$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa File: 43DF95FE252A11EDBD53BB3BC4F9AE02.roa (raw, json) Hash identifier: 5d+Oj7mhSQNfpvwfwaFVexUFQaxeqTztkSCnyQGW01o= Subject key identifier: A9:A3:7A:83:A0:40:22:8A:99:5E:31:EB:34:BB:66:F0:47:B0:F5:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8A6F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa Signing time: Thu 30 May 2024 16:02:59 +0000 ROA not before: Thu 30 May 2024 16:02:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135745 IP address blocks: 103.138.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35439 (0x8a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:02:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a332-8edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:37:16:ec:eb:b1:82:b9:6f:86:d3:f8:39: 3d:68:fe:d7:88:4d:48:f2:76:cd:2d:c4:9e:83:cc: 53:37:f8:b4:27:1c:3c:ca:bd:ea:3f:60:17:4d:6e: 0a:00:7b:1a:36:e8:c2:63:bd:53:e6:5b:2a:95:ac: df:42:72:83:ad:b7:61:15:80:09:05:6b:55:dc:49: 87:ea:d4:54:c0:f6:c3:14:5b:df:a5:5b:5b:05:ed: 9e:a0:86:9b:c6:eb:67:79:3c:fb:c4:b9:98:6e:ec: ec:b2:63:83:7f:48:e0:3e:3b:a8:3b:24:d0:09:66: 32:aa:49:13:11:d2:16:4d:fb:17:fd:62:00:33:99: 05:d3:5d:16:8d:8e:fa:0e:d7:93:f0:04:a8:90:1b: a7:a9:c4:9a:84:67:54:39:d7:7a:f6:9c:70:6d:c7: 9e:63:77:55:b2:fc:da:a8:c5:ae:de:fe:37:ae:47: 4c:ad:3d:af:e4:ba:f6:5e:66:9b:f1:b1:ed:7a:6b: 33:b4:e9:db:9d:6b:76:52:4b:f9:2f:48:5b:4d:2d: 08:46:c2:c6:b3:d4:5f:d8:96:0f:15:9c:5d:1f:29: 3e:a5:29:c8:d3:90:98:0b:74:23:d7:61:7e:b3:26: 32:f5:b7:aa:c3:7e:91:b8:9d:c2:66:dc:69:95:89: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:7A:83:A0:40:22:8A:99:5E:31:EB:34:BB:66:F0:47:B0:F5:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.33.0/24 Signature Algorithm: sha256WithRSAEncryption ab:98:26:5c:27:10:fb:84:2a:e3:14:67:57:57:84:33:11:8f: 30:71:0a:1d:c6:12:61:da:1e:c8:7e:ca:3c:62:38:b0:83:6f: 86:01:5e:a3:40:cb:fe:96:ab:3f:75:88:40:b1:a7:86:59:5a: a7:13:b8:6e:03:af:b1:73:2b:25:00:28:bb:76:fb:a1:fb:7f: b7:c2:8c:c2:24:cb:f0:a0:fe:4d:04:b5:e6:cc:d7:2e:c7:3c: 18:b4:68:3d:23:4d:25:08:e0:f4:2e:1b:1b:c5:15:91:6c:c8: 42:75:5b:df:c9:48:8d:85:a6:a7:b7:c0:16:0c:31:05:3b:38: 0e:a2:9e:c6:e9:9e:28:31:b8:f9:80:ff:a1:c3:7a:6d:cc:05: 6e:94:bf:80:8f:00:bb:df:bb:c2:a0:9d:09:58:2c:b6:31:70: 7d:78:91:8a:e7:53:70:96:65:d1:05:7b:6a:34:92:41:73:05: 30:2c:ad:ab:bc:fd:bf:46:92:b7:2a:8f:37:1f:d3:bd:61:b1: a6:b5:f8:e6:5c:ba:6d:ef:56:f0:e5:35:82:43:5e:a2:bb:33: f1:f6:3f:c2:37:be:4c:9b:c9:6b:d6:07:84:2c:29:37:b8:42: 5a:54:2b:f9:c3:6f:81:d5:3e:ea:54:14:37:a3:17:89:e4:a0: 83:7e:fd:58 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIpvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDI1OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzMzItOGVkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMV+Nxbs67GCuW+G0/g5PWj+14hNSPJ2zS3EnoPMUzf4tCccPMq96j9gF01u CgB7GjbowmO9U+ZbKpWs30Jyg623YRWACQVrVdxJh+rUVMD2wxRb36VbWwXtnqCG m8brZ3k8+8S5mG7s7LJjg39I4D47qDsk0AlmMqpJExHSFk37F/1iADOZBdNdFo2O +g7Xk/AEqJAbp6nEmoRnVDnXevaccG3HnmN3VbL82qjFrt7+N65HTK09r+S69l5m m/Gx7XprM7Tp251rdlJL+S9IW00tCEbCxrPUX9iWDxWcXR8pPqUpyNOQmAt0I9dh frMmMvW3qsN+kbidwmbcaZWJGvECAwEAAaOCApUwggKRMB0GA1UdDgQWBBSpo3qD oEAiipleMes0u2bwR7D1JTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQzREY5NUZF MjUyQTExRURCRDUzQkIzQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ4ohMA0GCSqGSIb3DQEBCwUAA4IBAQCrmCZcJxD7hCrj FGdXV4QzEY8wcQodxhJh2h7Ifso8Yjiwg2+GAV6jQMv+lqs/dYhAsaeGWVqnE7hu A6+xcyslACi7dvuh+3+3wozCJMvwoP5NBLXmzNcuxzwYtGg9I00lCOD0LhsbxRWR bMhCdVvfyUiNhaant8AWDDEFOzgOop7G6Z4oMbj5gP+hw3ptzAVulL+AjwC737vC oJ0JWCy2MXB9eJGK51NwlmXRBXtqNJJBcwUwLK2rvP2/RpK3Ko83H9O9YbGmtfjm XLpt71bw5TWCQ16iuzPx9j/CN75Mm8lr1geELCk3uEJaVCv5w2+B1T7qVBQ3oxeJ 5KCDfv1Y -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:50 2024 by rpki-client on console-fra.rpki-client.org