$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66845B8E021911EBA5F5AB42C4F9AE02.roa File: 66845B8E021911EBA5F5AB42C4F9AE02.roa (raw, json) Hash identifier: u3FlL3RrVkbqxOTw3PPI0JE+m/wWC0OGIQqfMrpLXQs= Subject key identifier: B2:50:10:DC:29:B4:41:60:87:D7:EF:BA:D3:31:41:77:1F:10:26:3C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66845B8E021911EBA5F5AB42C4F9AE02.roa Signing time: Thu 30 May 2024 16:06:21 +0000 ROA not before: Thu 30 May 2024 16:06:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136691 IP address blocks: 103.155.204.0/24 maxlen: 24 103.171.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35645 (0x8b3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:06:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a3fd-14fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:2d:e6:b1:d7:05:b3:82:a6:dc:b2:28:e3: 02:1e:a5:02:b8:93:ec:98:79:0c:36:5e:55:5f:5f: 82:e2:2a:52:6b:ac:17:58:8c:f7:18:d1:57:e7:6f: 5b:89:b0:9b:87:de:b7:ed:86:be:84:8d:d4:82:83: e3:90:96:5a:d3:72:42:a7:1d:38:dc:ac:da:af:10: 3e:58:a0:0c:2e:c2:16:2e:34:19:28:d0:0b:cb:18: 07:40:fb:a5:32:81:94:a9:ab:f2:a8:84:18:f1:95: a5:9e:e7:4e:4c:d8:49:0d:f0:08:77:57:dd:1e:b8: d0:44:2b:0d:99:3e:1d:b6:7c:65:a6:20:23:c5:ce: f4:a4:bf:5e:36:ce:1c:6e:ed:9a:58:d4:3c:3b:fe: de:75:53:ba:7d:55:81:f9:24:d5:5c:81:da:8c:9d: f4:22:b8:e1:1d:87:ed:c6:37:49:d3:53:d1:52:ea: 11:08:a6:c2:03:1b:a1:e5:b7:86:77:26:be:a2:52: 0d:5a:39:5e:a1:78:6c:8a:05:da:89:07:31:94:60: 67:4f:35:13:1c:d5:5e:38:1c:24:be:45:69:f1:d7: cd:8b:87:81:26:51:76:1e:dd:05:67:7d:df:75:d0: 3a:82:2c:f2:9b:2a:6b:50:9b:2b:68:a6:8a:a2:2e: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:10:DC:29:B4:41:60:87:D7:EF:BA:D3:31:41:77:1F:10:26:3C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66845B8E021911EBA5F5AB42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.204.0/24 103.171.134.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a2:dd:60:48:f5:b8:15:1a:b3:8f:2e:a3:e3:19:88:4d:67: 57:bb:de:89:73:4b:98:3a:a8:d1:9e:26:1e:76:af:01:8e:53: 6d:dc:85:60:e6:98:a3:5d:c4:7a:24:46:db:29:c9:76:10:78: 56:33:04:52:38:ac:3a:a8:99:01:12:20:9c:fd:cf:27:0e:f1: 15:7c:07:10:90:6e:0c:ea:75:89:43:50:ed:e8:86:cb:71:ac: 8e:da:8e:c7:6b:21:fd:d5:83:fa:a7:cc:81:94:11:ad:4d:55: 62:0e:61:09:ca:49:eb:d6:21:0b:a4:10:d9:e6:1b:14:41:7a: f5:38:4b:3e:e6:71:03:c4:7a:df:e1:81:8b:b6:6b:8a:6e:48: ef:2e:51:3b:bf:bc:ad:3c:4c:47:d9:1d:3f:60:64:ed:6e:97: 8b:55:65:d8:a2:12:9b:20:09:f8:0f:56:5e:aa:95:9d:07:76: f8:51:c9:74:f6:40:73:c7:32:b8:b4:c1:aa:b5:4b:f7:5d:9b: 02:f9:44:89:41:80:b3:07:ff:f9:82:50:73:32:ca:37:54:1f: 71:3d:17:96:54:06:b5:d9:e8:bc:d2:25:86:58:bc:2b:eb:1a: 17:1a:97:41:a9:fc:50:78:3a:a9:fc:b8:39:a0:85:52:32:76: fe:9a:b7:bf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIs9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDYyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzZmQtMTRmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL27Leax1wWzgqbcsijjAh6lAriT7Jh5DDZeVV9fguIqUmusF1iM9xjRV+dv W4mwm4fet+2GvoSN1IKD45CWWtNyQqcdONys2q8QPligDC7CFi40GSjQC8sYB0D7 pTKBlKmr8qiEGPGVpZ7nTkzYSQ3wCHdX3R640EQrDZk+HbZ8ZaYgI8XO9KS/XjbO HG7tmljUPDv+3nVTun1Vgfkk1VyB2oyd9CK44R2H7cY3SdNT0VLqEQimwgMboeW3 hncmvqJSDVo5XqF4bIoF2okHMZRgZ081ExzVXjgcJL5FafHXzYuHgSZRdh7dBWd9 33XQOoIs8psqa1CbK2imiqIu3G0CAwEAAaOCApswggKXMB0GA1UdDgQWBBSyUBDc KbRBYIfX77rTMUF3HxAmPDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY2ODQ1QjhF MDIxOTExRUJBNUY1QUI0MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ5vMAwQAZ6uGMA0GCSqGSIb3DQEBCwUAA4IBAQC0ot1g SPW4FRqzjy6j4xmITWdXu96Jc0uYOqjRniYedq8BjlNt3IVg5pijXcR6JEbbKcl2 EHhWMwRSOKw6qJkBEiCc/c8nDvEVfAcQkG4M6nWJQ1Dt6IbLcayO2o7HayH91YP6 p8yBlBGtTVViDmEJyknr1iELpBDZ5hsUQXr1OEs+5nEDxHrf4YGLtmuKbkjvLlE7 v7ytPExH2R0/YGTtbpeLVWXYohKbIAn4D1ZeqpWdB3b4Ucl09kBzxzK4tMGqtUv3 XZsC+USJQYCzB//5glBzMso3VB9xPReWVAa12ei80iWGWLwr6xoXGpdBqfxQeDqp /Lg5oIVSMnb+mre/ -----END CERTIFICATE-----Generated at Sun Feb 16 20:29:44 2025 by rpki-client