$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40D23A70BCF811EA815A1024C4F9AE02.roa File: 40D23A70BCF811EA815A1024C4F9AE02.roa (raw, json) Hash identifier: U9f8G9lTROa1yE9SaMhNygqXMbzSbqgVe3LUwB3jDC4= Subject key identifier: B6:51:56:5D:81:84:E0:A7:CD:4F:B4:49:74:0A:5A:F6:E5:5E:00:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B44 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40D23A70BCF811EA815A1024C4F9AE02.roa Signing time: Thu 30 May 2024 16:06:27 +0000 ROA not before: Thu 30 May 2024 16:06:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136700 IP address blocks: 103.102.96.0/22 maxlen: 24 2405:6240::/36 maxlen: 36 2405:6240:1000::/36 maxlen: 36 2405:6240:2000::/36 maxlen: 36 2405:6240:3000::/36 maxlen: 36 2405:6240:4000::/36 maxlen: 36 2405:6240:5000::/36 maxlen: 36 2405:6240:6000::/36 maxlen: 36 2405:6240:7000::/36 maxlen: 36 2405:6240:8000::/36 maxlen: 36 2405:6240:9000::/36 maxlen: 36 2405:6240:a000::/36 maxlen: 36 2405:6240:b000::/36 maxlen: 36 2405:6240:c000::/36 maxlen: 36 2405:6240:d000::/36 maxlen: 36 2405:6240:e000::/36 maxlen: 36 2405:6240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35652 (0x8b44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:06:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a403-c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:5d:51:25:06:d0:0a:db:b7:88:76:e0:35: a6:e2:70:b9:ee:3a:81:68:bd:1b:27:79:d1:75:ad: 29:7f:49:29:8b:64:c1:f9:a7:0f:16:2c:c7:c2:3e: f6:89:39:ce:ae:0d:02:b5:b0:e4:f8:e3:a5:3d:66: bb:d6:f7:11:02:4b:74:a3:a8:b6:d8:81:a3:e2:ac: 51:bc:27:37:43:c5:81:5e:2c:67:4b:f5:5c:b2:83: 64:6d:14:f3:c1:a8:d1:cd:86:d4:e2:ce:6d:67:d8: 54:f1:d0:66:b9:06:e1:fb:2e:45:36:39:0a:14:66: 6b:a3:cd:04:a3:ad:2f:8b:d7:bb:76:09:cc:e0:0c: 6d:a0:f7:af:10:6c:53:2b:55:c7:55:5a:74:b1:14: 4a:72:23:20:a7:e5:b7:7e:0f:ab:53:21:74:42:af: 69:b0:1b:2a:96:dc:4e:b7:e7:ca:50:8d:cc:25:ab: 5f:f3:14:1c:12:49:73:e1:a7:7a:ca:b7:c4:d4:f7: 06:1d:3b:5a:8a:ae:98:fd:92:1d:ff:d6:e7:f3:3d: 1e:c6:f8:9c:46:41:67:a0:ad:d5:65:c0:f5:9a:de: ea:a6:38:54:13:b9:3d:02:1e:50:81:e3:cc:80:bc: 11:c7:23:7f:ed:84:87:fc:5d:c3:78:13:9c:55:5a: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:51:56:5D:81:84:E0:A7:CD:4F:B4:49:74:0A:5A:F6:E5:5E:00:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40D23A70BCF811EA815A1024C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.96.0/22 IPv6: 2405:6240::/32 Signature Algorithm: sha256WithRSAEncryption 33:4d:ef:bf:98:06:76:49:3b:d7:9b:ab:e3:ce:69:75:21:f1: 22:cb:6a:40:c4:60:0e:7f:5c:ec:2f:a6:e1:46:31:c1:e3:ae: f5:16:1c:45:3c:46:e4:04:13:c9:dc:3e:a6:27:af:9d:20:1f: 33:ea:d8:01:7b:ba:7d:4d:64:78:3a:30:37:ce:15:8a:b4:7b: b7:a3:5e:a1:17:75:16:19:00:3b:a8:23:95:3e:e8:c8:7c:d9: 10:dc:bf:0d:70:c0:d4:db:7c:64:74:55:fb:b2:fc:a7:d2:4b: 15:e5:80:3c:eb:56:a6:58:e8:df:46:69:3d:27:90:90:89:76: 4f:f0:68:4b:a0:46:57:17:14:45:d6:cb:4d:dd:8e:0f:93:f2: 42:89:96:23:3b:b5:e3:4d:2d:b1:5d:13:ea:28:8e:98:dd:bd: 58:0e:35:26:ad:37:c5:8a:a8:e1:49:ed:d4:04:df:a0:f0:95: ce:76:ee:c6:b2:06:90:f4:ff:5d:fd:c9:b3:e8:a3:22:d0:47: 1d:cc:b8:50:58:77:e3:72:25:eb:64:b5:92:fe:e9:be:2e:9e: 9f:2d:fb:f0:72:33:9f:23:57:5f:60:fb:ce:fc:87:f6:1b:e2: c4:d6:66:27:73:8d:f2:5a:fb:4e:a8:90:a2:2f:39:a5:31:3a: 0f:a2:72:d2 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAItEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDYyN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0MDMtYzJmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSWXVElBtAK27eIduA1puJwue46gWi9Gyd50XWtKX9JKYtkwfmnDxYsx8I+ 9ok5zq4NArWw5PjjpT1mu9b3EQJLdKOottiBo+KsUbwnN0PFgV4sZ0v1XLKDZG0U 88Go0c2G1OLObWfYVPHQZrkG4fsuRTY5ChRma6PNBKOtL4vXu3YJzOAMbaD3rxBs UytVx1VadLEUSnIjIKflt34Pq1MhdEKvabAbKpbcTrfnylCNzCWrX/MUHBJJc+Gn esq3xNT3Bh07WoqumP2SHf/W5/M9Hsb4nEZBZ6Ct1WXA9Zre6qY4VBO5PQIeUIHj zIC8Eccjf+2Eh/xdw3gTnFVaTvkCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBS2UVZd gYTgp81PtEl0Clr25V4AqzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwRDIzQTcw QkNGODExRUE4MTVBMTAyNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ2ZgMA0EAgACMAcDBQAkBWJAMA0GCSqGSIb3DQEBCwUA A4IBAQAzTe+/mAZ2STvXm6vjzml1IfEiy2pAxGAOf1zsL6bhRjHB4671FhxFPEbk BBPJ3D6mJ6+dIB8z6tgBe7p9TWR4OjA3zhWKtHu3o16hF3UWGQA7qCOVPujIfNkQ 3L8NcMDU23xkdFX7svyn0ksV5YA861amWOjfRmk9J5CQiXZP8GhLoEZXFxRF1stN 3Y4Pk/JCiZYjO7XjTS2xXRPqKI6Y3b1YDjUmrTfFiqjhSe3UBN+g8JXOdu7GsgaQ 9P9d/cmz6KMi0EcdzLhQWHfjciXrZLWS/um+Lp6fLfvwcjOfI1dfYPvO/If2G+LE 1mYnc43yWvtOqJCiLzmlMToPonLS -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:41 2024 by rpki-client on console-ams.rpki-client.org