$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3507A7D600DE11EC8B07A64FC4F9AE02.roa File: 3507A7D600DE11EC8B07A64FC4F9AE02.roa (raw, json) Hash identifier: 8pLW9EaUq7LMDa9pfA5o9+lPUo7uQWkigPFV1hWhgvs= Subject key identifier: AD:02:DC:3A:75:5D:97:F6:4E:BC:E1:9D:A3:7B:C9:C4:F0:C3:30:FA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8A8F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3507A7D600DE11EC8B07A64FC4F9AE02.roa Signing time: Thu 30 May 2024 16:03:32 +0000 ROA not before: Thu 30 May 2024 16:03:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135786 IP address blocks: 103.84.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35471 (0x8a8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:03:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a353-e465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:46:c8:6d:6d:c1:c4:e2:11:f5:cd:9f:36: dd:41:0f:cb:7e:37:e5:7a:cf:cf:da:81:65:13:01: 78:44:69:e6:57:4e:04:6d:f9:85:99:7c:df:02:92: 3e:a8:b6:75:28:1c:0e:1d:2f:f6:8a:aa:02:b8:9b: ad:fc:6c:c9:ed:13:03:30:67:bd:bc:e1:3d:5a:b0: 3b:34:28:b7:44:b8:2b:37:76:30:04:b2:1a:e1:c2: 34:29:08:5b:24:68:0d:29:a3:f2:3c:92:3b:59:56: c7:03:1c:0f:4d:ad:7f:3a:9a:90:94:26:66:fa:45: e6:be:90:d6:e9:83:96:68:2e:ee:bd:17:2d:8f:7e: 9e:61:82:81:b1:0f:d4:00:de:cd:d1:f0:a3:87:8f: ab:94:c9:37:c8:97:67:3f:ac:7d:40:b3:b5:50:c8: 33:3c:73:81:45:4a:22:9c:81:b3:20:4e:8b:f9:58: ef:da:f1:bb:1b:b3:5d:94:5c:57:85:b8:51:61:9c: 71:16:2c:3f:37:f9:0c:c5:41:e7:61:f3:fc:f8:31: 20:ce:89:1b:ec:11:41:63:0e:47:78:5f:d1:27:4e: 5f:cf:d5:dd:32:e7:03:e4:b1:87:59:bc:c5:57:27: b6:b8:72:d7:28:d8:e2:6a:ac:36:cb:05:6b:0b:b2: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:DC:3A:75:5D:97:F6:4E:BC:E1:9D:A3:7B:C9:C4:F0:C3:30:FA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3507A7D600DE11EC8B07A64FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.190.0/23 Signature Algorithm: sha256WithRSAEncryption 15:0d:50:61:b2:db:74:0b:10:ed:b4:8a:e6:e7:d9:6b:f1:32: 0d:4f:b7:09:55:7e:dd:b8:36:84:7e:a4:73:66:d3:cd:ce:03: f3:93:85:34:e7:95:cd:9c:0e:0f:1a:ea:6f:1c:49:14:4d:99: 82:79:d3:2f:c2:11:0c:e9:6d:a6:12:92:b7:95:db:ae:4b:31: 56:d8:47:49:df:90:69:d7:a7:b6:53:1b:ac:da:72:a3:eb:4a: 72:3b:62:33:d3:5e:8e:ff:bc:b0:19:0e:05:0e:3f:2e:7c:ee: 7f:13:bc:08:41:28:07:d7:ce:03:ba:3f:f6:5a:0a:d9:65:45: c8:19:49:5b:b4:4c:fa:40:c1:6f:4c:27:35:1f:2b:1e:8e:48: 45:db:9f:71:06:34:54:5f:18:28:4a:87:37:e0:f5:e4:bf:bf: 18:26:c1:aa:5a:2e:b6:38:7b:48:ae:e2:a8:3c:5b:df:48:28: b5:c8:93:32:9b:47:3d:d9:18:48:b8:a6:b0:0b:d9:de:67:b7: f2:7a:c8:45:ae:7b:ef:90:24:2c:f1:47:e5:cc:02:23:c0:73: de:13:58:4c:09:00:99:38:1e:3e:c8:21:e0:7b:a2:61:70:1f: 5d:2c:65:28:88:40:11:22:8e:7b:27:e7:dc:89:9b:dc:10:b5: 09:53:8a:da -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIqPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDMzMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzNTMtZTQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUtRshtbcHE4hH1zZ823UEPy3435XrPz9qBZRMBeERp5ldOBG35hZl83wKS Pqi2dSgcDh0v9oqqAribrfxsye0TAzBnvbzhPVqwOzQot0S4Kzd2MASyGuHCNCkI WyRoDSmj8jySO1lWxwMcD02tfzqakJQmZvpF5r6Q1umDlmgu7r0XLY9+nmGCgbEP 1ADezdHwo4ePq5TJN8iXZz+sfUCztVDIMzxzgUVKIpyBsyBOi/lY79rxuxuzXZRc V4W4UWGccRYsPzf5DMVB52Hz/PgxIM6JG+wRQWMOR3hf0SdOX8/V3TLnA+Sxh1m8 xVcntrhy1yjY4mqsNssFawuyPB8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBStAtw6 dV2X9k684Z2je8nE8MMw+jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1MDdBN0Q2 MDBERTExRUM4QjA3QTY0RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ1S+MA0GCSqGSIb3DQEBCwUAA4IBAQAVDVBhstt0CxDt tIrm59lr8TINT7cJVX7duDaEfqRzZtPNzgPzk4U055XNnA4PGupvHEkUTZmCedMv whEM6W2mEpK3lduuSzFW2EdJ35Bp16e2Uxus2nKj60pyO2Iz016O/7ywGQ4FDj8u fO5/E7wIQSgH184Duj/2WgrZZUXIGUlbtEz6QMFvTCc1HysejkhF259xBjRUXxgo Soc34PXkv78YJsGqWi62OHtIruKoPFvfSCi1yJMym0c92RhIuKawC9neZ7fyeshF rnvvkCQs8UflzAIjwHPeE1hMCQCZOB4+yCHge6JhcB9dLGUoiEARIo57J+fciZvc ELUJU4ra -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:11 2024 by rpki-client on console-ams.rpki-client.org