$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34591BD0D17311EF8ACDDC78C4F9AE02.roa File: 34591BD0D17311EF8ACDDC78C4F9AE02.roa (raw, json) Hash identifier: xzInohvQ44EJpjpA5Av9weI0lA9/fVQY+ddYQKGa/Ug= Subject key identifier: 37:9C:64:2C:8D:A7:58:65:99:25:33:3C:FA:3A:10:D3:C0:2F:A6:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A254 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34591BD0D17311EF8ACDDC78C4F9AE02.roa Signing time: Mon 13 Jan 2025 05:57:00 +0000 ROA not before: Mon 13 Jan 2025 05:57:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135244 IP address blocks: 43.226.2.0/23 maxlen: 24 45.113.62.0/23 maxlen: 24 103.42.16.0/23 maxlen: 24 103.220.24.0/22 maxlen: 24 103.235.23.0/24 maxlen: 24 103.254.27.0/24 maxlen: 24 2403:73c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Feb 2025 09:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41556 (0xa254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 13 05:57:00 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6784ab2c-175e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:ce:7f:aa:59:71:3e:32:06:2b:48:40:43: 2e:40:5e:b9:02:c6:4b:1f:26:75:df:66:83:fe:65: fc:48:df:ef:d3:ca:d2:c8:56:cc:c2:5f:8d:fe:7d: 6a:74:c4:2f:93:eb:32:0a:16:ff:d2:17:75:c3:34: 69:24:a2:ba:45:30:89:f5:75:4a:d4:eb:45:bc:6f: b0:7f:72:c5:fa:45:a5:4a:b3:57:a4:15:98:3f:96: cf:8a:89:ad:94:64:01:67:8b:0b:08:2e:88:9e:ed: ab:1e:d8:a2:56:82:73:a1:34:35:72:e8:b7:62:63: 65:06:e7:ae:64:47:db:f7:20:ed:d3:06:36:80:87: d1:dd:d1:af:bd:7d:35:07:d6:7f:62:20:3c:3d:72: 8a:bd:d9:f7:2e:de:5a:ce:51:d1:ce:14:64:ee:67: 07:bc:f1:02:8c:9d:8b:01:44:14:14:d9:30:2c:2a: d4:b5:4b:4f:5f:fe:36:11:44:9f:e2:70:80:32:1f: b8:77:24:cc:1a:ad:3f:06:d6:87:83:cd:79:09:61: 1b:80:a1:6e:78:fc:c3:52:be:87:66:12:98:42:84: 6d:fa:fc:86:76:1c:a5:b0:6e:cc:5d:ee:8d:0e:68: 6b:bf:76:48:5e:e5:24:52:b4:4e:11:32:1e:06:c2: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9C:64:2C:8D:A7:58:65:99:25:33:3C:FA:3A:10:D3:C0:2F:A6:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/34591BD0D17311EF8ACDDC78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.2.0/23 45.113.62.0/23 103.42.16.0/23 103.220.24.0/22 103.235.23.0/24 103.254.27.0/24 IPv6: 2403:73c0::/32 Signature Algorithm: sha256WithRSAEncryption 37:1e:dd:3d:5d:d2:c5:69:84:d2:d1:ed:0d:43:d6:ae:be:06: 2e:0b:eb:73:bb:ac:83:e5:2c:4d:da:df:60:db:c2:e0:a2:8c: 14:66:e4:57:19:8f:d2:99:7f:c1:f0:c8:61:e6:a4:a4:81:d9: 4e:8c:fa:dc:90:a6:3b:16:94:d8:79:0d:42:3c:95:9e:ff:67: 0c:41:a7:0d:fd:68:1d:dd:00:27:e9:b1:fc:0e:de:83:06:07: 46:bd:fc:ed:ea:9e:13:d5:da:95:6a:7d:36:a4:94:a7:c6:65: 3c:d5:d1:2e:5d:04:97:96:1c:02:af:6b:aa:c3:1d:da:58:2d: b5:3d:df:f0:56:50:b6:e9:1d:ee:61:9a:0a:96:e7:f7:4e:9c: 3e:38:51:36:77:74:d8:93:f3:b2:b6:45:f6:58:45:78:a1:1e: 1b:02:23:6e:ca:9f:0e:e8:e1:96:6e:a3:5b:bd:3f:0f:f9:9b: 62:3e:2d:c9:d4:b0:56:d6:9d:40:b1:3b:47:41:78:a6:9a:db: c8:b1:37:36:4d:d6:96:06:3a:c1:0a:fb:be:1e:03:8f:7a:78: e7:ab:8d:9b:76:d1:d8:5b:e3:87:e7:e2:30:ff:26:72:0d:40: e9:86:ce:ee:1c:c8:9b:6f:ba:ea:ce:36:87:3f:e2:c8:89:73: 42:89:39:c5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIDAKJUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDExMzA1NTcwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc4NGFiMmMtMTc1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNnzn+qWXE+MgYrSEBDLkBeuQLGSx8mdd9mg/5l/Ejf79PK0shWzMJfjf59 anTEL5PrMgoW/9IXdcM0aSSiukUwifV1StTrRbxvsH9yxfpFpUqzV6QVmD+Wz4qJ rZRkAWeLCwguiJ7tqx7YolaCc6E0NXLot2JjZQbnrmRH2/cg7dMGNoCH0d3Rr719 NQfWf2IgPD1yir3Z9y7eWs5R0c4UZO5nB7zxAoydiwFEFBTZMCwq1LVLT1/+NhFE n+JwgDIfuHckzBqtPwbWh4PNeQlhG4Chbnj8w1K+h2YSmEKEbfr8hnYcpbBuzF3u jQ5oa792SF7lJFK0ThEyHgbC1zsCAwEAAaOCAsIwggK+MB0GA1UdDgQWBBQ3nGQs jadYZZklMzz6OhDTwC+mITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0NTkxQkQw RDE3MzExRUY4QUNEREM3OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQBK+ICAwQBLXE+AwQBZyoQAwQCZ9wYAwQAZ+sXAwQAZ/4b MA0EAgACMAcDBQAkA3PAMA0GCSqGSIb3DQEBCwUAA4IBAQA3Ht09XdLFaYTS0e0N Q9auvgYuC+tzu6yD5SxN2t9g28LgoowUZuRXGY/SmX/B8Mhh5qSkgdlOjPrckKY7 FpTYeQ1CPJWe/2cMQacN/Wgd3QAn6bH8Dt6DBgdGvfzt6p4T1dqVan02pJSnxmU8 1dEuXQSXlhwCr2uqwx3aWC21Pd/wVlC26R3uYZoKluf3Tpw+OFE2d3TYk/OytkX2 WEV4oR4bAiNuyp8O6OGWbqNbvT8P+ZtiPi3J1LBW1p1AsTtHQXimmtvIsTc2TdaW BjrBCvu+HgOPenjnq42bdtHYW+OH5+Iw/yZyDUDphs7uHMibb7rqzjaHP+LIiXNC iTnF -----END CERTIFICATE-----Generated at Fri Feb 21 13:08:56 2025 by rpki-client