$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa File: 72E92DBE746D11ED83177C64C4F9AE02.roa (raw, json) Hash identifier: XEJgc7AfXRdXNi8OO2/efm8gxqh3zUpS1prbTAHaEFM= Subject key identifier: 08:F7:DA:B2:A3:23:B1:F3:81:C5:B5:4D:B3:A2:05:1A:0E:83:42:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 88D6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa Signing time: Thu 30 May 2024 15:56:18 +0000 ROA not before: Thu 30 May 2024 15:56:18 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133271 IP address blocks: 103.90.211.0/24 maxlen: 24 103.148.206.0/24 maxlen: 24 103.172.254.0/23 maxlen: 24 2001:df1:c540::/48 maxlen: 48 2001:df7:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35030 (0x88d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:56:18 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a1a2-ebf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:4d:a5:00:fa:2b:48:5d:fb:a9:ca:da:bb: c3:a6:75:c4:a2:46:52:ad:3b:26:a0:47:6e:a2:9b: 04:00:ff:ff:4a:28:69:b0:87:58:18:13:81:88:7b: 1f:b0:09:e5:ac:81:e9:a8:a6:6f:11:5b:b6:61:20: b7:80:d2:9d:da:5b:3f:e8:5e:8e:fa:6f:de:cd:80: da:5f:e0:00:9c:0b:8b:1a:50:a4:5d:70:a7:16:06: c4:b6:ed:5e:85:71:45:ee:85:0d:a7:38:e8:44:c2: ee:66:ae:2c:cb:4b:89:93:d3:39:9b:ab:61:fa:a3: 92:c8:e4:09:81:fc:2e:be:a8:e0:28:8e:87:8a:dc: ca:bd:b6:3a:84:8c:41:16:53:83:cd:60:c4:7c:83: 32:ac:49:d0:1d:9d:5d:40:0c:12:d0:69:b2:34:40: ff:0e:44:c1:30:2e:8e:5c:8f:88:29:0f:5b:af:17: 2c:05:78:e3:34:7e:37:98:6c:79:84:a3:49:e1:37: a4:3f:ff:18:b4:e4:1f:4b:35:91:a6:61:12:ca:7f: 1c:14:5a:53:4f:2b:e0:15:96:12:ba:f8:c3:3d:5c: db:f6:9c:ba:bd:0d:c1:2e:7e:47:ff:18:63:18:b9: 17:8c:f8:af:bc:99:45:ff:a5:0d:e3:73:4e:3a:96: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:DA:B2:A3:23:B1:F3:81:C5:B5:4D:B3:A2:05:1A:0E:83:42:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72E92DBE746D11ED83177C64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.211.0/24 103.148.206.0/24 103.172.254.0/23 IPv6: 2001:df1:c540::/48 2001:df7:8180::/48 Signature Algorithm: sha256WithRSAEncryption 23:c5:40:34:f0:7b:67:7c:3c:0d:18:08:2d:1d:79:6b:52:3a: ba:48:51:13:0b:25:79:b5:6c:3e:e7:f7:c2:23:6f:c2:e7:fd: 8b:d7:c6:ce:c6:b3:ab:c8:5a:24:42:b1:17:59:70:95:7a:a8: d3:fd:8b:e2:1d:21:4c:87:6d:bf:7c:f9:73:53:ed:b0:3f:ec: 99:de:62:c0:0d:96:00:56:5f:6f:a8:a7:ae:ca:e9:66:d1:6e: cc:74:43:3e:70:63:f1:a3:e3:a8:2e:75:5e:d2:d3:c4:8a:3b: d3:c9:7a:65:6d:cc:e8:3c:29:27:fd:95:c2:b5:4b:2e:b8:7d: 68:2d:b3:61:94:ae:15:a7:b3:43:88:02:57:0b:23:aa:d9:6a: 26:7f:c5:c9:73:ea:c3:45:93:01:4f:bf:9a:0e:8f:14:02:e6: 13:df:81:54:51:b8:83:69:a5:bd:2f:e7:b9:35:9b:07:58:a8: 5e:f4:28:5d:43:3f:c8:aa:65:3b:76:fc:44:18:1a:4c:b8:03: 4f:8b:8e:08:e6:a8:86:30:b7:12:d2:ed:19:70:b5:80:14:70: fa:9b:4f:7b:b3:de:41:85:dc:5c:e7:b1:e8:71:4c:bf:24:f2: e8:b8:51:0a:a0:f6:31:bd:be:ac:01:ee:ec:4d:d7:0b:f3:b4: f6:1c:07:95 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAIjWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTYxOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExYTItZWJmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6oTaUA+itIXfupytq7w6Z1xKJGUq07JqBHbqKbBAD//0ooabCHWBgTgYh7 H7AJ5ayB6aimbxFbtmEgt4DSndpbP+hejvpv3s2A2l/gAJwLixpQpF1wpxYGxLbt XoVxRe6FDac46ETC7mauLMtLiZPTOZurYfqjksjkCYH8Lr6o4CiOh4rcyr22OoSM QRZTg81gxHyDMqxJ0B2dXUAMEtBpsjRA/w5EwTAujlyPiCkPW68XLAV44zR+N5hs eYSjSeE3pD//GLTkH0s1kaZhEsp/HBRaU08r4BWWErr4wz1c2/acur0NwS5+R/8Y Yxi5F4z4r7yZRf+lDeNzTjqWTvcCAwEAAaOCArswggK3MB0GA1UdDgQWBBQI99qy oyOx84HFtU2zogUaDoNCmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyRTkyREJF NzQ2RDExRUQ4MzE3N0M2NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEUGCCsGAQUFBwEHAQH/ BDYwNDAYBAIAATASAwQAZ1rTAwQAZ5TOAwQBZ6z+MBgEAgACMBIDBwAgAQ3xxUAD BwAgAQ33gYAwDQYJKoZIhvcNAQELBQADggEBACPFQDTwe2d8PA0YCC0deWtSOrpI URMLJXm1bD7n98Ijb8Ln/YvXxs7Gs6vIWiRCsRdZcJV6qNP9i+IdIUyHbb98+XNT 7bA/7JneYsANlgBWX2+op67K6WbRbsx0Qz5wY/Gj46gudV7S08SKO9PJemVtzOg8 KSf9lcK1Sy64fWgts2GUrhWns0OIAlcLI6rZaiZ/xclz6sNFkwFPv5oOjxQC5hPf gVRRuINppb0v57k1mwdYqF70KF1DP8iqZTt2/EQYGky4A0+LjgjmqIYwtxLS7Rlw tYAUcPqbT3uz3kGF3FznsehxTL8k8ui4UQqg9jG9vqwB7uxN1wvztPYcB5U= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:50 2024 by rpki-client on console-ams.rpki-client.org