$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa File: 3C272C4E067811EDBBC7F133C4F9AE02.roa (raw, json) Hash identifier: 1lSgcW41dQzGQ1GQyTMnj6hRES7U6zrIlM6U9E66hDI= Subject key identifier: 60:E0:DE:42:2C:3B:C3:AE:E8:49:F8:72:9E:55:B8:26:4F:BB:B5:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89AB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa Signing time: Thu 30 May 2024 15:59:46 +0000 ROA not before: Thu 30 May 2024 15:59:46 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134332 IP address blocks: 103.54.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35243 (0x89ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:59:46 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a272-6a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:55:7f:35:d7:41:81:32:f9:8c:84:c2:35:b1: 94:ca:40:3f:5e:07:16:2c:2f:e3:73:ff:0f:41:04: 75:a7:1d:b9:3f:73:24:26:f3:b2:6f:1b:8e:6c:15: fc:a4:5a:9e:8f:24:98:90:dc:2c:70:22:9d:6e:47: 1b:c5:02:1b:73:9b:98:14:fa:8b:a9:ad:a1:62:45: 55:2b:da:48:e4:54:fc:24:85:19:2f:b8:7a:8b:1b: be:72:05:36:84:84:41:8d:04:27:58:2b:84:89:10: d2:9c:c4:e0:4a:4f:90:6e:7f:28:c0:61:2f:dd:1e: 0d:66:2a:68:7a:76:be:da:b1:88:b7:75:43:79:56: 5d:54:dd:fb:cd:7b:2c:a4:29:bb:56:50:9f:76:5e: a8:60:e9:49:a1:59:34:12:fc:9f:e9:b0:fa:dc:39: fa:47:76:3b:d0:70:9e:40:99:df:38:5a:60:87:32: 11:ba:03:9f:a5:b3:70:fd:b6:15:26:91:01:ca:a6: 1a:9d:4f:76:cc:09:f1:6e:6d:5a:3d:68:ba:dd:ca: 01:6c:5e:31:c1:18:54:84:dd:c3:09:34:d8:b0:2c: ac:cc:cd:b6:4d:2c:0a:70:ba:5b:ec:af:d8:03:9f: 44:c1:30:21:0d:cc:5c:e9:e8:29:4a:66:16:76:88: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E0:DE:42:2C:3B:C3:AE:E8:49:F8:72:9E:55:B8:26:4F:BB:B5:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.237.0/24 Signature Algorithm: sha256WithRSAEncryption 94:fe:65:c5:ee:b5:f9:f0:ee:b6:c9:d9:7e:07:dd:dd:e0:b1: 82:17:9f:7c:1a:96:59:90:26:db:2f:bd:37:3d:67:01:b1:0c: 99:eb:b8:08:74:63:0d:ba:7d:a6:f2:09:d8:76:73:52:7d:83: 8d:bf:49:0f:41:7a:28:3a:f8:0f:22:00:ed:29:f2:8d:39:2a: dc:6d:34:08:e1:be:87:73:13:cf:be:0e:8d:38:89:47:af:4e: 93:22:b2:56:bd:ed:fe:c4:34:8e:33:5c:1b:13:ee:ec:7f:3f: 3a:29:34:89:98:92:10:18:eb:71:72:b9:ed:0a:50:2f:79:d2: 80:70:b0:b5:9b:b3:16:d9:f9:5c:e2:64:8b:74:f8:7c:a3:15: c4:83:22:db:c3:fb:64:db:3f:f3:f4:28:eb:fa:a4:2b:54:0f: dd:5a:63:c0:8f:4e:ba:83:54:4a:73:bc:3a:37:31:dc:eb:73: d9:45:c4:e6:d5:1c:88:8f:cd:2f:61:1b:05:c5:96:e2:52:29: 23:be:4b:53:4e:49:4d:e0:5e:2e:0c:9a:93:f4:67:46:dc:07: 88:10:f7:44:57:0b:bd:25:d3:29:6c:45:25:b1:37:db:3b:a3: 66:14:da:69:f3:ae:e5:26:f7:b6:bc:0a:24:00:5a:b7:7c:45: 68:31:0f:2e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAImrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTk0NloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyNzItNmE4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO1VfzXXQYEy+YyEwjWxlMpAP14HFiwv43P/D0EEdacduT9zJCbzsm8bjmwV /KRano8kmJDcLHAinW5HG8UCG3ObmBT6i6mtoWJFVSvaSORU/CSFGS+4eosbvnIF NoSEQY0EJ1grhIkQ0pzE4EpPkG5/KMBhL90eDWYqaHp2vtqxiLd1Q3lWXVTd+817 LKQpu1ZQn3ZeqGDpSaFZNBL8n+mw+tw5+kd2O9BwnkCZ3zhaYIcyEboDn6WzcP22 FSaRAcqmGp1PdswJ8W5tWj1out3KAWxeMcEYVITdwwk02LAsrMzNtk0sCnC6W+yv 2AOfRMEwIQ3MXOnoKUpmFnaIT8cCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRg4N5C LDvDruhJ+HKeVbgmT7u1GDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNDMjcyQzRF MDY3ODExRURCQkM3RjEzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZzbtMA0GCSqGSIb3DQEBCwUAA4IBAQCU/mXF7rX58O62 ydl+B93d4LGCF598GpZZkCbbL703PWcBsQyZ67gIdGMNun2m8gnYdnNSfYONv0kP QXooOvgPIgDtKfKNOSrcbTQI4b6HcxPPvg6NOIlHr06TIrJWve3+xDSOM1wbE+7s fz86KTSJmJIQGOtxcrntClAvedKAcLC1m7MW2flc4mSLdPh8oxXEgyLbw/tk2z/z 9Cjr+qQrVA/dWmPAj066g1RKc7w6NzHc63PZRcTm1RyIj80vYRsFxZbiUikjvktT TklN4F4uDJqT9GdG3AeIEPdEVwu9JdMpbEUlsTfbO6NmFNpp867lJve2vAokAFq3 fEVoMQ8u -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:35 2024 by rpki-client on console-fra.rpki-client.org