$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/497820A0CCFA11EBB4C51559C4F9AE02.roa File: 497820A0CCFA11EBB4C51559C4F9AE02.roa (raw, json) Hash identifier: Gl2Za8DFNFjyWoezkt19HmCI0ITKwEP0eG5bm84FFL4= Subject key identifier: E6:E2:B3:01:CD:AE:99:71:B6:2B:CF:E3:0C:78:53:01:BE:77:2B:E9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8AC7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/497820A0CCFA11EBB4C51559C4F9AE02.roa Signing time: Thu 30 May 2024 16:04:25 +0000 ROA not before: Thu 30 May 2024 16:04:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136171 IP address blocks: 103.157.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35527 (0x8ac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:04:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a389-6c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:86:39:05:02:43:95:b3:4c:8f:7c:8b:92: a4:a7:af:3e:16:6f:b3:44:3c:7c:e3:84:68:96:3c: cf:65:58:1c:dc:ca:d8:04:a0:a9:ea:92:9e:f8:cd: dd:62:f8:ed:f9:3c:24:81:17:dc:b2:e1:b3:cd:9e: fe:14:bd:e2:d4:f6:8e:ed:c5:b8:67:91:57:91:bb: 82:b1:47:ea:be:29:a6:e6:f6:7a:4a:9f:25:e5:b2: 5d:11:e5:c1:63:66:9b:b8:0c:9d:cd:2c:79:dd:b7: 73:f1:bd:af:6f:31:58:0d:f1:5c:1d:34:d7:29:b0: a4:20:b3:60:5f:a5:9b:7a:5a:5e:94:e8:cf:b6:c8: bf:34:21:66:9f:e7:dc:bf:7c:8f:53:0c:c9:0e:f9: 14:bb:8f:db:8c:f6:26:5c:f2:d9:02:e9:6b:fb:d3: ce:fc:06:8b:d1:a4:7f:75:33:29:f2:8f:16:b0:6d: 27:b1:61:fc:fd:ac:85:16:e1:01:5e:a9:64:0c:11: 12:9e:fd:df:a4:d6:38:5b:4d:54:b4:28:d7:0c:f0: 37:17:b3:95:56:4d:f4:c1:b7:3b:70:35:0c:9e:75: d2:94:74:92:5f:d0:3e:d7:bc:ee:48:37:bd:78:28: b2:37:0d:88:d2:f0:4e:a3:90:76:be:0b:ec:ac:c1: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:B3:01:CD:AE:99:71:B6:2B:CF:E3:0C:78:53:01:BE:77:2B:E9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/497820A0CCFA11EBB4C51559C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.224.0/23 Signature Algorithm: sha256WithRSAEncryption b4:c0:ed:e1:f3:eb:6c:ed:2a:d3:97:45:bb:c2:cd:94:97:3c: 06:78:ff:15:09:69:3b:fe:c8:3e:96:a6:4a:37:c8:58:73:45: 5d:11:04:07:41:6b:7b:1b:9a:a3:fa:e4:6e:8f:86:9f:bd:26: c2:50:c7:83:73:8c:2b:58:eb:7f:8d:f3:8f:88:74:ce:ec:fa: 35:7d:59:f4:dc:c0:f5:2d:7f:64:95:9b:4c:8c:22:4c:37:f3: 7c:82:64:7a:9e:31:6f:06:ec:4a:35:1f:dc:3b:e7:49:66:bb: 07:b8:49:9b:7d:59:59:80:c5:4a:0c:9e:f1:52:85:86:45:e7: d2:5f:36:94:6a:2e:74:4e:a1:2a:84:a4:cb:56:95:6a:87:d4: 06:c4:fc:55:16:b3:61:43:aa:21:71:4a:0b:3b:35:5f:c3:a6: 25:aa:36:45:c9:82:c8:07:0f:3b:4f:3a:ba:6e:dc:de:71:aa: 0a:90:e3:20:ca:c6:07:c8:20:37:ed:4f:e0:33:ea:3f:f5:76: c6:77:1b:9a:7b:ed:60:32:df:a3:74:f1:71:ec:26:7c:64:f7: 3a:c8:55:63:f5:4b:28:bf:f8:73:83:35:b6:5c:34:e2:79:90: 0a:87:3a:04:2e:02:98:c1:2d:5c:0a:58:87:e0:63:21:e2:16: a8:f1:db:95 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIrHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDQyNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzODktNmMzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX5hjkFAkOVs0yPfIuSpKevPhZvs0Q8fOOEaJY8z2VYHNzK2ASgqeqSnvjN 3WL47fk8JIEX3LLhs82e/hS94tT2ju3FuGeRV5G7grFH6r4ppub2ekqfJeWyXRHl wWNmm7gMnc0sed23c/G9r28xWA3xXB001ymwpCCzYF+lm3paXpToz7bIvzQhZp/n 3L98j1MMyQ75FLuP24z2Jlzy2QLpa/vTzvwGi9Gkf3UzKfKPFrBtJ7Fh/P2shRbh AV6pZAwREp7936TWOFtNVLQo1wzwNxezlVZN9MG3O3A1DJ510pR0kl/QPte87kg3 vXgosjcNiNLwTqOQdr4L7KzBVw0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBTm4rMB za6ZcbYrz+MMeFMBvncr6TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ5NzgyMEEw Q0NGQTExRUJCNEM1MTU1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ53gMA0GCSqGSIb3DQEBCwUAA4IBAQC0wO3h8+ts7SrT l0W7ws2UlzwGeP8VCWk7/sg+lqZKN8hYc0VdEQQHQWt7G5qj+uRuj4afvSbCUMeD c4wrWOt/jfOPiHTO7Po1fVn03MD1LX9klZtMjCJMN/N8gmR6njFvBuxKNR/cO+dJ ZrsHuEmbfVlZgMVKDJ7xUoWGRefSXzaUai50TqEqhKTLVpVqh9QGxPxVFrNhQ6oh cUoLOzVfw6YlqjZFyYLIBw87Tzq6btzecaoKkOMgysYHyCA37U/gM+o/9XbGdxua e+1gMt+jdPFx7CZ8ZPc6yFVj9Usov/hzgzW2XDTieZAKhzoELgKYwS1cCliH4GMh 4hao8duV -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:42 2024 by rpki-client on console-ams.rpki-client.org