$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa File: 6E54C1DC96C011EBA0A8D92BC4F9AE02.roa (raw, json) Hash identifier: zHPfMNXB432VGZ7YvMvkzufNA35eDby+v7koSxrC/08= Subject key identifier: EE:30:56:DF:86:6A:E4:2E:D4:3D:66:86:9B:7C:6A:9C:A4:C5:93:43 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89F5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa Signing time: Thu 30 May 2024 16:01:00 +0000 ROA not before: Thu 30 May 2024 16:01:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134937 IP address blocks: 45.127.104.0/24 maxlen: 24 45.127.105.0/24 maxlen: 24 45.127.106.0/24 maxlen: 24 45.127.107.0/24 maxlen: 24 103.51.24.0/23 maxlen: 24 103.51.26.0/24 maxlen: 24 103.51.27.0/24 maxlen: 24 103.97.96.0/22 maxlen: 24 103.133.8.0/22 maxlen: 24 103.133.48.0/22 maxlen: 24 103.148.168.0/23 maxlen: 24 103.157.176.0/24 maxlen: 24 103.157.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35317 (0x89f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:01:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a2bc-797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:a1:2b:74:d6:f4:3b:1e:36:da:e8:13:42: 7c:4c:6e:04:08:b8:56:a2:90:1b:64:ff:5a:da:4b: 27:ed:18:34:c5:f4:75:83:14:2f:4e:50:df:51:08: a5:2d:cf:e8:ff:6d:53:70:97:b4:82:eb:a3:e3:9d: 49:e7:ae:49:a2:02:71:87:a1:ae:a1:cc:72:59:29: 88:83:74:27:eb:3a:38:ee:dd:2f:49:30:ec:21:94: 00:f2:6f:d4:71:4f:ea:88:b3:b5:c4:49:bf:0b:32: 00:fb:b3:43:51:97:01:f1:3e:fa:12:ff:09:32:e7: 6b:09:62:e0:71:60:12:2b:85:aa:7b:93:4b:b7:fd: db:dc:4c:e4:fd:79:d9:4a:98:62:52:52:cc:d6:cc: d5:4e:7f:db:eb:d7:97:82:ed:ba:d7:9a:e6:fd:ac: 71:42:05:3f:10:b4:0f:ab:84:50:39:08:05:24:b0: c5:c7:f3:5d:03:86:2a:d6:02:d0:7c:06:0d:2d:60: 2e:7d:29:45:4d:20:b1:a4:5a:99:54:1a:44:b9:1c: 0f:14:ba:1b:36:35:6e:89:8f:a7:30:b0:70:5e:78: 75:f4:3d:e1:ae:2b:c4:7c:62:ba:af:ee:b2:65:e5: b6:50:c6:91:e8:11:c7:f7:f7:e1:9e:fc:58:53:ed: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:30:56:DF:86:6A:E4:2E:D4:3D:66:86:9B:7C:6A:9C:A4:C5:93:43 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.104.0/22 103.51.24.0/22 103.97.96.0/22 103.133.8.0/22 103.133.48.0/22 103.148.168.0/23 103.157.176.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:c5:ec:6c:1c:4a:bb:6a:77:33:f3:6c:f2:b4:cf:4d:e4:ca: 0b:ce:0d:30:e1:6f:ff:e4:05:56:c0:01:ef:71:2e:62:95:6d: 38:ca:7b:7e:3e:95:95:58:00:be:1c:2a:d9:2f:0b:b0:e6:e6: ec:ec:e5:3d:56:f5:ff:ae:fb:9e:b5:2b:3c:ea:2e:ac:11:fc: af:16:56:9e:03:06:ba:0d:f4:55:e6:48:e0:4e:8d:48:94:a2: 90:68:c6:c6:93:61:5c:72:fd:08:05:0f:e8:68:9b:76:f6:a8: 73:fe:67:1b:8d:33:20:88:17:03:11:db:c4:af:c4:c1:bd:07: ae:58:af:27:72:b3:8d:99:ca:90:91:22:05:c8:f8:d8:67:45: 22:ce:08:63:49:ae:d5:17:24:a5:bd:d8:44:e0:7c:81:6a:3b: 8d:6d:87:93:6b:af:d2:36:77:3e:21:fe:be:34:db:a4:66:9e: 97:45:3b:b5:e1:84:eb:e5:4f:18:f4:09:16:f7:d1:2f:cc:cf: c2:95:1a:e0:da:28:95:97:db:ef:aa:d9:ef:c3:05:68:83:1a: 3b:7b:e6:7f:d4:53:39:79:4c:90:70:f5:b5:a9:7b:fb:ab:bb: 83:07:b7:a5:d7:af:5d:2f:bd:9e:c4:88:83:af:00:e8:66:a6: 22:a7:46:61 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAIn1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDEwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyYmMtNzk3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3+oSt01vQ7Hjba6BNCfExuBAi4VqKQG2T/WtpLJ+0YNMX0dYMUL05Q31EI pS3P6P9tU3CXtILro+OdSeeuSaICcYehrqHMclkpiIN0J+s6OO7dL0kw7CGUAPJv 1HFP6oiztcRJvwsyAPuzQ1GXAfE++hL/CTLnawli4HFgEiuFqnuTS7f929xM5P15 2UqYYlJSzNbM1U5/2+vXl4Ltutea5v2scUIFPxC0D6uEUDkIBSSwxcfzXQOGKtYC 0HwGDS1gLn0pRU0gsaRamVQaRLkcDxS6GzY1bomPpzCwcF54dfQ94a4rxHxiuq/u smXltlDGkegRx/f34Z78WFPtjZ0CAwEAAaOCArkwggK1MB0GA1UdDgQWBBTuMFbf hmrkLtQ9ZoabfGqcpMWTQzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZFNTRDMURD OTZDMDExRUJBMEE4RDkyQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/ BDQwMjAwBAIAATAqAwQCLX9oAwQCZzMYAwQCZ2FgAwQCZ4UIAwQCZ4UwAwQBZ5So AwQBZ52wMA0GCSqGSIb3DQEBCwUAA4IBAQBrxexsHEq7ancz82zytM9N5MoLzg0w 4W//5AVWwAHvcS5ilW04ynt+PpWVWAC+HCrZLwuw5ubs7OU9VvX/rvuetSs86i6s EfyvFlaeAwa6DfRV5kjgTo1IlKKQaMbGk2Fccv0IBQ/oaJt29qhz/mcbjTMgiBcD EdvEr8TBvQeuWK8ncrONmcqQkSIFyPjYZ0UizghjSa7VFySlvdhE4HyBajuNbYeT a6/SNnc+If6+NNukZp6XRTu14YTr5U8Y9AkW99EvzM/ClRrg2iiVl9vvqtnvwwVo gxo7e+Z/1FM5eUyQcPW1qXv7q7uDB7el169dL72exIiDrwDoZqYip0Zh -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:58 2024 by rpki-client on console-fra.rpki-client.org