$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa File: 72AA89A69B4411EFAD8FF155C4F9AE02.roa (raw, json) Hash identifier: Xf79ItCm+9EnxuKQnAUm5U83HYgvFZj2yu/gQeO1Alg= Subject key identifier: 11:8A:0B:AB:5E:31:2B:EE:47:5E:E1:48:9F:25:70:35:81:30:18:D5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9C6D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa Signing time: Tue 05 Nov 2024 07:06:15 +0000 ROA not before: Tue 05 Nov 2024 07:06:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24029 IP address blocks: 103.97.92.0/22 maxlen: 24 203.119.49.0/24 maxlen: 24 203.119.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40045 (0x9c6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 5 07:06:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6729c3e7-36bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:d0:0e:2c:b9:9b:07:60:05:c4:16:7c:5f: 75:9e:96:c5:4c:80:77:e2:01:c5:0d:69:04:7e:ad: cb:22:35:c0:db:da:e5:fe:b2:10:18:98:a7:dd:90: 5d:60:ae:da:fa:47:3b:fc:6e:64:a0:68:7d:a1:14: 48:c5:52:6e:a0:0f:86:6f:6b:98:46:a9:e8:d7:ff: 0b:de:e0:29:b0:f8:ba:5c:53:c2:4d:cb:d6:32:2b: d4:48:24:66:14:f8:e7:4e:c6:c8:f0:2e:a5:21:2a: 9a:31:45:22:47:dc:4d:13:2b:c2:34:04:c2:53:56: 14:d9:71:36:08:ce:f5:27:8b:69:eb:da:f1:67:f2: 96:66:71:74:cf:4c:96:37:81:ea:a5:0a:17:02:eb: 97:b7:4c:6a:55:8f:55:ad:1c:91:88:59:d7:e3:c4: f3:fd:54:e8:d5:19:7b:87:fe:7c:62:50:a0:cb:62: f8:2e:21:00:31:f9:40:68:b6:4a:e2:e0:08:78:01: e8:37:3a:f0:cd:08:15:64:22:0e:15:83:a3:5a:16: f4:06:08:f4:14:72:1e:07:02:52:f2:b2:dd:77:aa: d4:f8:e5:e6:73:59:dc:aa:09:f2:53:d3:3c:59:69: 3e:5c:d2:79:53:3b:3b:c0:c2:52:08:76:09:88:37: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:0B:AB:5E:31:2B:EE:47:5E:E1:48:9F:25:70:35:81:30:18:D5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.92.0/22 203.119.49.0-203.119.50.255 Signature Algorithm: sha256WithRSAEncryption 40:40:2b:f9:f0:60:4e:ba:f0:ac:69:1e:f6:af:4c:9d:fa:47: 83:cb:ab:bb:45:25:34:2e:66:ef:01:41:2f:47:1a:74:99:d1: 08:83:aa:cc:2c:a4:ed:24:6d:2f:6f:04:94:4b:1d:4e:87:e4: 0e:cd:e2:84:05:79:fb:10:17:d1:fc:4a:97:ff:bb:39:74:5f: bf:35:f1:cd:ea:39:7e:ff:12:64:af:70:28:d4:0d:cd:3f:bf: b3:cd:4e:d0:62:3e:90:d6:48:16:09:7c:e0:65:82:f7:58:72: ac:8a:d5:6d:51:c4:61:bc:f3:d8:60:28:0e:8e:3f:46:10:b6: 68:0a:4a:3d:93:d4:b5:5a:85:97:ce:71:14:11:c5:bf:ce:a7: 0e:e0:44:a2:be:d3:2d:2d:27:d4:82:e7:30:c7:cf:3e:79:fb: 5e:56:0f:bd:c3:82:09:79:6b:3b:03:67:d2:a6:a3:ec:48:96: e5:15:77:03:22:6f:e8:23:4f:93:d0:02:29:4a:11:30:d2:a7: de:8e:f7:55:fe:2d:d8:eb:16:b0:cf:2d:5e:d7:7d:7e:47:ae: 42:32:c5:65:01:bc:f2:a1:97:da:04:09:af:f3:d2:68:c3:7e: 66:1e:16:e9:f0:1b:df:60:a8:36:21:70:70:e5:49:f3:4f:fe: ab:75:e0:e9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIDAJxtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTEwNTA3MDYxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjcyOWMzZTctMzZiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtx0A4suZsHYAXEFnxfdZ6WxUyAd+IBxQ1pBH6tyyI1wNva5f6yEBiYp92Q XWCu2vpHO/xuZKBofaEUSMVSbqAPhm9rmEap6Nf/C97gKbD4ulxTwk3L1jIr1Egk ZhT4507GyPAupSEqmjFFIkfcTRMrwjQEwlNWFNlxNgjO9SeLaeva8WfylmZxdM9M ljeB6qUKFwLrl7dMalWPVa0ckYhZ1+PE8/1U6NUZe4f+fGJQoMti+C4hADH5QGi2 SuLgCHgB6Dc68M0IFWQiDhWDo1oW9AYI9BRyHgcCUvKy3Xeq1Pjl5nNZ3KoJ8lPT PFlpPlzSeVM7O8DCUgh2CYg3BvUCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBQRigur XjEr7kde4UifJXA1gTAY1TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyQUE4OUE2 OUI0NDExRUZBRDhGRjE1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC0GCCsGAQUFBwEHAQH/ BB4wHDAaBAIAATAUAwQCZ2FcMAwDBADLdzEDBADLdzIwDQYJKoZIhvcNAQELBQAD ggEBAEBAK/nwYE668KxpHvavTJ36R4PLq7tFJTQuZu8BQS9HGnSZ0QiDqswspO0k bS9vBJRLHU6H5A7N4oQFefsQF9H8Spf/uzl0X7818c3qOX7/EmSvcCjUDc0/v7PN TtBiPpDWSBYJfOBlgvdYcqyK1W1RxGG889hgKA6OP0YQtmgKSj2T1LVahZfOcRQR xb/Opw7gRKK+0y0tJ9SC5zDHzz55+15WD73Dggl5azsDZ9Kmo+xIluUVdwMib+gj T5PQAilKETDSp96O91X+LdjrFrDPLV7XfX5HrkIyxWUBvPKhl9oECa/z0mjDfmYe FunwG99gqDYhcHDlSfNP/qt14Ok= -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:59 2024 by rpki-client on console-fra.rpki-client.org