$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D937530CF8711EC9B283587C4F9AE02.roa File: 6D937530CF8711EC9B283587C4F9AE02.roa (raw, json) Hash identifier: 76dtiExM9lpa/7ZPioCHYY/q+1aacfmd/YGNecnMVuw= Subject key identifier: A8:8D:C9:9A:3C:86:02:5D:E4:89:A9:2C:3D:80:3A:60:86:46:28:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8C35 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D937530CF8711EC9B283587C4F9AE02.roa Signing time: Thu 30 May 2024 16:10:22 +0000 ROA not before: Thu 30 May 2024 16:10:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138730 IP address blocks: 36.255.132.0/22 maxlen: 24 103.108.120.0/22 maxlen: 24 103.118.116.0/22 maxlen: 24 103.209.140.0/22 maxlen: 24 103.234.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35893 (0x8c35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:10:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a4ee-c4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:c9:74:8d:f3:da:08:b3:dd:e2:e9:5b:ca: 49:07:a8:58:c3:3a:30:84:2b:d9:34:92:17:29:8a: 7b:8c:13:ac:1f:bd:0d:04:a5:70:1d:56:c3:51:b3: 6e:7d:54:ca:b9:d0:22:74:6c:2f:99:f1:35:1c:79: c9:64:b4:53:61:9e:62:f7:68:0f:b8:40:ee:19:54: ef:65:53:e3:03:4a:dc:7c:45:12:22:ec:94:bb:1f: 18:0e:89:93:41:31:3d:c3:49:01:7f:c2:00:65:ae: cc:05:3d:9c:ea:27:68:a3:30:62:32:92:52:d0:36: 55:1e:58:00:d8:04:0c:c5:a1:76:f9:8f:cf:d4:8b: 09:6b:e0:a4:27:84:8d:a4:54:bb:11:6a:06:ad:0d: 3e:a1:cf:14:ba:4f:b0:8d:cc:52:27:24:66:f0:98: c8:08:09:71:b3:b0:49:20:15:a8:6b:d3:6e:09:ac: e7:d3:64:ff:9f:d1:38:42:06:32:cd:a4:12:1e:66: c0:46:84:e3:0c:89:e9:c2:b2:94:4e:56:39:de:93: 35:1b:09:1f:9f:b4:93:63:2d:cd:4b:16:76:79:0a: fb:7e:45:24:e4:30:68:15:a8:d6:b7:c9:c5:4b:04: 5c:ce:5e:87:f7:a4:53:db:8b:51:0a:8f:9b:72:37: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8D:C9:9A:3C:86:02:5D:E4:89:A9:2C:3D:80:3A:60:86:46:28:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D937530CF8711EC9B283587C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.132.0/22 103.108.120.0/22 103.118.116.0/22 103.209.140.0/22 103.234.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:67:5a:9c:68:8b:2f:d7:72:e9:5d:89:ae:58:04:f8:8f:eb: 3a:01:11:85:88:0e:c0:1a:14:30:ff:27:85:47:c6:5f:ac:5d: f5:f9:d4:59:8f:d3:81:e7:4b:38:a9:48:52:41:fc:62:be:be: 21:22:70:8f:f4:c3:35:e5:9b:02:33:a2:99:52:38:0f:44:91: b4:bf:20:16:05:b9:f0:fa:e5:f5:03:c3:11:94:10:9d:80:34: df:f2:6c:bc:d6:95:7c:06:27:c2:12:48:8f:52:99:07:30:98: f0:54:82:18:b1:05:09:74:c9:43:fa:55:47:c2:5e:df:a1:35: 41:27:e9:b4:2a:2a:0b:a7:a8:40:2e:4a:5a:8f:cc:85:39:e7: 08:6d:7e:53:02:16:2b:17:bd:66:76:2b:ec:c8:48:9e:a3:66: 05:9e:e0:30:1b:05:3c:e6:d8:08:55:ce:5c:2d:66:84:f7:1e: 14:a1:e8:18:9d:8d:d5:22:66:2e:22:b5:ff:9e:8f:04:af:e5: 58:bb:2c:1b:cf:79:a4:b4:37:7f:d9:94:3d:e3:e0:f2:dc:27: c7:91:a6:6e:b0:f9:9b:4d:22:ad:c2:12:9f:6c:94:20:96:12: 80:c5:91:52:6c:07:61:05:1a:78:1e:bb:17:84:bd:7a:a2:35: 10:40:a1:43 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAIw1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTAyMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0ZWUtYzRmMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2JyXSN89oIs93i6VvKSQeoWMM6MIQr2TSSFymKe4wTrB+9DQSlcB1Ww1Gz bn1UyrnQInRsL5nxNRx5yWS0U2GeYvdoD7hA7hlU72VT4wNK3HxFEiLslLsfGA6J k0ExPcNJAX/CAGWuzAU9nOonaKMwYjKSUtA2VR5YANgEDMWhdvmPz9SLCWvgpCeE jaRUuxFqBq0NPqHPFLpPsI3MUickZvCYyAgJcbOwSSAVqGvTbgms59Nk/5/ROEIG Ms2kEh5mwEaE4wyJ6cKylE5WOd6TNRsJH5+0k2MtzUsWdnkK+35FJOQwaBWo1rfJ xUsEXM5eh/ekU9uLUQqPm3I3puMCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBSojcma PIYCXeSJqSw9gDpghkYomTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZEOTM3NTMw Q0Y4NzExRUM5QjI4MzU4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQCJP+EAwQCZ2x4AwQCZ3Z0AwQCZ9GMAwQCZ+pAMA0GCSqG SIb3DQEBCwUAA4IBAQCPZ1qcaIsv13LpXYmuWAT4j+s6ARGFiA7AGhQw/yeFR8Zf rF31+dRZj9OB50s4qUhSQfxivr4hInCP9MM15ZsCM6KZUjgPRJG0vyAWBbnw+uX1 A8MRlBCdgDTf8my81pV8BifCEkiPUpkHMJjwVIIYsQUJdMlD+lVHwl7foTVBJ+m0 KioLp6hALkpaj8yFOecIbX5TAhYrF71mdivsyEieo2YFnuAwGwU85tgIVc5cLWaE 9x4UoegYnY3VImYuIrX/no8Er+VYuywbz3mktDd/2ZQ94+Dy3CfHkaZusPmbTSKt whKfbJQglhKAxZFSbAdhBRp4HrsXhL16ojUQQKFD -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:49 2024 by rpki-client on console-ams.rpki-client.org