$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa File: 6C084B140FB211EB97408631C4F9AE02.roa (raw, json) Hash identifier: AX7KGg6gww585YGmsDLWDi1Cw5+rIu7XLbizj7d+tiU= Subject key identifier: 29:7E:F9:29:CA:D5:34:F3:94:B5:39:BF:5B:E8:20:05:85:08:05:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 88C3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa Signing time: Thu 30 May 2024 15:55:57 +0000 ROA not before: Thu 30 May 2024 15:55:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133240 IP address blocks: 103.47.78.0/24 maxlen: 24 103.87.150.0/24 maxlen: 24 103.87.151.0/24 maxlen: 24 103.230.101.0/24 maxlen: 24 103.230.102.0/24 maxlen: 24 103.230.103.0/24 maxlen: 24 2001:df1:fb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35011 (0x88c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:55:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a18c-f633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:85:94:42:53:a7:34:39:4f:53:3c:35:8e: 44:1b:c2:67:7f:03:97:e0:d4:85:e2:53:85:0b:21: cb:60:6a:87:74:73:4d:fd:e1:6a:32:c6:22:f8:21: 62:8c:fa:1a:88:2b:c7:a8:2c:c9:6e:47:91:a4:9f: 60:76:cf:48:0b:17:66:60:a0:54:85:bf:4d:14:97: bc:fc:45:cd:16:fd:7f:d2:1e:3b:4a:fc:7c:b8:87: f0:3e:9c:59:e7:37:42:7e:dd:7a:3b:ae:27:62:cf: 95:80:bf:eb:e4:75:86:3d:87:82:03:38:13:29:da: 88:82:07:13:7f:95:51:85:9f:f3:6e:7d:a0:d0:23: fc:2b:94:3a:99:9a:8a:5c:26:14:c0:94:40:fb:a1: 0b:f3:7a:58:69:9b:d6:ae:19:54:2e:2c:45:57:f1: 7e:41:22:2a:3c:5b:3e:75:c6:91:bd:4a:6d:94:09: 9c:78:41:9f:cd:a8:a0:34:98:7e:d4:88:dd:28:e3: 74:6b:60:b9:42:cd:29:17:21:d1:7d:65:4c:94:fa: bf:be:b2:35:f0:cf:ea:50:3e:cc:ae:4e:8f:11:d5: 0e:c4:d2:23:29:44:c6:c7:18:e5:17:f9:99:71:8b: 30:8b:00:11:6f:da:82:4f:9f:1b:72:74:31:3f:3b: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:F9:29:CA:D5:34:F3:94:B5:39:BF:5B:E8:20:05:85:08:05:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.78.0/24 103.87.150.0/23 103.230.101.0-103.230.103.255 IPv6: 2001:df1:fb40::/48 Signature Algorithm: sha256WithRSAEncryption 13:09:f8:ac:a2:d1:c3:9b:be:2f:8b:99:ff:f1:07:35:87:9c: 9c:c4:9d:6b:45:c1:f5:7d:e1:59:78:d1:98:c6:71:62:a4:ee: 7f:f5:08:4e:4e:e9:fe:d7:f5:e0:af:74:54:c1:d7:5e:88:f8: 43:e5:f3:cd:73:1c:1c:76:0f:04:ff:48:63:6d:f1:45:35:32: df:d6:90:9a:04:d8:f4:59:71:f3:57:22:2e:ae:d4:9d:22:e6: 1f:95:f9:33:aa:fd:87:6f:4d:87:72:98:09:8c:da:0f:6f:39: 44:f5:c6:9b:6a:a6:25:0c:41:44:29:ef:e6:fa:53:7e:8d:65: 63:3d:9d:f7:29:56:4c:c6:a0:be:52:f6:8d:04:e7:9f:36:a8: 2e:21:cc:a8:a2:2b:3a:b2:55:51:71:63:14:99:64:c7:93:c3: 21:4f:56:5a:5b:a1:ec:eb:61:41:9e:05:82:a4:2b:20:8f:ec: 16:03:c9:4a:37:40:b8:39:6f:0d:77:87:79:42:66:3f:1a:19: 20:79:cf:53:7a:83:97:ba:94:89:5a:b7:a8:bc:41:60:cf:d5: 8e:09:65:76:24:57:c4:dc:ef:a8:26:d9:9e:a2:cd:79:64:21: 6a:05:38:15:52:9f:83:f4:9b:4c:61:5d:e5:1c:94:2c:e1:53: 5a:ab:cb:0e -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIDAIjDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTU1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExOGMtZjYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTJhZRCU6c0OU9TPDWORBvCZ38Dl+DUheJThQshy2Bqh3RzTf3hajLGIvgh Yoz6Gogrx6gsyW5HkaSfYHbPSAsXZmCgVIW/TRSXvPxFzRb9f9IeO0r8fLiH8D6c Wec3Qn7dejuuJ2LPlYC/6+R1hj2HggM4EynaiIIHE3+VUYWf8259oNAj/CuUOpma ilwmFMCUQPuhC/N6WGmb1q4ZVC4sRVfxfkEiKjxbPnXGkb1KbZQJnHhBn82ooDSY ftSI3SjjdGtguULNKRch0X1lTJT6v76yNfDP6lA+zK5OjxHVDsTSIylExscY5Rf5 mXGLMIsAEW/agk+fG3J0MT87yD8CAwEAAaOCArowggK2MB0GA1UdDgQWBBQpfvkp ytU085S1Ob9b6CAFhQgF/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDMDg0QjE0 MEZCMjExRUI5NzQwODYzMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEQGCCsGAQUFBwEHAQH/ BDUwMzAgBAIAATAaAwQAZy9OAwQBZ1eWMAwDBABn5mUDBANn5mAwDwQCAAIwCQMH ACABDfH7QDANBgkqhkiG9w0BAQsFAAOCAQEAEwn4rKLRw5u+L4uZ//EHNYecnMSd a0XB9X3hWXjRmMZxYqTuf/UITk7p/tf14K90VMHXXoj4Q+XzzXMcHHYPBP9IY23x RTUy39aQmgTY9Flx81ciLq7UnSLmH5X5M6r9h29Nh3KYCYzaD285RPXGm2qmJQxB RCnv5vpTfo1lYz2d9ylWTMagvlL2jQTnnzaoLiHMqKIrOrJVUXFjFJlkx5PDIU9W Wluh7OthQZ4FgqQrII/sFgPJSjdAuDlvDXeHeUJmPxoZIHnPU3qDl7qUiVq3qLxB YM/VjglldiRXxNzvqCbZnqLNeWQhagU4FVKfg/SbTGFd5RyULOFTWqvLDg== -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:04 2025 by rpki-client