$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3BC0AC7E917111ED901EA268C4F9AE02.roa File: 3BC0AC7E917111ED901EA268C4F9AE02.roa (raw, json) Hash identifier: gX5vPi3JQ94RGZzFoakIb354gyttPiA/063ESh8sb8Q= Subject key identifier: 47:8A:51:75:10:EB:EA:80:35:96:80:4D:63:72:86:C1:18:2E:3C:AA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8959 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3BC0AC7E917111ED901EA268C4F9AE02.roa Signing time: Thu 30 May 2024 15:58:28 +0000 ROA not before: Thu 30 May 2024 15:58:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134018 IP address blocks: 103.42.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35161 (0x8959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:58:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a224-e680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:70:b3:7c:1f:01:91:1a:90:16:48:7c:34: 9a:37:c9:ee:c8:14:98:38:74:a9:d1:3b:d9:84:9d: 26:9b:ad:ff:48:74:dc:92:6d:9d:c4:ca:8a:a0:b9: 0b:d2:82:06:e3:8f:99:25:9a:07:5f:93:b8:67:dd: 02:81:f7:38:b5:01:b5:1a:a3:16:be:e0:d6:56:8a: 46:8e:82:a6:61:d2:68:98:04:3d:d4:07:1b:60:6f: cd:15:0d:a5:6c:05:6e:e4:5b:de:62:7f:3b:12:14: 81:1c:b9:6b:47:dc:ad:80:80:a2:8a:47:47:54:86: ba:8d:42:ad:59:43:b7:12:80:54:79:60:8a:6d:e7: 2e:ef:27:07:c8:89:90:d9:ea:44:ea:cc:f2:bf:58: 28:18:4a:75:b5:9a:bf:81:91:6b:24:17:23:3f:1a: 1d:dd:84:66:7d:81:9b:14:92:b2:f7:dd:38:a6:6a: 35:42:69:29:78:2a:56:12:cf:9e:4d:31:2d:9e:fc: 4c:10:2f:ea:a1:57:42:01:eb:ff:b0:3c:7a:31:65: 94:fa:af:16:1e:03:35:70:44:48:1c:5f:bb:cf:42: 41:ff:f9:ed:7a:f6:37:df:8e:7e:98:ef:6d:8b:ba: 42:ad:09:42:74:6a:40:31:06:33:3b:90:f9:72:ea: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:51:75:10:EB:EA:80:35:96:80:4D:63:72:86:C1:18:2E:3C:AA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3BC0AC7E917111ED901EA268C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.12.0/23 Signature Algorithm: sha256WithRSAEncryption 32:15:15:59:34:90:f7:90:12:ef:c0:5f:bd:ef:b9:18:4b:74: 34:b8:ca:3a:b1:19:b4:c5:b0:1f:8d:7f:75:bf:c7:61:07:1f: df:92:f4:0f:74:a8:af:fb:66:eb:4d:44:e5:a1:2d:18:b8:f8: 65:72:55:34:ad:c7:33:6b:8f:e9:a5:f7:50:6f:fa:fa:40:83: 10:6c:08:e8:ad:6f:b4:e5:a0:93:55:02:cb:65:4e:70:fc:0c: fb:e2:3e:50:c4:19:61:1e:91:df:63:36:32:ca:58:44:e3:63: ae:6f:9a:ff:0b:67:d7:7e:1a:08:81:1a:da:a0:b6:c2:ab:d7: fe:cb:65:da:01:a1:9e:ec:3c:85:23:41:21:3f:12:76:c3:9d: 8e:67:51:f3:ae:31:a5:23:fd:82:3d:9a:d4:e6:94:60:aa:5c: 31:2b:eb:67:89:86:c5:60:c6:a3:95:1f:09:68:4b:23:46:51: 7d:49:50:0d:99:dc:97:d4:bf:68:fd:3a:b9:db:0e:e7:ee:8c: a7:2c:b1:78:43:fc:09:3c:7f:00:ad:6e:ea:aa:73:c9:03:60: 22:27:29:41:c7:8b:be:41:1c:c9:16:30:80:16:c3:5e:28:f6: 8d:02:be:f9:8b:5d:3f:e4:6b:9b:1e:53:74:8d:c7:af:b1:21: e0:bd:fc:3d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIlZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTgyOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyMjQtZTY4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxbcLN8HwGRGpAWSHw0mjfJ7sgUmDh0qdE72YSdJput/0h03JJtncTKiqC5 C9KCBuOPmSWaB1+TuGfdAoH3OLUBtRqjFr7g1laKRo6CpmHSaJgEPdQHG2BvzRUN pWwFbuRb3mJ/OxIUgRy5a0fcrYCAoopHR1SGuo1CrVlDtxKAVHlgim3nLu8nB8iJ kNnqROrM8r9YKBhKdbWav4GRayQXIz8aHd2EZn2BmxSSsvfdOKZqNUJpKXgqVhLP nk0xLZ78TBAv6qFXQgHr/7A8ejFllPqvFh4DNXBESBxfu89CQf/57Xr2N9+Ofpjv bYu6Qq0JQnRqQDEGMzuQ+XLqsY8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRHilF1 EOvqgDWWgE1jcobBGC48qjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNCQzBBQzdF OTE3MTExRUQ5MDFFQTI2OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZyoMMA0GCSqGSIb3DQEBCwUAA4IBAQAyFRVZNJD3kBLv wF+977kYS3Q0uMo6sRm0xbAfjX91v8dhBx/fkvQPdKiv+2brTUTloS0YuPhlclU0 rccza4/ppfdQb/r6QIMQbAjorW+05aCTVQLLZU5w/Az74j5QxBlhHpHfYzYyylhE 42Oub5r/C2fXfhoIgRraoLbCq9f+y2XaAaGe7DyFI0EhPxJ2w52OZ1HzrjGlI/2C PZrU5pRgqlwxK+tniYbFYMajlR8JaEsjRlF9SVANmdyX1L9o/Tq52w7n7oynLLF4 Q/wJPH8ArW7qqnPJA2AiJylBx4u+QRzJFjCAFsNeKPaNAr75i10/5GubHlN0jcev sSHgvfw9 -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:11 2024 by rpki-client on console-ams.rpki-client.org