$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa File: 53BB7ACEA73C11EFB295D44EC4F9AE02.roa (raw, json) Hash identifier: ABfnzHxR9oS6OaUMEbTzgHDKl+OvcHoq+mAQ4nnrbNE= Subject key identifier: 30:27:9F:18:85:BF:EF:1D:8D:B1:0B:E9:9F:6B:C0:ED:87:34:44:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9D7E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa Signing time: Wed 20 Nov 2024 12:38:22 +0000 ROA not before: Wed 20 Nov 2024 12:38:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 146882 IP address blocks: 103.172.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40318 (0x9d7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 20 12:38:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673dd83d-bfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:d3:f6:44:9a:c2:a5:5b:d4:c5:78:98:b1: d1:e5:46:47:92:88:f2:78:b4:31:d5:2a:c5:77:37: a6:57:6e:2c:67:4b:ae:76:da:e6:c7:7b:22:76:17: 30:f0:e4:27:45:ed:c5:f4:38:bd:65:3e:12:ae:63: d0:b7:dd:c8:e6:4a:7a:48:db:33:bd:d4:ad:4a:14: 16:96:be:50:8a:2c:77:98:00:a3:5e:cf:fa:0f:9e: 5f:b1:a5:d8:dc:a1:fc:fe:3d:f8:5f:e8:ca:6c:8d: 26:3c:b7:0e:e2:de:76:07:34:64:41:aa:73:08:36: 5e:50:00:f1:7c:6e:f2:2c:b0:f5:78:7f:7a:cd:7b: a2:0e:62:68:22:7f:66:fa:ac:07:23:a5:0f:52:64: eb:48:be:01:30:b9:c1:c3:a4:e4:54:8c:c5:9e:7b: d0:fd:87:ad:72:63:5d:09:e8:a3:43:34:31:c4:76: 4f:43:af:78:a6:7e:7c:86:e9:5d:d9:2a:98:66:5e: 47:d8:89:95:57:3e:74:df:ad:7d:29:27:6b:86:cd: 8d:ff:19:81:dc:5e:d4:55:e3:9f:84:d4:8c:03:44: 2b:c2:78:3c:78:62:e5:d2:39:cd:5f:0c:38:a4:0c: b5:11:4c:9c:32:e8:98:03:89:8b:ce:c4:dd:25:19: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:27:9F:18:85:BF:EF:1D:8D:B1:0B:E9:9F:6B:C0:ED:87:34:44:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BB7ACEA73C11EFB295D44EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.230.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:6a:90:78:5e:6b:55:92:06:ff:16:da:24:c7:ef:6b:82:6d: 48:5d:81:1e:5b:a8:29:49:50:59:59:0d:49:ff:b8:18:ff:58: f9:5b:cd:66:da:8b:10:64:1c:08:60:e3:d1:6d:c3:9d:1d:ca: a2:68:2a:68:ed:f0:40:3c:2f:d4:c6:8a:50:13:e0:94:db:4e: 61:a3:46:fe:7f:0c:4b:d9:6d:7d:19:9b:e7:3f:55:71:20:43: 28:30:fc:39:e9:25:be:6c:b7:e6:cd:48:ec:7f:a0:28:83:11: 99:32:33:ec:13:29:02:d1:9b:49:bf:83:85:2b:ae:34:33:74: a8:fd:e6:2f:d8:26:9f:fe:18:f5:c0:9a:f9:c3:aa:e7:2f:7d: 9a:28:dd:e8:b3:15:87:21:34:dd:07:11:9c:e9:c8:64:0a:72: 99:44:92:7f:bc:8a:33:de:52:b8:e5:c4:10:de:f7:5f:0d:b9: 21:6a:56:06:75:22:db:16:ed:0d:05:79:be:59:0a:94:f9:8a: 00:36:8d:14:d8:06:17:b9:4f:a6:73:8b:ad:49:e4:f5:ae:66: a3:05:cc:ba:72:c5:de:a0:19:6b:00:58:f2:86:51:53:97:af: 43:7f:ad:30:c2:02:ec:f4:59:b1:d3:46:50:6c:d3:0d:00:a7: 4f:8f:b4:4c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJ1+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTEyMDEyMzgyMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjczZGQ4M2QtYmZiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt80/ZEmsKlW9TFeJix0eVGR5KI8ni0MdUqxXc3plduLGdLrnba5sd7InYX MPDkJ0XtxfQ4vWU+Eq5j0LfdyOZKekjbM73UrUoUFpa+UIosd5gAo17P+g+eX7Gl 2Nyh/P49+F/oymyNJjy3DuLedgc0ZEGqcwg2XlAA8Xxu8iyw9Xh/es17og5iaCJ/ ZvqsByOlD1Jk60i+ATC5wcOk5FSMxZ570P2HrXJjXQnoo0M0McR2T0OveKZ+fIbp XdkqmGZeR9iJlVc+dN+tfSkna4bNjf8Zgdxe1FXjn4TUjANEK8J4PHhi5dI5zV8M OKQMtRFMnDLomAOJi87E3SUZ38sCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQwJ58Y hb/vHY2xC+mfa8DthzREqzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUzQkI3QUNF QTczQzExRUZCMjk1RDQ0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6zmMA0GCSqGSIb3DQEBCwUAA4IBAQCMapB4XmtVkgb/ Ftokx+9rgm1IXYEeW6gpSVBZWQ1J/7gY/1j5W81m2osQZBwIYOPRbcOdHcqiaCpo 7fBAPC/UxopQE+CU205ho0b+fwxL2W19GZvnP1VxIEMoMPw56SW+bLfmzUjsf6Ao gxGZMjPsEykC0ZtJv4OFK640M3So/eYv2Caf/hj1wJr5w6rnL32aKN3osxWHITTd BxGc6chkCnKZRJJ/vIoz3lK45cQQ3vdfDbkhalYGdSLbFu0NBXm+WQqU+YoANo0U 2AYXuU+mc4utSeT1rmajBcy6csXeoBlrAFjyhlFTl69Df60wwgLs9Fmx00ZQbNMN AKdPj7RM -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:38 2024 by rpki-client on console-fra.rpki-client.org