$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa File: 72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa (raw, json) Hash identifier: oMtF1xC7kpJzMF5PIpRTJsA5Mi91zO+zu+Sd4R+jgMU= Subject key identifier: 03:63:9F:6D:B4:8B:70:69:DF:79:62:CD:F2:75:64:AE:47:FA:42:0D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F1E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa Signing time: Thu 30 May 2024 16:22:29 +0000 ROA not before: Thu 30 May 2024 16:22:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149548 IP address blocks: 103.119.186.0/23 maxlen: 24 2001:df2:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36638 (0x8f1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:22:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a7c5-e8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:02:a9:8c:eb:b1:d0:28:ad:1c:a6:86:18: af:1a:01:27:83:67:76:d4:cc:7d:27:53:88:50:c7: 59:8c:4d:e7:90:81:a0:19:6c:da:da:f0:f8:df:90: 97:00:64:97:a7:cc:d1:be:f7:36:a4:7c:0c:36:30: 2b:03:5d:cd:40:21:2d:f9:77:c9:a6:da:95:00:51: 52:00:d1:ee:62:84:6b:50:d2:11:92:65:5d:b9:f2: da:cd:7e:9c:1f:ce:9a:1e:30:76:22:32:bf:f9:ea: 9f:eb:f9:73:b5:ca:8b:40:c7:eb:9a:41:2e:0a:d5: cd:93:6f:35:28:0c:56:3b:a2:5c:51:b0:28:ba:b2: d5:f7:fd:db:8e:66:4e:5c:02:bd:d9:71:cc:1b:9f: 65:cb:a4:34:85:48:72:79:d4:f6:b8:e1:cd:b0:bf: 18:48:ca:18:65:68:ab:41:cb:51:6d:7a:29:8b:56: 0c:7d:77:5c:84:eb:6e:76:52:b8:3a:9a:a9:92:6a: 41:3a:be:59:6f:6f:59:1f:6b:75:ee:94:e6:86:7d: b4:06:76:f8:e7:2a:62:e6:de:ab:7a:37:b4:75:2b: 1e:85:b6:f6:1d:86:f9:2f:aa:4f:ec:3f:02:a4:44: 46:4e:1b:ef:7d:63:48:ae:48:db:2c:5a:81:fb:53: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:9F:6D:B4:8B:70:69:DF:79:62:CD:F2:75:64:AE:47:FA:42:0D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.186.0/23 IPv6: 2001:df2:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 1e:4e:9b:6e:c0:da:11:2c:e7:2d:37:a7:96:8a:2f:3b:9e:a8: 09:85:11:ee:0d:fc:1b:6d:8b:de:45:c0:d2:a1:3c:1c:a7:bd: 6a:ce:4b:c6:e4:eb:52:71:59:58:27:2a:9d:ff:c8:cc:85:98: 37:eb:39:c7:96:c9:95:3a:ae:2b:1b:85:39:e4:da:92:e2:df: 22:f4:eb:d2:9d:30:22:9f:00:d8:3e:b6:1b:f9:8d:26:7f:42: 91:50:a6:26:55:fc:08:71:00:d4:d7:ed:c0:c3:93:5e:34:2a: e7:99:a5:b5:39:95:f4:b3:85:7c:75:7a:6f:96:d9:a7:49:f4: b6:16:81:f1:e1:4d:7a:87:e8:15:1c:95:81:e0:ba:32:6c:0e: f6:1d:2d:2a:7c:65:37:38:f9:87:d1:18:cd:ff:94:59:54:5f: 83:24:ea:ce:a6:55:e6:94:59:f5:f3:d3:89:f8:63:de:0e:5d: 4c:07:4b:a6:29:31:ee:a7:f0:86:f7:96:23:6d:d3:39:6b:3b: ff:6a:68:5f:b7:e2:6f:61:bc:7e:98:c9:78:66:4d:6f:8a:60: 36:d0:b7:74:5a:04:43:c3:0f:31:f1:05:47:5f:6f:0e:60:88: 19:91:d1:c4:5e:1d:e3:4f:fd:c6:7e:aa:d8:76:35:47:f2:5d: 8b:80:81:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI8eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjIyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3YzUtZThhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+JAqmM67HQKK0cpoYYrxoBJ4NndtTMfSdTiFDHWYxN55CBoBls2trw+N+Q lwBkl6fM0b73NqR8DDYwKwNdzUAhLfl3yabalQBRUgDR7mKEa1DSEZJlXbny2s1+ nB/Omh4wdiIyv/nqn+v5c7XKi0DH65pBLgrVzZNvNSgMVjuiXFGwKLqy1ff9245m TlwCvdlxzBufZcukNIVIcnnU9rjhzbC/GEjKGGVoq0HLUW16KYtWDH13XITrbnZS uDqaqZJqQTq+WW9vWR9rde6U5oZ9tAZ2+OcqYubeq3o3tHUrHoW29h2G+S+qT+w/ AqRERk4b731jSK5I2yxagftTOMkCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQDY59t tItwad95Ys3ydWSuR/pCDTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyRjNFN0FB RDkwQzExRURCQTAwREMyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ3e6MA8EAgACMAkDBwAgAQ3yK0AwDQYJKoZIhvcNAQEL BQADggEBAB5Om27A2hEs5y03p5aKLzueqAmFEe4N/Btti95FwNKhPBynvWrOS8bk 61JxWVgnKp3/yMyFmDfrOceWyZU6risbhTnk2pLi3yL069KdMCKfANg+thv5jSZ/ QpFQpiZV/AhxANTX7cDDk140KueZpbU5lfSzhXx1em+W2adJ9LYWgfHhTXqH6BUc lYHgujJsDvYdLSp8ZTc4+YfRGM3/lFlUX4Mk6s6mVeaUWfXz04n4Y94OXUwHS6Yp Me6n8Ib3liNt0zlrO/9qaF+34m9hvH6YyXhmTW+KYDbQt3RaBEPDDzHxBUdfbw5g iBmR0cReHeNP/cZ+qth2NUfyXYuAgc8= -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:03 2024 by rpki-client on console-fra.rpki-client.org