$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/657AE3D4182611EBBB3E642AC4F9AE02.roa File: 657AE3D4182611EBBB3E642AC4F9AE02.roa (raw, json) Hash identifier: sMPi6p5rPOOqQGkt5WCt/aNoyEtj/ZlxXc4nq6lC2wM= Subject key identifier: C8:5A:90:E7:4B:1E:CB:DE:A6:EB:71:73:A8:37:12:A0:2C:4D:46:EA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8985 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/657AE3D4182611EBBB3E642AC4F9AE02.roa Signing time: Thu 30 May 2024 15:59:11 +0000 ROA not before: Thu 30 May 2024 15:59:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134274 IP address blocks: 103.157.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35205 (0x8985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:59:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a24e-6ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ad:79:d4:b8:fe:e3:a9:6e:78:34:b4:d8:4b: c2:35:e9:10:e6:16:41:6c:a5:2e:e3:0d:4c:a7:12: f2:a0:b3:ce:e2:f0:0d:9b:ea:29:85:fa:a0:f6:07: 9c:ef:b0:b9:a6:f3:f8:6b:fd:99:5f:d9:75:f7:86: ae:e9:8f:99:d6:13:ac:a2:1a:cd:ee:7d:2e:62:fb: 2d:52:87:75:05:d8:42:bf:15:55:99:41:8d:f2:d9: 7f:c4:ba:ab:74:de:8c:0c:8f:7b:59:be:6a:8c:1d: 11:55:b3:6c:75:9c:cd:1b:1b:8c:50:b5:ad:47:7a: 79:c2:e7:59:8d:b5:51:84:b4:60:11:c1:ca:80:65: 79:9a:e2:f2:61:91:1d:db:f6:37:00:72:21:01:9b: 32:90:87:93:08:4e:04:f9:2c:7e:d2:e2:43:31:a2: f3:39:e2:cf:f8:18:b6:c0:22:de:9f:ef:bb:ee:48: b4:19:b7:0e:bd:e5:aa:7c:d9:2b:c2:bd:1f:21:94: 05:2f:55:30:e8:6d:67:ef:39:de:54:9c:2e:fe:a6: 06:b4:2b:8a:4a:2f:db:81:51:1b:d3:db:30:a7:b4: 1a:67:80:a5:4b:35:c0:a4:e5:05:05:0e:ce:4c:18: e0:62:20:ea:38:b2:f4:d6:6d:92:0d:cc:bb:00:f3: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:90:E7:4B:1E:CB:DE:A6:EB:71:73:A8:37:12:A0:2C:4D:46:EA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/657AE3D4182611EBBB3E642AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:eb:d6:e5:b0:16:c5:f9:2a:67:64:9e:a6:df:1f:50:76:73: 35:e3:43:01:2c:b2:f0:26:f7:d4:f3:ae:86:15:ca:ec:1d:ff: 29:34:89:d0:1c:62:a1:ba:6f:6a:cf:0b:03:3e:a7:69:c7:3d: 79:31:8e:92:ec:23:42:de:15:91:dc:ef:3b:de:28:ba:4e:da: be:9e:e9:be:0e:50:11:62:bd:e8:5e:68:b7:ed:53:d1:79:d7: ab:38:9c:f6:2e:0d:e1:ff:fc:61:22:0c:6e:ff:82:08:05:e3: e9:59:9d:53:06:46:28:dd:7d:61:32:f3:aa:d2:40:c1:d4:16: 91:b2:c5:a4:97:a8:14:7c:e4:72:21:95:c8:f8:0c:5f:88:ef: e7:0d:d1:77:fd:0d:e8:2c:36:b6:21:4f:55:1f:c0:e1:eb:56: aa:af:1d:03:1c:ce:51:6a:61:8b:f7:0d:65:a1:a7:5d:00:49: 53:c5:89:0c:97:d9:47:bb:9a:eb:99:ec:77:b8:50:66:d6:c0: a4:5b:5b:8c:a9:1e:cd:82:5c:10:cf:66:b9:a0:12:90:ea:25: 30:4c:84:79:9f:87:e1:9b:86:c0:9b:4c:ff:d7:db:38:40:00: 1a:b4:1d:84:80:03:51:36:1a:95:46:41:50:fb:18:5b:51:c9: 49:ba:59:ff -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAImFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTkxMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyNGUtNmFjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqtedS4/uOpbng0tNhLwjXpEOYWQWylLuMNTKcS8qCzzuLwDZvqKYX6oPYH nO+wuabz+Gv9mV/ZdfeGrumPmdYTrKIaze59LmL7LVKHdQXYQr8VVZlBjfLZf8S6 q3TejAyPe1m+aowdEVWzbHWczRsbjFC1rUd6ecLnWY21UYS0YBHByoBleZri8mGR Hdv2NwByIQGbMpCHkwhOBPksftLiQzGi8zniz/gYtsAi3p/vu+5ItBm3Dr3lqnzZ K8K9HyGUBS9VMOhtZ+853lScLv6mBrQrikov24FRG9PbMKe0GmeApUs1wKTlBQUO zkwY4GIg6jiy9NZtkg3MuwDz0ucCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTIWpDn Sx7L3qbrcXOoNxKgLE1G6jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY1N0FFM0Q0 MTgyNjExRUJCQjNFNjQyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ52YMA0GCSqGSIb3DQEBCwUAA4IBAQA869blsBbF+Spn ZJ6m3x9QdnM140MBLLLwJvfU866GFcrsHf8pNInQHGKhum9qzwsDPqdpxz15MY6S 7CNC3hWR3O873ii6Ttq+num+DlARYr3oXmi37VPRederOJz2Lg3h//xhIgxu/4II BePpWZ1TBkYo3X1hMvOq0kDB1BaRssWkl6gUfORyIZXI+AxfiO/nDdF3/Q3oLDa2 IU9VH8Dh61aqrx0DHM5RamGL9w1loaddAElTxYkMl9lHu5rrmex3uFBm1sCkW1uM qR7NglwQz2a5oBKQ6iUwTIR5n4fhm4bAm0z/19s4QAAatB2EgANRNhqVRkFQ+xhb UclJuln/ -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:01 2024 by rpki-client on console-fra.rpki-client.org