$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa File: 31A7BAD2696F11ECA2AB8534C4F9AE02.roa (raw, json) Hash identifier: mM6JNqHP5wb8TMLVwsIwb5u4+L3JlyRjQTtdvRaCfBI= Subject key identifier: 39:15:78:34:1B:EF:18:F7:1C:3F:40:DC:46:38:1F:18:B3:3A:0C:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8989 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa Signing time: Thu 30 May 2024 15:59:14 +0000 ROA not before: Thu 30 May 2024 15:59:14 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134280 IP address blocks: 103.81.139.0/24 maxlen: 24 103.95.234.0/24 maxlen: 24 103.104.202.0/23 maxlen: 24 103.197.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35209 (0x8989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:59:14 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a252-4b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:e7:cc:23:7c:35:7f:2f:9c:0e:29:b1:11: d0:ec:15:da:64:cd:aa:ef:40:c7:be:c7:79:3b:40: 9f:88:98:46:7c:f9:ce:7c:d9:62:e5:54:74:02:7f: 62:13:55:0d:cb:53:6c:d8:5a:af:0c:c2:eb:0b:3d: 27:fb:f4:18:19:a6:58:0e:e9:10:c5:55:da:38:a5: d8:96:72:d0:43:b6:cb:e2:9d:da:b3:3e:d8:47:1c: f7:9f:f4:92:e6:ab:97:f0:84:41:7e:5e:fa:c5:95: d4:84:8e:0e:c5:dc:15:32:66:d8:39:e6:bf:2f:cd: d1:14:93:e8:8d:93:39:0f:20:d8:02:c3:d6:b5:e2: 88:5c:4f:28:09:f5:46:8e:f3:a9:fd:11:54:58:89: be:76:fd:79:02:f6:3a:96:f2:eb:ec:c6:c4:a6:6d: 70:46:d6:7c:a3:82:d4:4b:15:a0:7b:ac:f9:bc:60: b6:a2:48:9e:00:57:76:57:b9:c9:97:24:13:b6:f9: 3b:a7:09:ad:f6:52:50:94:b1:fe:8f:3c:86:62:ca: 43:12:62:5a:1f:9d:38:d2:46:82:91:89:b0:a8:c0: 4a:7c:01:8d:4c:13:00:6f:93:98:35:3f:fb:4d:b6: c1:0b:ed:b1:48:8f:53:49:3e:b5:bb:7f:d5:a1:87: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:15:78:34:1B:EF:18:F7:1C:3F:40:DC:46:38:1F:18:B3:3A:0C:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.139.0/24 103.95.234.0/24 103.104.202.0/23 103.197.106.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:7e:53:df:f1:0f:9c:44:46:d2:4f:c3:50:c9:0c:ef:37:3b: d4:e7:5f:50:cc:82:70:b1:05:3e:41:81:5d:63:d2:85:20:54: 2b:c1:de:41:ef:ca:1f:7e:0f:ba:4c:5d:7c:af:2e:70:2b:18: 5e:21:5b:fa:35:6d:b7:ba:e0:2d:e7:76:ca:13:27:f3:94:5f: ea:da:51:04:28:6b:00:85:15:c5:a6:2a:93:90:6d:c9:c1:cd: e1:2f:39:3c:83:46:95:ef:99:cf:6f:3f:77:75:11:b5:40:df: 00:84:be:73:38:23:5f:b0:7e:40:87:d1:47:33:13:e4:d4:3a: 24:f6:be:d7:85:7e:9b:26:bb:19:de:ac:29:02:71:96:88:70: d4:e5:1f:5a:fc:29:a6:36:3c:14:1c:b6:63:ea:09:ad:38:95: aa:fa:6b:8c:e2:05:a9:fc:4c:0a:23:2f:a7:ac:9b:01:74:57: 3e:64:db:d9:db:eb:1a:21:94:63:f4:21:09:fe:07:e4:c0:7f: 7d:16:bd:3d:4e:af:c4:52:b6:76:9e:9e:14:8d:6d:58:1c:92: 40:75:e2:ca:4a:93:c7:97:24:3b:9b:0c:68:b8:88:ab:b5:33: bf:f8:e8:34:ef:70:54:fb:7d:72:a8:ff:6a:5c:df:1e:83:4e: 5e:cb:a2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAImJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTkxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyNTItNGI4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANN958wjfDV/L5wOKbER0OwV2mTNqu9Ax77HeTtAn4iYRnz5znzZYuVUdAJ/ YhNVDctTbNharwzC6ws9J/v0GBmmWA7pEMVV2jil2JZy0EO2y+Kd2rM+2Ecc95/0 kuarl/CEQX5e+sWV1ISODsXcFTJm2Dnmvy/N0RST6I2TOQ8g2ALD1rXiiFxPKAn1 Ro7zqf0RVFiJvnb9eQL2Opby6+zGxKZtcEbWfKOC1EsVoHus+bxgtqJIngBXdle5 yZckE7b5O6cJrfZSUJSx/o88hmLKQxJiWh+dONJGgpGJsKjASnwBjUwTAG+TmDU/ +022wQvtsUiPU0k+tbt/1aGHDYUCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBQ5FXg0 G+8Y9xw/QNxGOB8YszoM/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxQTdCQUQy Njk2RjExRUNBMkFCODUzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAZ1GLAwQAZ1/qAwQBZ2jKAwQBZ8VqMA0GCSqGSIb3DQEB CwUAA4IBAQAeflPf8Q+cREbST8NQyQzvNzvU519QzIJwsQU+QYFdY9KFIFQrwd5B 78offg+6TF18ry5wKxheIVv6NW23uuAt53bKEyfzlF/q2lEEKGsAhRXFpiqTkG3J wc3hLzk8g0aV75nPbz93dRG1QN8AhL5zOCNfsH5Ah9FHMxPk1Dok9r7XhX6bJrsZ 3qwpAnGWiHDU5R9a/CmmNjwUHLZj6gmtOJWq+muM4gWp/EwKIy+nrJsBdFc+ZNvZ 2+saIZRj9CEJ/gfkwH99Fr09Tq/EUrZ2np4UjW1YHJJAdeLKSpPHlyQ7mwxouIir tTO/+Og073BU+31yqP9qXN8eg05ey6Lm -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:58 2025 by rpki-client