$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3012D070FE8611EB8A6F565EC4F9AE02.roa File: 3012D070FE8611EB8A6F565EC4F9AE02.roa (raw, json) Hash identifier: CMYUUv4qeerj3DfAfBUzZZVoyymm3O0LOZL7xDDbgww= Subject key identifier: 9B:2C:6F:BC:A0:45:45:2F:5A:33:B6:7D:C1:D0:4D:0A:83:A0:72:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 90CE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3012D070FE8611EB8A6F565EC4F9AE02.roa Signing time: Thu 30 May 2024 16:29:30 +0000 ROA not before: Thu 30 May 2024 16:29:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38185 IP address blocks: 220.156.184.0/24 maxlen: 24 220.156.185.0/24 maxlen: 24 220.156.186.0/24 maxlen: 24 220.156.187.0/24 maxlen: 24 220.156.188.0/24 maxlen: 24 220.156.189.0/24 maxlen: 24 220.156.190.0/24 maxlen: 24 220.156.191.0/24 maxlen: 24 2404:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37070 (0x90ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:29:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a96a-8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:d3:9c:fd:81:96:74:66:ed:5f:bd:c8:60: a5:8a:6b:cb:3e:84:94:ff:cd:28:ad:12:9b:f1:3a: 05:4f:08:f7:48:5e:6d:85:1f:da:45:a7:95:88:7d: 6f:0f:23:6a:3a:cb:b2:ee:96:3a:6c:76:fe:ff:d1: c0:75:ff:20:c5:2f:d6:a8:fd:8a:85:8f:eb:dd:f9: 70:a2:6e:f9:54:a9:86:ed:99:19:61:42:90:f7:41: 8a:74:33:b2:6d:1d:a1:ac:11:79:e5:31:21:03:d9: 6e:26:2d:4e:7b:f9:ce:1a:a3:17:aa:ac:bd:cb:8d: 84:12:7c:52:8d:74:e0:f5:aa:e8:bc:88:c1:e2:d6: fa:e6:8f:53:4a:8c:a6:2f:73:bc:77:81:fd:1b:81: 9a:85:6d:09:c5:66:d1:4d:b0:1b:cb:1e:1d:8c:2f: 88:5a:b4:6d:ba:e9:69:ab:1b:06:5b:f6:a2:5e:91: b6:88:a4:64:0b:1c:a9:a3:b2:1e:1c:38:a0:d3:66: c2:db:86:ad:69:43:a7:37:05:81:06:6c:65:c2:7e: ef:8a:76:25:44:cd:92:9b:b0:e5:4b:bd:b0:8d:79: cd:1d:92:15:12:34:bf:0c:1e:f1:08:06:2f:04:97: 80:ea:b8:c0:0b:91:50:fd:7d:bd:90:98:09:a2:66: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2C:6F:BC:A0:45:45:2F:5A:33:B6:7D:C1:D0:4D:0A:83:A0:72:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3012D070FE8611EB8A6F565EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.156.184.0/21 IPv6: 2404:4100::/48 Signature Algorithm: sha256WithRSAEncryption 1f:9a:7f:34:97:02:08:19:15:72:3e:79:96:ee:b8:75:23:56: 74:f8:27:32:48:04:91:16:c2:03:46:c8:38:11:ca:fe:bf:3e: 00:34:ff:fb:42:2b:cb:88:98:b1:1b:1d:2f:a7:30:60:36:68: b5:78:88:4a:d2:94:98:65:85:23:19:49:3c:4b:5b:50:a8:bc: 83:01:1c:46:b9:e0:44:85:66:56:4d:b7:de:27:de:9e:c5:d0: aa:95:ce:6a:30:87:ef:83:da:b5:ca:b6:fc:87:43:b5:c8:58: 0b:13:b3:20:37:24:84:c3:2f:5e:be:d5:00:da:87:62:1a:6e: 13:17:74:c2:29:d8:2e:bd:82:0d:6c:37:40:3f:01:a2:89:cc: be:82:17:12:bf:42:6c:70:10:e8:9e:bf:32:74:e6:62:3c:74: a8:c9:b4:c6:9a:97:e2:35:ff:41:d3:aa:91:d1:33:79:7b:49: 5c:ed:a0:a2:d2:36:2c:18:d2:3b:69:4d:07:fe:8d:f8:a4:f0: 72:f7:0d:43:e2:6d:ec:57:4a:a9:54:7a:3a:56:b5:fe:f0:6e: ac:92:b9:c9:2c:d2:95:d6:6e:10:de:ee:e1:c4:97:d2:45:89: ea:f5:5c:d7:b5:1f:29:01:f7:3e:67:87:fb:80:0f:d6:3e:fc: 06:9f:ea:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAJDOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjkzMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5NmEtOGM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSz05z9gZZ0Zu1fvchgpYpryz6ElP/NKK0Sm/E6BU8I90hebYUf2kWnlYh9 bw8jajrLsu6WOmx2/v/RwHX/IMUv1qj9ioWP6935cKJu+VSphu2ZGWFCkPdBinQz sm0doawReeUxIQPZbiYtTnv5zhqjF6qsvcuNhBJ8Uo104PWq6LyIweLW+uaPU0qM pi9zvHeB/RuBmoVtCcVm0U2wG8seHYwviFq0bbrpaasbBlv2ol6RtoikZAscqaOy Hhw4oNNmwtuGrWlDpzcFgQZsZcJ+74p2JUTNkpuw5Uu9sI15zR2SFRI0vwwe8QgG LwSXgOq4wAuRUP19vZCYCaJm4hUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSbLG+8 oEVFL1oztn3B0E0Kg6BytjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMwMTJEMDcw RkU4NjExRUI4QTZGNTY1RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQD3Jy4MA8EAgACMAkDBwAkBEEAAAAwDQYJKoZIhvcNAQEL BQADggEBAB+afzSXAggZFXI+eZbuuHUjVnT4JzJIBJEWwgNGyDgRyv6/PgA0//tC K8uImLEbHS+nMGA2aLV4iErSlJhlhSMZSTxLW1CovIMBHEa54ESFZlZNt94n3p7F 0KqVzmowh++D2rXKtvyHQ7XIWAsTsyA3JITDL16+1QDah2IabhMXdMIp2C69gg1s N0A/AaKJzL6CFxK/QmxwEOievzJ05mI8dKjJtMaal+I1/0HTqpHRM3l7SVztoKLS NiwY0jtpTQf+jfik8HL3DUPibexXSqlUejpWtf7wbqySucks0pXWbhDe7uHEl9JF ier1XNe1HykB9z5nh/uAD9Y+/Aaf6qM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:09 2025 by rpki-client