$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa File: 6F28816429EC11EDAB34EC6AC4F9AE02.roa (raw, json) Hash identifier: BHztSYv8Rv0T25chfXzbM82QtnnGWAQOs7NuKF7ZoHI= Subject key identifier: F0:F6:A8:B2:3F:E6:C3:58:6C:60:E6:22:68:D5:88:66:6C:AE:08:B9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8AB7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa Signing time: Thu 30 May 2024 16:04:10 +0000 ROA not before: Thu 30 May 2024 16:04:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135850 IP address blocks: 103.97.85.0/24 maxlen: 24 103.97.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35511 (0x8ab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:04:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a37a-5f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:3c:b0:52:ba:8d:bd:f6:19:83:be:d0:09: 8d:73:2e:1d:d9:fe:40:92:2c:15:78:88:4c:17:a5: 42:fd:58:de:03:77:1c:46:2d:6b:85:6b:ed:5e:71: 9b:8c:fb:31:bb:f4:33:26:66:76:5c:a8:d2:24:11: ea:de:11:15:ca:67:69:20:6c:3f:90:e1:ce:fb:44: e0:27:b3:89:2e:1e:5d:c8:96:fd:05:82:db:53:2b: 89:1a:74:12:f3:b8:3e:a7:ca:c2:7a:15:ee:e5:37: 69:e5:ad:a3:67:1d:2e:ff:6f:aa:8c:6d:56:c3:14: 53:29:cb:6f:04:0b:b0:fa:8b:1e:83:64:73:a5:7a: ec:04:6d:74:8b:94:4e:66:72:62:bd:37:03:ed:69: ae:1e:93:05:5e:a1:73:39:de:ae:15:6a:5a:ed:4c: 12:84:3c:3b:db:db:9a:7b:ae:d9:43:74:c4:79:83: 6d:98:b0:ea:65:8d:a0:1e:94:84:51:52:a5:f5:c0: b8:d1:ce:6c:75:8a:f8:10:bb:f3:46:2b:82:e6:d4: 4b:6f:ab:e4:7b:91:ad:13:5b:ec:fc:c0:0b:21:3a: 0d:f6:ce:aa:13:46:6b:9a:1f:46:a7:ac:21:bc:69: f9:9d:67:6d:c5:1f:b8:36:40:7f:db:0e:f2:d8:dd: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F6:A8:B2:3F:E6:C3:58:6C:60:E6:22:68:D5:88:66:6C:AE:08:B9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F28816429EC11EDAB34EC6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.85.0-103.97.86.255 Signature Algorithm: sha256WithRSAEncryption 11:b3:d1:ed:cc:79:55:50:d2:0d:9b:4b:f0:a6:64:e9:53:37: 94:a7:2f:c1:e8:24:de:1a:a1:e7:d6:9d:18:2a:81:87:f1:36: 17:f1:f4:5a:da:61:b7:dd:83:5d:2c:b7:40:8b:78:bb:ce:d2: a6:25:54:ff:73:dd:bd:28:d7:f1:01:44:d4:94:e4:53:36:55: c0:d5:1f:69:59:a2:91:e3:f1:67:9c:34:fd:ee:3a:8b:7c:49: 30:49:31:48:b4:36:73:f7:7f:23:fa:19:f8:71:98:15:10:ae: 56:a9:27:b7:63:ab:19:94:d5:6e:87:15:a7:60:05:ac:85:73: 6f:5d:4a:d8:e4:d6:02:6c:7d:62:a4:14:25:d8:ca:99:a8:00: a2:fa:6a:3b:82:63:2e:50:41:60:a1:36:a0:c1:a8:8e:9b:19: cf:c3:15:25:ac:08:c3:67:ab:26:71:cc:3f:30:59:c6:b5:f2: 89:37:c2:e3:27:fd:83:c5:d7:89:e1:2a:32:0d:be:c9:66:b4: e8:f8:f5:3d:a8:45:22:33:84:cc:97:35:50:04:a6:ac:85:9d: a2:e5:c2:5d:9a:08:dc:22:a3:20:13:0b:af:6a:2a:48:91:58: be:46:ff:54:79:5f:36:67:33:60:90:84:e8:80:2c:c3:4f:36: be:c5:28:94 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIDAIq3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDQxMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzN2EtNWY2YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHYPLBSuo299hmDvtAJjXMuHdn+QJIsFXiITBelQv1Y3gN3HEYta4Vr7V5x m4z7Mbv0MyZmdlyo0iQR6t4RFcpnaSBsP5DhzvtE4CeziS4eXciW/QWC21MriRp0 EvO4PqfKwnoV7uU3aeWto2cdLv9vqoxtVsMUUynLbwQLsPqLHoNkc6V67ARtdIuU TmZyYr03A+1prh6TBV6hcznerhVqWu1MEoQ8O9vbmnuu2UN0xHmDbZiw6mWNoB6U hFFSpfXAuNHObHWK+BC780YrgubUS2+r5HuRrRNb7PzACyE6DfbOqhNGa5ofRqes Ibxp+Z1nbcUfuDZAf9sO8tjdl1ECAwEAAaOCAp0wggKZMB0GA1UdDgQWBBTw9qiy P+bDWGxg5iJo1YhmbK4IuTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZGMjg4MTY0 MjlFQzExRURBQjM0RUM2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCcGCCsGAQUFBwEHAQH/ BBgwFjAUBAIAATAOMAwDBABnYVUDBABnYVYwDQYJKoZIhvcNAQELBQADggEBABGz 0e3MeVVQ0g2bS/CmZOlTN5SnL8HoJN4aoefWnRgqgYfxNhfx9FraYbfdg10st0CL eLvO0qYlVP9z3b0o1/EBRNSU5FM2VcDVH2lZopHj8WecNP3uOot8STBJMUi0NnP3 fyP6GfhxmBUQrlapJ7djqxmU1W6HFadgBayFc29dStjk1gJsfWKkFCXYypmoAKL6 ajuCYy5QQWChNqDBqI6bGc/DFSWsCMNnqyZxzD8wWca18ok3wuMn/YPF14nhKjIN vslmtOj49T2oRSIzhMyXNVAEpqyFnaLlwl2aCNwioyATC69qKkiRWL5G/1R5XzZn M2CQhOiALMNPNr7FKJQ= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:50 2024 by rpki-client on console-ams.rpki-client.org