$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa File: 5AD9257E4CED11ECA4A0C857C4F9AE02.roa (raw, json) Hash identifier: zSAA5uPCJ+Ajs+7Fgh7YvsNvC66vxrZIoJa6CmH+l/A= Subject key identifier: 6D:20:B0:AC:25:3B:CB:EB:B3:8A:4E:13:4F:38:F7:31:6F:EC:7C:4B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E9E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa Signing time: Thu 30 May 2024 16:20:27 +0000 ROA not before: Thu 30 May 2024 16:20:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147241 IP address blocks: 103.176.158.0/23 maxlen: 24 2001:df2:cc40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36510 (0x8e9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:20:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a74b-ae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:18:02:d7:7b:b8:c7:52:99:2b:6b:d2:cb: 07:98:6f:95:29:09:88:a3:79:5b:96:eb:c3:27:0f: 97:34:8a:b0:6b:10:90:0c:7c:5e:64:b1:d1:15:60: 69:8f:4f:6d:ee:87:f8:5e:e8:e8:28:95:e1:31:e4: d2:a7:43:84:89:70:79:70:a5:47:5d:cb:9c:81:1f: b2:26:7c:e0:ab:c1:89:cd:f7:7c:c8:e9:e8:5e:83: af:7d:50:ac:a4:70:98:02:52:0e:16:38:9a:55:24: 1f:bb:18:c2:27:d9:d1:bb:20:39:b0:1e:c5:b9:8c: e6:b0:ba:df:ce:89:c4:53:7c:83:a7:56:a9:2f:06: f4:49:73:fd:6c:a6:92:89:d0:b9:b8:d4:7e:5b:3f: 0d:8a:dd:d7:fb:7f:9b:bb:d1:d9:f1:ce:80:9f:5f: cb:08:2a:c9:7a:8c:06:e8:0b:72:ba:2d:9c:18:df: f6:97:a3:70:1a:3f:0d:26:d7:88:b9:31:b0:a2:eb: 9a:e5:8e:64:28:cc:ec:ab:9f:f7:ce:e8:2a:fd:cf: ff:b9:bc:fc:23:3b:27:ef:f6:6e:e8:76:bb:11:f9: f4:21:ba:e2:1c:9d:52:4e:26:70:17:0c:3c:55:fc: 45:b5:f2:36:5f:c7:6f:1b:7f:0a:fe:b6:44:93:d1: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:B0:AC:25:3B:CB:EB:B3:8A:4E:13:4F:38:F7:31:6F:EC:7C:4B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.158.0/23 IPv6: 2001:df2:cc40::/48 Signature Algorithm: sha256WithRSAEncryption 18:83:e8:70:ed:1f:3a:9e:e2:56:67:cc:12:8a:c7:cd:a1:db: e2:d7:12:9e:50:eb:67:cc:0e:9f:4e:24:9d:4e:41:ae:aa:04: 41:17:02:e8:df:51:61:ff:39:be:dc:73:e9:be:30:65:7a:59: 5d:6d:f7:c2:17:95:29:86:7d:30:b9:69:4b:c4:10:af:df:52: 00:6f:ea:d7:ec:7f:f4:01:09:72:6c:28:2c:fc:27:74:53:22: 02:e9:47:15:ba:07:fd:75:c0:30:df:e2:55:c3:2f:e2:2b:4f: 4c:49:51:12:98:dc:aa:3a:2a:3c:35:6c:fb:26:05:43:3c:0e: b7:dc:3c:38:26:56:22:14:2f:84:cd:72:6b:fb:48:aa:aa:bd: 38:c0:0f:47:06:c8:78:8e:0b:0b:f8:f0:9e:24:31:55:24:73: 02:47:35:33:e4:c4:17:a7:06:c5:2a:39:5a:17:7c:2f:f1:5d: e0:b8:70:ea:b9:ff:69:fa:94:57:cd:49:1a:5b:60:85:85:40: c2:49:51:6a:a9:da:b0:b1:84:15:b8:d8:33:3b:66:5b:54:0b: b3:94:09:17:f6:c3:2e:9e:04:b3:a0:76:13:9c:74:ed:c7:36: 3e:44:0e:15:19:1d:98:5d:e6:b2:b3:b7:e5:21:31:1a:f1:3e: 43:39:63:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI6eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjAyN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3NGItYWU1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4tGALXe7jHUpkra9LLB5hvlSkJiKN5W5brwycPlzSKsGsQkAx8XmSx0RVg aY9Pbe6H+F7o6CiV4THk0qdDhIlweXClR13LnIEfsiZ84KvBic33fMjp6F6Dr31Q rKRwmAJSDhY4mlUkH7sYwifZ0bsgObAexbmM5rC6386JxFN8g6dWqS8G9Elz/Wym konQubjUfls/DYrd1/t/m7vR2fHOgJ9fywgqyXqMBugLcrotnBjf9pejcBo/DSbX iLkxsKLrmuWOZCjM7Kuf987oKv3P/7m8/CM7J+/2buh2uxH59CG64hydUk4mcBcM PFX8RbXyNl/Hbxt/Cv62RJPRBwkCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRtILCs JTvL67OKThNPOPcxb+x8SzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVBRDkyNTdF NENFRDExRUNBNEEwQzg1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7CeMA8EAgACMAkDBwAgAQ3yzEAwDQYJKoZIhvcNAQEL BQADggEBABiD6HDtHzqe4lZnzBKKx82h2+LXEp5Q62fMDp9OJJ1OQa6qBEEXAujf UWH/Ob7cc+m+MGV6WV1t98IXlSmGfTC5aUvEEK/fUgBv6tfsf/QBCXJsKCz8J3RT IgLpRxW6B/11wDDf4lXDL+IrT0xJURKY3Ko6Kjw1bPsmBUM8DrfcPDgmViIUL4TN cmv7SKqqvTjAD0cGyHiOCwv48J4kMVUkcwJHNTPkxBenBsUqOVoXfC/xXeC4cOq5 /2n6lFfNSRpbYIWFQMJJUWqp2rCxhBW42DM7ZltUC7OUCRf2wy6eBLOgdhOcdO3H Nj5EDhUZHZhd5rKzt+UhMRrxPkM5Y7U= -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:06 2025 by rpki-client