$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65BF6DCE1CD611EBA06B6D51C4F9AE02.roa File: 65BF6DCE1CD611EBA06B6D51C4F9AE02.roa (raw, json) Hash identifier: fWNH0DTe/km3LBHC3omAaR/z9TQIPrDcAP4+/IUQYk0= Subject key identifier: 3E:F2:13:A5:C0:6D:1B:B7:31:3F:A4:79:73:8F:C4:9D:93:FA:06:E7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8878 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65BF6DCE1CD611EBA06B6D51C4F9AE02.roa Signing time: Thu 30 May 2024 15:54:41 +0000 ROA not before: Thu 30 May 2024 15:54:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132760 IP address blocks: 103.25.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34936 (0x8878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:54:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a140-dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:4a:8f:29:b3:e2:3d:8f:5a:0f:18:84:07: 07:32:b1:8e:9c:57:5a:d4:57:12:fb:fc:2a:29:88: 47:64:d7:40:d0:ee:25:11:c5:4a:42:c5:fa:de:ab: a5:d4:56:10:13:a3:68:b7:2c:be:d0:c5:8e:3b:2f: 72:1d:68:71:0d:21:76:e6:48:cc:ac:8a:25:66:d0: ad:28:c6:59:c9:6c:fb:77:91:53:a6:d4:64:6a:1c: 49:4d:9c:6b:57:a2:de:5d:8c:a2:4a:e7:ed:d8:73: 42:b8:ac:bb:53:69:43:0b:e0:ac:95:93:34:43:31: a0:aa:33:eb:d5:66:b2:22:26:45:89:63:3d:e5:6f: 0f:07:0d:3d:3e:d4:2b:5e:b7:72:e1:a5:f8:ee:7e: 18:1d:d2:f5:8e:93:a3:3c:10:a1:ec:5c:3e:62:f2: 94:de:39:52:43:d5:1d:5f:b4:24:fa:6c:44:af:ed: 8f:ac:fc:f3:0c:5a:48:02:af:f5:85:f3:7a:b8:3c: 07:c9:33:77:04:34:82:a4:3e:0e:7e:ac:d7:a9:df: 34:10:92:e0:4a:3a:32:c5:1c:bd:3f:71:5c:ba:66: 75:80:26:f0:ed:9c:2f:03:4e:c0:af:1d:e0:89:6b: f8:bf:71:82:5d:4e:91:9e:01:75:0c:1d:10:fb:a6: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:13:A5:C0:6D:1B:B7:31:3F:A4:79:73:8F:C4:9D:93:FA:06:E7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65BF6DCE1CD611EBA06B6D51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:40:6c:a4:c9:f2:5b:6a:01:ab:ac:c5:5d:6c:bf:b2:32:5e: c1:02:15:b2:3c:70:dd:56:4f:cb:1e:2c:61:b7:de:25:78:c3: 1b:20:b8:3d:05:d4:55:1e:80:a2:a3:2b:fd:40:aa:04:b3:11: 15:04:21:65:5a:91:ce:1c:bb:fc:99:86:70:f5:43:1d:64:32: 0b:5d:be:54:ac:bb:73:2d:03:aa:8a:82:fd:15:57:42:7d:4b: d4:da:fc:51:ff:e1:04:b1:18:64:21:16:41:71:a0:86:89:b8: 22:5a:49:23:02:f0:8c:30:40:a2:89:c7:89:13:bb:91:d2:5d: e3:61:4d:9c:3c:9d:67:87:bd:94:dc:c1:a6:26:37:87:43:68: 9f:8a:b1:bb:ce:0e:55:f3:62:ac:9d:24:aa:f3:d8:11:08:46: 35:c2:19:70:5f:71:96:a9:13:98:cb:3e:2a:e0:86:28:af:e1: 41:76:05:ce:93:1c:15:e6:69:d1:ba:2e:09:cd:99:a2:55:0c: 98:d0:74:14:1a:4f:e4:0b:25:32:97:c5:7c:a1:18:6b:a3:29: 4d:22:ca:59:f2:61:db:91:aa:d4:0b:7b:b8:9e:b5:8a:83:5f: 87:32:90:3c:66:54:be:6b:ec:8a:f2:25:e5:46:88:64:52:09: 05:70:fb:f7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIh4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTQ0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExNDAtZGZhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5KSo8ps+I9j1oPGIQHBzKxjpxXWtRXEvv8KimIR2TXQNDuJRHFSkLF+t6r pdRWEBOjaLcsvtDFjjsvch1ocQ0hduZIzKyKJWbQrSjGWcls+3eRU6bUZGocSU2c a1ei3l2Mokrn7dhzQrisu1NpQwvgrJWTNEMxoKoz69VmsiImRYljPeVvDwcNPT7U K163cuGl+O5+GB3S9Y6TozwQoexcPmLylN45UkPVHV+0JPpsRK/tj6z88wxaSAKv 9YXzerg8B8kzdwQ0gqQ+Dn6s16nfNBCS4Eo6MsUcvT9xXLpmdYAm8O2cLwNOwK8d 4Ilr+L9xgl1OkZ4BdQwdEPumwD8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ+8hOl wG0btzE/pHlzj8Sdk/oG5zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY1QkY2RENF MUNENjExRUJBMDZCNkQ1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZxmsMA0GCSqGSIb3DQEBCwUAA4IBAQA6QGykyfJbagGr rMVdbL+yMl7BAhWyPHDdVk/LHixht94leMMbILg9BdRVHoCioyv9QKoEsxEVBCFl WpHOHLv8mYZw9UMdZDILXb5UrLtzLQOqioL9FVdCfUvU2vxR/+EEsRhkIRZBcaCG ibgiWkkjAvCMMECiiceJE7uR0l3jYU2cPJ1nh72U3MGmJjeHQ2ifirG7zg5V82Ks nSSq89gRCEY1whlwX3GWqROYyz4q4IYor+FBdgXOkxwV5mnRui4JzZmiVQyY0HQU Gk/kCyUyl8V8oRhroylNIspZ8mHbkarUC3u4nrWKg1+HMpA8ZlS+a+yK8iXlRohk UgkFcPv3 -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:48 2024 by rpki-client on console-ams.rpki-client.org