$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa File: 732F297C151E11ECA422CD83C4F9AE02.roa (raw, json) Hash identifier: l3C6RJoqYqStFVElLN+gF/saS13/CDRrDpQjiYdIvqU= Subject key identifier: E4:0A:33:4F:83:7C:CC:D2:39:CF:BF:97:12:2D:4D:FB:D0:EC:C4:00 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E52 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa Signing time: Thu 30 May 2024 16:19:14 +0000 ROA not before: Thu 30 May 2024 16:19:14 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 146890 IP address blocks: 103.173.20.0/23 maxlen: 24 2001:df1:cb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36434 (0x8e52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:19:14 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a702-160c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:0a:72:82:06:d1:ce:98:da:e4:ee:56:2d: 07:9c:41:f6:5c:d3:32:ef:e1:9f:70:df:6b:41:69: 5a:48:cb:84:fd:5e:8d:a6:59:25:00:bc:ce:eb:2f: ad:3f:b0:57:04:c3:b3:8a:b4:c8:49:4c:bb:9d:cf: 91:f9:78:2f:8d:e3:84:02:74:73:2f:82:85:e7:f7: 4b:06:66:47:ad:2c:82:c2:a2:78:89:78:35:ce:54: 3a:0e:5a:b2:13:ce:bb:cb:2b:60:4e:e3:b4:cd:f0: 00:25:58:85:77:f6:da:74:c8:94:19:f8:b8:d7:61: d6:f2:c3:4d:33:aa:06:e8:28:64:2e:f2:36:d0:20: e2:75:d1:f0:0a:7a:40:38:6c:4f:56:dc:97:08:e0: 79:67:70:60:81:56:b8:f7:41:b5:00:40:9a:a2:25: 31:29:b5:42:45:c2:a1:fb:e7:31:aa:c0:21:4f:f9: 18:0a:b0:27:06:a6:5b:c2:bc:71:11:9d:b7:12:b6: 42:bc:4d:3a:e3:8a:43:87:58:9c:ad:a5:10:6f:e0: 4e:40:10:ef:64:d5:35:9e:5f:47:c1:a6:9d:e7:9a: 14:8a:ae:6c:08:c1:00:3f:35:4c:11:84:3c:52:5e: d0:68:b2:7f:2d:1b:c2:fc:c6:b5:a5:2d:ab:cb:a3: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:33:4F:83:7C:CC:D2:39:CF:BF:97:12:2D:4D:FB:D0:EC:C4:00 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.20.0/23 IPv6: 2001:df1:cb40::/48 Signature Algorithm: sha256WithRSAEncryption 68:2a:e2:00:b4:a0:b2:99:53:f9:17:4f:e8:e0:53:80:7c:87: 77:c7:12:be:09:cf:e9:7a:da:8b:35:10:93:9a:57:a5:19:a7: 8f:5b:ba:53:81:3d:7b:25:d6:38:8f:70:2e:88:08:54:c2:7a: 8a:7b:aa:c7:87:30:a5:24:20:a0:d3:5d:97:ad:5e:41:2c:60: d1:49:15:61:8d:f6:e8:c5:08:1d:08:e3:15:04:4a:cb:82:d6: 58:5a:ed:ca:46:1e:0b:b1:de:85:91:89:95:c2:0a:8d:f9:53: 81:ab:4e:7e:06:86:83:59:be:96:cf:55:11:be:c6:a7:bf:f8: c4:f4:af:46:c4:4d:1a:d2:9b:81:a7:11:fb:d1:50:30:50:a0: 9c:ff:bf:fc:2f:cd:ce:a2:ec:7d:59:27:d7:c8:ff:57:95:4b: 3e:71:fc:07:d9:c5:99:73:34:13:1e:47:2f:52:23:59:bd:55: a5:c2:85:48:e8:8b:ec:03:f8:fd:12:91:6c:18:a1:75:39:c2: 5b:b8:d6:e1:f7:d6:bf:21:51:f9:2f:4e:22:80:3c:c0:82:39: dd:f1:29:f6:23:01:d0:64:5c:01:d2:ce:fe:b0:38:a3:46:c8: 45:79:f5:41:cc:6a:e0:dd:0b:36:b7:26:29:fd:6e:7b:a3:0b: 1b:8c:00:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI5SMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTkxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3MDItMTYwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcVCnKCBtHOmNrk7lYtB5xB9lzTMu/hn3Dfa0FpWkjLhP1ejaZZJQC8zusv rT+wVwTDs4q0yElMu53Pkfl4L43jhAJ0cy+Chef3SwZmR60sgsKieIl4Nc5UOg5a shPOu8srYE7jtM3wACVYhXf22nTIlBn4uNdh1vLDTTOqBugoZC7yNtAg4nXR8Ap6 QDhsT1bclwjgeWdwYIFWuPdBtQBAmqIlMSm1QkXCofvnMarAIU/5GAqwJwamW8K8 cRGdtxK2QrxNOuOKQ4dYnK2lEG/gTkAQ72TVNZ5fR8GmneeaFIqubAjBAD81TBGE PFJe0Giyfy0bwvzGtaUtq8ujTqcCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTkCjNP g3zM0jnPv5cSLU370OzEADAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczMkYyOTdD MTUxRTExRUNBNDIyQ0Q4M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ60UMA8EAgACMAkDBwAgAQ3xy0AwDQYJKoZIhvcNAQEL BQADggEBAGgq4gC0oLKZU/kXT+jgU4B8h3fHEr4Jz+l62os1EJOaV6UZp49bulOB PXsl1jiPcC6ICFTCeop7qseHMKUkIKDTXZetXkEsYNFJFWGN9ujFCB0I4xUESsuC 1lha7cpGHgux3oWRiZXCCo35U4GrTn4GhoNZvpbPVRG+xqe/+MT0r0bETRrSm4Gn EfvRUDBQoJz/v/wvzc6i7H1ZJ9fI/1eVSz5x/AfZxZlzNBMeRy9SI1m9VaXChUjo i+wD+P0SkWwYoXU5wlu41uH31r8hUfkvTiKAPMCCOd3xKfYjAdBkXAHSzv6wOKNG yEV59UHMauDdCza3Jin9bnujCxuMAK8= -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:59 2024 by rpki-client on console-fra.rpki-client.org