XTvgfnRQwpyxYI5WZwNoUgdG9Necxlp 0fMddJxD9a8N4fRzj24M81MNQHmwRyz3XlIFX6sBWF9vk/JF7QTWtLKfAhEhMIcp 7ZsXdAz2yB9opkZYZGLwUrIP8uC71X+xB/ND/vugRskOuxSQlH3gT1f0V63X4sWp yM5JWTq1 -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:57 2025 by rpki-client