$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/694801C8255B11EE8DD78D87C4F9AE02.roa File: 694801C8255B11EE8DD78D87C4F9AE02.roa (raw, json) Hash identifier: sRmkoIkaQPmdsauMbPQZg0/GKFJYWrX9kBrh5rf1QOA= Subject key identifier: 7D:57:E6:D0:3A:1E:2B:19:61:26:90:08:3C:C6:1A:CE:B6:9E:98:3B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 901E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/694801C8255B11EE8DD78D87C4F9AE02.roa Signing time: Thu 30 May 2024 16:26:37 +0000 ROA not before: Thu 30 May 2024 16:26:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151125 IP address blocks: 103.238.64.0/23 maxlen: 24 2401:1860::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36894 (0x901e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:26:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a8bd-906a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:53:70:e4:dc:4d:cc:50:88:bf:d1:78:23: 83:11:90:5a:1b:8a:14:6e:0a:96:de:d2:6d:17:2d: dd:c1:6c:da:9d:f0:7e:b4:ac:29:d3:50:9c:18:81: 0d:4b:54:87:e0:e5:3b:fe:65:8c:2b:7b:a5:84:03: 5c:01:50:74:27:d4:10:a9:96:eb:18:0a:b7:f9:29: ee:8e:ed:2c:2d:67:b1:8c:1c:8b:db:ff:d3:fe:36: 72:fb:dc:84:7e:78:1c:8f:7e:8e:b8:fb:46:7e:47: 0f:5a:00:a3:70:27:cd:a3:08:29:c7:1b:54:d0:1c: 9d:02:9c:24:48:5e:ec:95:d9:75:b6:97:a1:52:cb: 0c:12:39:9d:d2:6f:25:2e:58:dd:61:bc:ad:7c:c9: 24:67:37:2c:e0:0a:06:97:64:ae:f7:c7:e3:eb:48: 3c:24:da:55:07:db:1a:fd:0b:37:65:40:48:b1:fd: 17:df:4a:b4:87:24:d9:81:6c:1b:78:92:3b:ee:bd: 17:cd:47:03:21:5a:1b:88:04:46:c0:1c:5f:74:5d: 67:be:a6:2f:86:95:c2:3f:33:b8:3b:fe:27:61:ad: 98:9a:2f:a2:24:13:51:b0:87:07:b8:b6:fe:e9:e5: 71:58:36:86:1b:a3:71:10:7a:34:cb:cc:2a:2d:7f: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:E6:D0:3A:1E:2B:19:61:26:90:08:3C:C6:1A:CE:B6:9E:98:3B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/694801C8255B11EE8DD78D87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.64.0/23 IPv6: 2401:1860::/32 Signature Algorithm: sha256WithRSAEncryption 18:86:46:f0:c5:e6:b7:33:ea:e6:3b:b9:f4:3d:0f:a6:aa:37: e0:04:d8:68:75:bf:29:97:6b:7c:d2:3a:5f:ae:02:8f:12:26: 91:56:29:8d:b0:a3:ab:cc:2c:44:7b:de:78:f6:94:eb:9c:b7: 1f:d7:54:c7:29:ef:4b:4c:87:44:b1:c3:ce:40:33:9c:1a:2f: 98:ee:d2:bc:66:7f:94:3e:48:09:e0:95:d5:84:01:96:21:d6: 38:2e:04:06:34:56:02:56:e6:c0:11:c2:e8:92:df:49:c4:a7: 9d:d2:a7:8c:66:d9:39:a6:89:5a:53:ab:4c:67:c8:5a:fe:50: 03:21:4b:cb:44:50:9a:b1:bf:1e:7a:4a:18:52:01:37:33:51: b2:ff:97:fe:9d:27:68:72:0c:4d:d7:02:18:10:61:91:4c:28: 2c:15:02:15:84:e2:7e:d9:c2:ce:a1:c0:e7:7a:9d:0f:10:d0: d2:ea:76:17:cc:d3:47:26:d0:d3:f9:71:12:75:5e:be:71:c0: 91:7a:cc:e3:e6:43:ed:56:a0:1b:8b:12:67:ce:ed:cc:48:cf: 0e:78:5a:61:ca:8b:bc:a1:5d:19:6b:61:2a:62:15:06:54:1f: c3:e8:e5:35:b9:e8:c5:49:84:52:f3:c5:32:21:c4:33:5c:f7: 91:0d:12:cb -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAJAeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjYzN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4YmQtOTA2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp1U3Dk3E3MUIi/0XgjgxGQWhuKFG4Klt7SbRct3cFs2p3wfrSsKdNQnBiB DUtUh+DlO/5ljCt7pYQDXAFQdCfUEKmW6xgKt/kp7o7tLC1nsYwci9v/0/42cvvc hH54HI9+jrj7Rn5HD1oAo3AnzaMIKccbVNAcnQKcJEhe7JXZdbaXoVLLDBI5ndJv JS5Y3WG8rXzJJGc3LOAKBpdkrvfH4+tIPCTaVQfbGv0LN2VASLH9F99KtIck2YFs G3iSO+69F81HAyFaG4gERsAcX3RdZ76mL4aVwj8zuDv+J2GtmJovoiQTUbCHB7i2 /unlcVg2hhujcRB6NMvMKi1/UBkCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBR9V+bQ Oh4rGWEmkAg8xhrOtp6YOzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY5NDgwMUM4 MjU1QjExRUU4REQ3OEQ4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ+5AMA0EAgACMAcDBQAkARhgMA0GCSqGSIb3DQEBCwUA A4IBAQAYhkbwxea3M+rmO7n0PQ+mqjfgBNhodb8pl2t80jpfrgKPEiaRVimNsKOr zCxEe9549pTrnLcf11THKe9LTIdEscPOQDOcGi+Y7tK8Zn+UPkgJ4JXVhAGWIdY4 LgQGNFYCVubAEcLokt9JxKed0qeMZtk5polaU6tMZ8ha/lADIUvLRFCasb8eekoY UgE3M1Gy/5f+nSdocgxN1wIYEGGRTCgsFQIVhOJ+2cLOocDnep0PENDS6nYXzNNH JtDT+XESdV6+ccCReszj5kPtVqAbixJnzu3MSM8OeFphyou8oV0Za2EqYhUGVB/D 6OU1uejFSYRS88UyIcQzXPeRDRLL -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:41 2024 by rpki-client on console-fra.rpki-client.org