$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa File: 335C17302CD711ECA528B744C4F9AE02.roa (raw, json) Hash identifier: psQMR8QED+GENRYDHqS2cGoiQSVAD3UQDSOKqW56zSY= Subject key identifier: 6C:34:D8:EA:EA:9F:09:09:15:C9:87:7D:33:C5:8B:C1:09:07:91:19 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8C53 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa Signing time: Thu 30 May 2024 16:10:51 +0000 ROA not before: Thu 30 May 2024 16:10:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138771 IP address blocks: 103.71.16.0/22 maxlen: 24 103.139.4.0/23 maxlen: 24 103.179.2.0/23 maxlen: 24 2001:df2:8e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35923 (0x8c53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:10:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a50a-c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:5f:0d:4d:29:b3:e3:af:b9:f0:ec:cc:ca: 48:d3:05:d7:8e:cd:af:f2:a5:11:b4:7d:f3:6d:da: d8:50:3a:a1:66:3d:f3:ad:df:1c:83:6f:e3:4e:a3: 18:6c:b7:d7:a0:1e:dd:e0:66:bd:62:d5:a6:9c:49: 73:ec:1d:94:62:fe:2e:ae:a8:75:f7:44:ab:1e:57: c8:47:92:70:dd:87:04:f5:df:4b:30:b8:11:01:a3: a0:67:10:8b:62:3e:e8:1e:28:cb:c0:b3:bd:ec:e4: 79:51:b8:36:00:8c:e0:bb:1d:44:60:0d:83:ab:dd: 85:25:ac:15:2b:8b:e2:8d:15:ed:7d:56:c6:ba:71: 9f:27:d6:31:66:de:62:ec:da:7d:d2:3e:97:f6:e9: e0:54:e2:4e:c5:ec:94:b1:e9:b5:52:03:95:c9:b8: 1b:0d:4c:4a:48:06:1a:b1:0b:0a:e2:1f:42:ee:5b: d6:63:2f:bf:44:bd:89:e9:bb:4b:ab:28:8c:04:b0: 97:5e:00:1c:68:2d:79:61:88:41:b7:6a:50:e7:79: 3d:a3:a6:67:0a:97:3f:69:81:4c:b4:b8:89:fb:6e: db:8e:33:75:9e:c9:93:89:92:f3:1f:c4:45:f0:52: c0:76:f2:da:92:43:27:72:1e:ca:b5:81:db:c1:61: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:D8:EA:EA:9F:09:09:15:C9:87:7D:33:C5:8B:C1:09:07:91:19 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.16.0/22 103.139.4.0/23 103.179.2.0/23 IPv6: 2001:df2:8e40::/48 Signature Algorithm: sha256WithRSAEncryption 64:e8:b7:9c:c8:d1:c9:3d:37:9a:fa:d4:76:6d:43:0a:21:1a: bf:3a:14:68:a1:ac:41:8f:0c:68:6e:7f:98:df:35:0a:a6:46: d6:7c:38:3c:1c:fe:ed:5b:8d:f1:98:1e:8a:a5:10:ae:f8:5e: fd:1f:bb:c8:f0:bc:a8:f7:15:84:9d:70:cd:87:5a:9a:0e:c7: cb:24:db:09:1e:3b:49:f3:39:bb:0f:ad:1a:85:45:e4:cf:06: 41:82:55:27:09:ef:1f:9e:99:e3:ee:1f:a4:fe:bd:e0:46:6a: 6e:6c:c2:a2:d1:63:3c:04:2a:10:3b:a9:28:4f:2a:7e:cd:fc: 05:fa:a7:2f:24:c1:7c:98:10:14:b5:56:04:0f:74:10:45:c5: 5c:8a:5c:21:64:3c:0d:9f:f8:54:4f:2b:9c:dd:d6:da:31:81: 64:cf:ed:ec:e0:4b:1f:b6:f1:4e:c9:df:ef:d3:aa:d0:93:18: 32:f2:8d:3c:6c:37:a4:c3:7b:d6:63:7c:c3:15:46:2d:a8:98: 34:09:0e:e5:51:e6:00:ce:78:5f:16:a4:0c:ce:7a:f5:13:d0: 0a:cd:74:54:99:fd:ab:89:e0:22:d6:67:34:09:ff:20:ab:0f: 4c:f8:ce:5e:6b:cb:61:65:13:90:e2:0c:0e:e1:1e:1a:09:61: 93:c2:5c:c7 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAIxTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTA1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE1MGEtYzUxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtIXw1NKbPjr7nw7MzKSNMF147Nr/KlEbR9823a2FA6oWY9863fHINv406j GGy316Ae3eBmvWLVppxJc+wdlGL+Lq6odfdEqx5XyEeScN2HBPXfSzC4EQGjoGcQ i2I+6B4oy8CzvezkeVG4NgCM4LsdRGANg6vdhSWsFSuL4o0V7X1WxrpxnyfWMWbe YuzafdI+l/bp4FTiTsXslLHptVIDlcm4Gw1MSkgGGrELCuIfQu5b1mMvv0S9iem7 S6sojASwl14AHGgteWGIQbdqUOd5PaOmZwqXP2mBTLS4iftu244zdZ7Jk4mS8x/E RfBSwHby2pJDJ3IeyrWB28Fh1yMCAwEAAaOCArIwggKuMB0GA1UdDgQWBBRsNNjq 6p8JCRXJh30zxYvBCQeRGTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzNUMxNzMw MkNENzExRUNBNTI4Qjc0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQCZ0cQAwQBZ4sEAwQBZ7MCMA8EAgACMAkDBwAgAQ3yjkAw DQYJKoZIhvcNAQELBQADggEBAGTot5zI0ck9N5r61HZtQwohGr86FGihrEGPDGhu f5jfNQqmRtZ8ODwc/u1bjfGYHoqlEK74Xv0fu8jwvKj3FYSdcM2HWpoOx8sk2wke O0nzObsPrRqFReTPBkGCVScJ7x+emePuH6T+veBGam5swqLRYzwEKhA7qShPKn7N /AX6py8kwXyYEBS1VgQPdBBFxVyKXCFkPA2f+FRPK5zd1toxgWTP7ezgSx+28U7J 3+/TqtCTGDLyjTxsN6TDe9ZjfMMVRi2omDQJDuVR5gDOeF8WpAzOevUT0ArNdFSZ /auJ4CLWZzQJ/yCrD0z4zl5ry2FlE5DiDA7hHhoJYZPCXMc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:33 2024 by rpki-client on console-fra.rpki-client.org