$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa File: 32539C60CA1511ECA7D45938C4F9AE02.roa (raw, json) Hash identifier: kjWpEahcIIJSj+d4akdI5kuDEqcp+qBQk+VCZ/nbf3I= Subject key identifier: 7F:33:47:BA:A4:10:3D:52:35:FA:1E:F1:58:A2:21:1F:36:D8:DA:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B66 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa Signing time: Thu 30 May 2024 16:07:02 +0000 ROA not before: Thu 30 May 2024 16:07:02 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137098 IP address blocks: 103.105.124.0/24 maxlen: 24 103.105.125.0/24 maxlen: 24 103.105.126.0/24 maxlen: 24 103.105.127.0/24 maxlen: 24 103.161.92.0/23 maxlen: 24 103.180.221.0/24 maxlen: 24 103.206.180.0/24 maxlen: 24 103.206.181.0/24 maxlen: 24 103.206.182.0/24 maxlen: 24 103.206.183.0/24 maxlen: 24 137.59.96.0/22 maxlen: 22 137.59.96.0/24 maxlen: 24 137.59.97.0/24 maxlen: 24 137.59.98.0/24 maxlen: 24 137.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35686 (0x8b66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:07:02 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a425-2321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:e9:0f:3a:38:05:4e:86:cf:b0:69:15:63: 7c:ce:32:49:26:5b:51:1d:97:9c:0d:cd:52:9d:60: 3a:c1:25:8b:13:cb:6a:15:36:ba:e8:65:f1:35:9d: f1:d7:47:21:02:c8:5b:28:56:af:c1:d7:d3:f4:53: ec:e5:9e:e9:3c:96:0c:68:99:f4:53:d3:ac:0d:11: 7e:0d:b9:fa:18:59:b1:b2:91:12:fd:48:9f:34:b1: f0:20:6f:23:c6:e5:ef:14:16:b9:19:e5:3f:4c:a7: e4:d4:cb:ce:aa:ea:14:95:e8:e1:69:73:ff:c6:f8: d0:5e:18:c3:b3:71:d6:ac:e8:43:0a:44:da:f6:48: 9b:d7:e4:55:75:3c:57:88:e4:2c:92:d3:bf:52:b3: fc:4f:33:b4:c2:52:64:b6:7b:32:7f:e6:8f:1c:ee: b5:60:74:1d:1a:35:cb:63:cf:8e:2e:1a:eb:b9:d8: 65:36:6d:53:88:78:02:34:3a:1a:5e:71:f6:6f:70: e3:cc:07:c7:0d:9e:95:7b:52:23:a8:39:a1:25:a6: bc:d6:cb:47:4f:e1:07:34:1c:63:76:b4:8d:5d:62: 9e:88:e5:b6:a6:10:ee:c3:2b:43:f7:2f:0e:aa:e3: 7f:29:19:09:e8:6e:83:23:b7:93:ed:a5:bd:3e:1d: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:47:BA:A4:10:3D:52:35:FA:1E:F1:58:A2:21:1F:36:D8:DA:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.124.0/22 103.161.92.0/23 103.180.221.0/24 103.206.180.0/22 137.59.96.0/22 Signature Algorithm: sha256WithRSAEncryption 57:05:78:75:75:f2:73:43:6a:e5:ed:fd:1f:82:f3:b2:78:76: 85:b8:38:3b:84:b9:4d:6b:ad:5d:24:9f:3a:6c:d2:cc:7e:07: fd:e8:c5:1c:fc:cd:5f:77:80:bf:dd:b8:24:a8:6f:3a:21:05: 1e:e4:c2:7e:c3:39:e7:95:83:91:3a:a6:67:9a:39:cf:0c:b6: 06:ca:35:2f:b4:43:55:3c:ba:91:60:dc:92:86:c0:63:2e:9d: 18:29:c8:7a:39:23:d5:97:0c:35:a6:a9:2e:fd:63:f3:82:30: e2:95:0d:a0:1f:c5:84:99:da:52:59:bd:fd:35:d6:e5:cd:2a: ff:de:38:da:39:32:89:07:b7:29:4e:17:c9:fd:b5:fe:92:ce: 5d:13:19:d8:bb:7b:23:e5:23:fd:fa:33:20:4d:14:73:d4:21: de:b6:d6:f0:06:ec:82:63:ab:0e:cd:1d:4c:09:be:15:3d:cf: 14:2d:3c:29:e0:1b:7e:b9:fb:fd:ee:5e:29:13:75:a2:14:05: 6e:a3:3e:b5:5a:19:35:76:19:6c:57:0f:1a:e6:33:fe:dc:01: 23:ae:f1:2c:1b:49:eb:52:ff:12:6a:42:8f:f5:85:e4:8b:ef: 10:f9:80:ef:43:02:c8:24:8b:27:1b:c6:35:bc:81:ed:28:df: 6d:c0:30:ad -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAItmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDcwMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0MjUtMjMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOP66Q86OAVOhs+waRVjfM4ySSZbUR2XnA3NUp1gOsElixPLahU2uuhl8TWd 8ddHIQLIWyhWr8HX0/RT7OWe6TyWDGiZ9FPTrA0Rfg25+hhZsbKREv1InzSx8CBv I8bl7xQWuRnlP0yn5NTLzqrqFJXo4Wlz/8b40F4Yw7Nx1qzoQwpE2vZIm9fkVXU8 V4jkLJLTv1Kz/E8ztMJSZLZ7Mn/mjxzutWB0HRo1y2PPji4a67nYZTZtU4h4AjQ6 Gl5x9m9w48wHxw2elXtSI6g5oSWmvNbLR0/hBzQcY3a0jV1inojltqYQ7sMrQ/cv DqrjfykZCehugyO3k+2lvT4dc3kCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBR/M0e6 pBA9UjX6HvFYoiEfNtjaajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyNTM5QzYw Q0ExNTExRUNBN0Q0NTkzOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQCZ2l8AwQBZ6FcAwQAZ7TdAwQCZ860AwQCiTtgMA0GCSqG SIb3DQEBCwUAA4IBAQBXBXh1dfJzQ2rl7f0fgvOyeHaFuDg7hLlNa61dJJ86bNLM fgf96MUc/M1fd4C/3bgkqG86IQUe5MJ+wznnlYOROqZnmjnPDLYGyjUvtENVPLqR YNyShsBjLp0YKch6OSPVlww1pqku/WPzgjDilQ2gH8WEmdpSWb39NdblzSr/3jja OTKJB7cpThfJ/bX+ks5dExnYu3sj5SP9+jMgTRRz1CHettbwBuyCY6sOzR1MCb4V Pc8ULTwp4Bt+ufv97l4pE3WiFAVuoz61Whk1dhlsVw8a5jP+3AEjrvEsG0nrUv8S akKP9YXki+8Q+YDvQwLIJIsnG8Y1vIHtKN9twDCt -----END CERTIFICATE-----Generated at Sun Feb 16 20:16:05 2025 by rpki-client