$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa File: 41D286CA51CE11EC83E7510AC4F9AE02.roa (raw, json) Hash identifier: BA4nOEjUScZuz347W4aTK/dm7/qWZUHBYbzZ8WEfOUk= Subject key identifier: FB:AA:11:07:38:92:25:29:BC:E2:C3:40:C4:CE:86:10:64:6B:F0:F4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 90CD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa Signing time: Thu 30 May 2024 16:29:29 +0000 ROA not before: Thu 30 May 2024 16:29:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38021 IP address blocks: 203.190.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37069 (0x90cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:29:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a969-6917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:4f:34:4a:a7:73:62:54:7c:aa:75:57:8c: c0:9c:1c:ce:3e:79:a4:1d:ef:44:f3:91:30:97:53: 4c:6e:01:98:24:9a:25:56:fc:d0:a5:e5:00:27:da: d9:7f:92:2d:d1:5b:93:da:d6:f1:57:e8:2c:8b:9c: 68:ac:a0:e5:eb:c0:48:a9:f5:85:df:d6:f6:2c:78: 66:b4:2f:19:4c:73:b5:66:c0:34:a2:83:1a:40:c8: 09:55:da:a6:7c:93:0b:73:6e:ae:a1:81:6d:05:e9: ed:18:9e:a4:75:de:b4:9d:7e:96:6b:e0:43:a9:4f: 8b:9c:f6:d9:99:25:3b:ae:02:62:d9:ca:4f:ec:e5: 51:ef:74:c5:ca:65:27:4f:84:4a:33:96:13:52:df: 01:a9:5b:7d:1e:06:3a:9c:15:50:17:ca:70:2a:10: da:fd:d7:3a:6f:4f:17:d0:1f:42:83:d2:42:f5:d8: c5:b8:f0:ed:06:19:20:b6:a4:08:d4:da:77:ac:78: ff:00:2b:2f:c4:10:2b:01:93:99:f4:ff:ee:6c:b7: 24:18:39:9d:d5:cf:29:d4:25:bf:61:3c:27:86:70: f2:fc:4b:14:fc:b7:49:66:38:20:4f:76:59:eb:c8: a1:b5:cb:13:34:9d:0a:6b:27:07:fd:79:b2:01:d8: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:11:07:38:92:25:29:BC:E2:C3:40:C4:CE:86:10:64:6B:F0:F4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.190.248.0/24 Signature Algorithm: sha256WithRSAEncryption 05:17:21:cf:fb:91:3b:f0:8b:5f:d5:66:af:da:02:86:c3:cc: 9d:17:d3:33:7a:81:d5:43:42:e9:a3:fd:7b:d5:c1:35:d9:38: 60:62:b7:b4:33:54:7b:e0:25:c6:6d:63:f2:24:fe:33:59:df: 16:6d:20:3c:d8:4a:4e:64:0a:b0:32:85:45:30:87:a1:a0:78: f5:fe:d1:b0:f1:a7:b8:b6:b9:1b:20:c0:f3:ec:0c:e5:d0:e4: f3:32:57:b1:77:67:35:fd:57:08:a7:65:fd:9d:30:b6:72:f3: 10:a0:88:36:30:0c:2e:be:6d:36:f8:c5:db:d7:35:cb:ac:c4: aa:03:58:97:03:e0:d6:5d:e6:4a:cc:f4:80:8b:03:67:ab:c8: cf:eb:4f:22:e3:b0:bc:db:ff:79:d6:87:ed:4c:ce:d2:51:52: 91:87:e7:bd:da:92:ec:74:45:15:8b:f2:d4:5f:4f:ca:ca:27: c6:2f:36:14:73:5a:d2:43:6d:4c:de:62:b6:dc:34:31:cb:67: 0d:f2:25:da:f9:e8:ae:89:68:01:8a:44:12:e5:66:33:0e:48: 0a:22:68:6d:ad:7d:81:51:43:48:cf:13:6e:23:78:35:b3:a3: 2e:6d:ca:ce:9c:56:5b:ed:cb:41:3c:6f:8e:9f:62:76:db:18: c1:e4:24:4f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJDNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjkyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5NjktNjkxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANERTzRKp3NiVHyqdVeMwJwczj55pB3vRPORMJdTTG4BmCSaJVb80KXlACfa 2X+SLdFbk9rW8VfoLIucaKyg5evASKn1hd/W9ix4ZrQvGUxztWbANKKDGkDICVXa pnyTC3NurqGBbQXp7RiepHXetJ1+lmvgQ6lPi5z22ZklO64CYtnKT+zlUe90xcpl J0+ESjOWE1LfAalbfR4GOpwVUBfKcCoQ2v3XOm9PF9AfQoPSQvXYxbjw7QYZILak CNTad6x4/wArL8QQKwGTmfT/7my3JBg5ndXPKdQlv2E8J4Zw8vxLFPy3SWY4IE92 WevIobXLEzSdCmsnB/15sgHYNosCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT7qhEH OJIlKbziw0DEzoYQZGvw9DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQxRDI4NkNB NTFDRTExRUM4M0U3NTEwQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAy774MA0GCSqGSIb3DQEBCwUAA4IBAQAFFyHP+5E78Itf 1Wav2gKGw8ydF9MzeoHVQ0Lpo/171cE12ThgYre0M1R74CXGbWPyJP4zWd8WbSA8 2EpOZAqwMoVFMIehoHj1/tGw8ae4trkbIMDz7Azl0OTzMlexd2c1/VcIp2X9nTC2 cvMQoIg2MAwuvm02+MXb1zXLrMSqA1iXA+DWXeZKzPSAiwNnq8jP608i47C82/95 1oftTM7SUVKRh+e92pLsdEUVi/LUX0/KyifGLzYUc1rSQ21M3mK23DQxy2cN8iXa +eiuiWgBikQS5WYzDkgKImhtrX2BUUNIzxNuI3g1s6MubcrOnFZb7ctBPG+On2J2 2xjB5CRP -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:41 2024 by rpki-client on console-ams.rpki-client.org