$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A382ADCA6A011EB89E70D46C4F9AE02.roa File: 5A382ADCA6A011EB89E70D46C4F9AE02.roa (raw, json) Hash identifier: nXEcuN2mkPhI1ybh2C8ivc7pqOaR2kCLSRA+KoOeQoA= Subject key identifier: A6:36:BF:26:78:72:0C:18:8D:14:10:6D:0B:88:D5:47:D2:65:F5:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8AF0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A382ADCA6A011EB89E70D46C4F9AE02.roa Signing time: Thu 30 May 2024 16:05:04 +0000 ROA not before: Thu 30 May 2024 16:05:04 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136332 IP address blocks: 103.89.59.0/24 maxlen: 24 103.190.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35568 (0x8af0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:05:04 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a3b0-7426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:35:46:28:e9:38:50:26:1f:69:7c:36:6f: af:72:fc:96:e1:54:1c:ca:84:52:67:3f:61:a7:b0: a8:9a:5b:07:63:c3:50:4a:6e:f5:e6:96:3e:f2:d6: 2f:f5:d7:c5:31:19:d3:27:83:0b:23:dc:c4:74:7e: 25:c9:0c:41:81:b3:5f:7d:59:60:e2:9b:8e:53:a1: 07:6d:b9:e9:16:59:25:ae:8b:66:c0:c7:d1:c8:f5: 88:4f:3c:86:75:1f:78:f9:b7:be:13:be:82:6c:2f: db:d2:98:af:d3:cc:91:15:f4:4f:62:ea:94:31:dc: 03:73:d2:c3:fb:0b:2d:74:a7:5a:75:ca:e4:73:e5: 6f:0c:a6:ae:21:64:55:8e:7a:f3:3f:8a:3c:5e:10: 24:01:7d:9f:c0:53:6e:d9:9c:88:d2:0e:27:58:ff: 3f:b7:01:f4:18:18:1e:35:dd:0e:27:53:fa:4b:aa: 61:e8:bb:f8:39:65:4d:ef:1a:dd:de:86:5c:71:57: 50:b6:f7:cd:5f:4b:37:34:03:2e:32:a4:06:39:64: 56:9f:f6:d1:ff:e1:e2:b5:84:c7:a8:8c:7d:4e:88: 2e:a3:b5:1e:82:34:a3:77:16:14:fd:81:42:9f:38: f5:cd:84:66:b1:6f:59:f7:d4:eb:3c:c0:fe:06:de: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:36:BF:26:78:72:0C:18:8D:14:10:6D:0B:88:D5:47:D2:65:F5:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A382ADCA6A011EB89E70D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.59.0/24 103.190.252.0/23 Signature Algorithm: sha256WithRSAEncryption 78:c9:78:59:86:92:e6:76:fd:e8:89:a5:2e:fe:fa:e5:18:ba: 0e:1f:f3:54:27:7e:b3:a9:66:f3:b7:53:94:44:e2:63:25:b9: 37:31:3a:2e:36:16:ab:7c:b8:96:63:3c:64:47:61:2a:6a:6b: 06:d2:19:07:8b:ab:cb:c7:f2:21:41:fb:c0:27:04:58:d8:64: 5d:3f:04:24:05:c1:c0:b7:5b:c1:09:a4:25:25:b8:e4:c5:22: a5:0f:83:e6:36:ff:b0:3b:c2:15:92:23:e9:e7:e2:18:f1:eb: 1e:de:30:af:83:da:52:ec:b4:a6:8b:bc:6a:9c:be:28:11:ec: a3:b7:ef:e2:1d:28:36:91:97:30:0b:5b:f7:59:13:6c:89:8e: ae:e8:b8:44:c9:78:83:d9:e7:c3:3c:10:7b:c0:f5:9a:88:fd: 26:79:de:01:73:e4:1f:58:d3:b2:fd:e3:fb:85:23:e4:e6:c3: b5:84:db:07:6f:01:4a:bd:d3:04:c8:b7:75:c4:ea:81:2d:81: b0:af:5b:be:ee:d0:c2:3a:a2:02:01:ee:ba:43:d9:24:d3:10: 00:de:7c:ff:a7:53:95:8f:74:b5:08:d8:3c:87:79:f9:db:85: d4:1d:8e:f6:c8:00:e0:a0:33:4e:15:fc:c3:40:35:77:a9:3a: 5a:d0:b7:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIrwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDUwNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzYjAtNzQyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHLNUYo6ThQJh9pfDZvr3L8luFUHMqEUmc/YaewqJpbB2PDUEpu9eaWPvLW L/XXxTEZ0yeDCyPcxHR+JckMQYGzX31ZYOKbjlOhB2256RZZJa6LZsDH0cj1iE88 hnUfePm3vhO+gmwv29KYr9PMkRX0T2LqlDHcA3PSw/sLLXSnWnXK5HPlbwymriFk VY568z+KPF4QJAF9n8BTbtmciNIOJ1j/P7cB9BgYHjXdDidT+kuqYei7+DllTe8a 3d6GXHFXULb3zV9LNzQDLjKkBjlkVp/20f/h4rWEx6iMfU6ILqO1HoI0o3cWFP2B Qp849c2EZrFvWffU6zzA/gbeqjMCAwEAAaOCApswggKXMB0GA1UdDgQWBBSmNr8m eHIMGI0UEG0LiNVH0mX1sjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVBMzgyQURD QTZBMDExRUI4OUU3MEQ0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ1k7AwQBZ778MA0GCSqGSIb3DQEBCwUAA4IBAQB4yXhZ hpLmdv3oiaUu/vrlGLoOH/NUJ36zqWbzt1OUROJjJbk3MTouNharfLiWYzxkR2Eq amsG0hkHi6vLx/IhQfvAJwRY2GRdPwQkBcHAt1vBCaQlJbjkxSKlD4PmNv+wO8IV kiPp5+IY8ese3jCvg9pS7LSmi7xqnL4oEeyjt+/iHSg2kZcwC1v3WRNsiY6u6LhE yXiD2efDPBB7wPWaiP0med4Bc+QfWNOy/eP7hSPk5sO1hNsHbwFKvdMEyLd1xOqB LYGwr1u+7tDCOqICAe66Q9kk0xAA3nz/p1OVj3S1CNg8h3n524XUHY72yADgoDNO FfzDQDV3qTpa0LdY -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:38 2024 by rpki-client on console-fra.rpki-client.org