$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa File: 4FE86B1E2C2411EC85B05B3DC4F9AE02.roa (raw, json) Hash identifier: i0vSFj0jLZorIJnbqgjsRRi4gEAhvgKqlJ3vbIru0VM= Subject key identifier: CC:B3:21:AC:57:B8:81:84:DC:C1:54:D4:D8:5A:71:40:45:45:DA:9E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 912A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa Signing time: Thu 30 May 2024 16:31:01 +0000 ROA not before: Thu 30 May 2024 16:31:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59165 IP address blocks: 103.83.252.0/22 maxlen: 24 103.177.24.0/23 maxlen: 24 103.204.52.0/22 maxlen: 24 202.136.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37162 (0x912a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:31:01 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a9c4-4462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:2a:09:54:2d:18:be:d4:90:6d:7d:62:52: 51:3e:56:d4:18:4f:03:8c:a5:93:82:66:d1:e4:a2: 07:c7:52:d3:89:01:68:82:0a:89:49:85:a6:2f:a4: ea:a8:dc:be:f9:74:e9:95:b5:75:b0:b9:d0:81:29: eb:a5:fd:42:05:76:17:da:b9:fd:73:1f:44:b3:51: ba:ec:88:20:89:f4:c1:d0:72:79:5f:5b:e9:bc:04: 22:31:85:ca:79:5a:97:a2:f2:e9:bc:d8:e4:a4:06: 1f:90:06:dd:b0:ff:63:a8:ba:02:94:f2:4c:42:d7: af:28:02:42:a5:78:d7:10:ff:d7:24:b3:3b:e9:d6: a9:c6:86:cc:68:2d:ed:9c:af:a1:78:1b:2c:c9:18: 7b:f8:31:a1:85:1f:70:ae:44:0a:96:46:54:02:e4: 33:58:08:b0:86:98:f0:17:5f:f9:c7:2b:85:7f:54: b8:98:78:80:34:3b:5c:47:fe:71:dd:24:30:92:1d: 1d:13:cb:54:cb:55:93:06:ef:4c:8b:f5:37:9a:e6: db:11:55:a7:7e:99:14:0b:c5:ff:32:72:36:a9:44: 40:ac:3d:63:32:f8:b5:0f:ae:ac:34:74:7f:19:d0: 83:d5:69:0d:f1:b5:30:44:b9:a6:f5:09:4c:d2:96: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:21:AC:57:B8:81:84:DC:C1:54:D4:D8:5A:71:40:45:45:DA:9E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.252.0/22 103.177.24.0/23 103.204.52.0/22 202.136.84.0/22 Signature Algorithm: sha256WithRSAEncryption a1:74:36:6a:8c:7c:bb:e7:98:6b:65:ce:7f:0d:3c:62:80:f2: 22:4e:7e:1a:a3:ad:f1:86:dd:1f:07:da:bc:20:38:3b:3c:39: 28:c6:cc:9c:6e:3e:94:95:03:c6:3e:f7:7a:e6:b5:c0:93:4a: d0:cb:b3:08:5c:ff:24:bb:e4:d7:0a:f5:6c:39:f3:c5:67:38: f6:20:9e:b4:0b:ac:1e:90:35:b0:e6:ba:9e:08:f9:66:3a:8c: 60:2b:91:7d:c9:dd:80:e3:1b:23:39:82:ee:98:07:41:d3:6f: d1:f0:8e:81:79:24:f7:8b:d3:a1:70:f5:0a:ba:ae:8e:78:58: 4a:bf:19:4b:2d:52:76:cc:60:b1:f3:eb:b1:72:95:a1:45:d4: 95:71:36:90:41:03:8d:7a:27:20:37:8c:65:cf:88:51:4c:65: 2f:6e:95:07:42:bd:fe:9c:0a:35:11:fe:c0:ba:3a:f1:f1:0b: b4:2f:85:c4:11:01:c1:38:e6:08:9b:e9:d8:3d:db:e4:93:29: 8f:e2:2b:97:3d:68:01:e3:ee:4d:77:dc:85:ca:16:ae:9f:90: c0:1f:dd:b6:d3:d0:a3:3f:f7:7c:0b:2d:21:a8:c0:0c:e7:f5: d1:6f:89:3f:af:65:cb:51:0e:ff:1c:bc:7c:26:30:07:8e:bc: a7:62:50:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAJEqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MzEwMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5YzQtNDQ2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUeKglULRi+1JBtfWJSUT5W1BhPA4ylk4Jm0eSiB8dS04kBaIIKiUmFpi+k 6qjcvvl06ZW1dbC50IEp66X9QgV2F9q5/XMfRLNRuuyIIIn0wdByeV9b6bwEIjGF ynlal6Ly6bzY5KQGH5AG3bD/Y6i6ApTyTELXrygCQqV41xD/1ySzO+nWqcaGzGgt 7ZyvoXgbLMkYe/gxoYUfcK5ECpZGVALkM1gIsIaY8Bdf+ccrhX9UuJh4gDQ7XEf+ cd0kMJIdHRPLVMtVkwbvTIv1N5rm2xFVp36ZFAvF/zJyNqlEQKw9YzL4tQ+urDR0 fxnQg9VpDfG1MES5pvUJTNKW5NMCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTMsyGs V7iBhNzBVNTYWnFARUXanjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRGRTg2QjFF MkMyNDExRUM4NUIwNUIzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCZ1P8AwQBZ7EYAwQCZ8w0AwQCyohUMA0GCSqGSIb3DQEB CwUAA4IBAQChdDZqjHy755hrZc5/DTxigPIiTn4ao63xht0fB9q8IDg7PDkoxsyc bj6UlQPGPvd65rXAk0rQy7MIXP8ku+TXCvVsOfPFZzj2IJ60C6wekDWw5rqeCPlm OoxgK5F9yd2A4xsjOYLumAdB02/R8I6BeST3i9OhcPUKuq6OeFhKvxlLLVJ2zGCx 8+uxcpWhRdSVcTaQQQONeicgN4xlz4hRTGUvbpUHQr3+nAo1Ef7Aujrx8Qu0L4XE EQHBOOYIm+nYPdvkkymP4iuXPWgB4+5Nd9yFyhaun5DAH92209CjP/d8Cy0hqMAM 5/XRb4k/r2XLUQ7/HLx8JjAHjrynYlAx -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:52 2024 by rpki-client on console-fra.rpki-client.org