$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa File: 7412D892977011EB891B1662C4F9AE02.roa (raw, json) Hash identifier: 0vG29EoPMvIEYk7qo6TYyJNjpbsKT0UYunfYDJAO1Qc= Subject key identifier: 00:5F:BD:D5:84:91:7A:8F:54:49:E5:D1:8A:9B:1D:EC:76:A0:60:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DAA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa Signing time: Thu 30 May 2024 16:16:32 +0000 ROA not before: Thu 30 May 2024 16:16:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141804 IP address blocks: 103.165.168.0/23 maxlen: 24 103.171.4.0/23 maxlen: 24 103.182.10.0/23 maxlen: 24 2001:df7:2f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36266 (0x8daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:16:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a660-1719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:90:e8:d5:8a:a6:c1:9a:ae:42:ea:d7:ba: 3a:2a:39:73:6b:8a:42:14:ac:39:73:29:37:7b:a2: e3:be:f0:f1:e3:49:a1:35:1f:e0:94:10:c6:3c:a8: c4:76:70:50:3d:ca:49:56:ae:72:38:08:38:b9:5f: 2d:76:87:61:ea:cf:51:af:47:ed:73:c5:c7:4f:c1: a4:e6:6d:18:66:c2:2d:72:3d:88:96:c3:54:ec:8f: ab:92:f4:10:04:8d:01:54:33:6a:75:0e:9d:0f:ec: bf:41:33:f4:06:69:27:81:33:b2:3c:9c:ea:7a:b6: ef:86:e2:ad:24:4a:b7:ee:9a:56:dc:bf:b7:f3:a1: e5:65:cb:5e:38:75:4b:c4:bf:a0:98:07:3b:8e:3c: a0:a7:f0:cb:cb:83:2f:ef:93:1e:15:01:be:14:f0: cd:c0:06:43:3f:2d:95:84:a4:d9:b6:2b:8e:ee:52: 32:2a:58:31:e1:d9:fa:a1:81:0c:46:23:7d:35:cf: 05:79:c8:be:fe:16:94:76:d8:4e:e9:be:7c:a1:0c: 21:58:f0:83:e2:a7:83:ec:21:be:4d:2b:a3:d2:e1: 17:6d:cb:1c:9f:63:b8:5a:fd:a3:75:13:6a:4e:b7: 26:05:5a:a1:30:2f:76:b9:1c:29:e0:93:9b:7c:20: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5F:BD:D5:84:91:7A:8F:54:49:E5:D1:8A:9B:1D:EC:76:A0:60:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.168.0/23 103.171.4.0/23 103.182.10.0/23 IPv6: 2001:df7:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 70:da:b9:bb:73:1b:75:0b:b7:a7:66:b0:8d:26:86:a2:88:a0: af:a2:8b:6a:be:51:b5:a8:44:87:4b:da:88:c4:b8:32:4a:20: db:51:a4:6b:1e:ca:16:f5:c4:21:5e:2b:6c:8a:e5:47:5e:0b: 59:73:da:e7:52:5b:ba:c9:46:fa:c4:32:53:de:10:e5:bf:ea: e0:84:58:73:f4:b7:2a:cb:0b:b0:ca:4d:d4:6c:ca:d8:f5:c1: 02:c4:d8:f1:99:bb:12:92:1a:2c:34:93:97:ac:79:4f:f7:2b: 10:2f:68:ab:5b:4e:ad:fb:79:89:2a:9d:20:47:12:3a:57:17: df:c3:3d:8b:05:8d:64:02:18:99:86:60:dd:52:68:86:bb:2a: cb:c8:3e:8b:98:27:23:bd:b1:3f:1d:85:4f:6c:ce:1b:cb:da: a5:71:dc:44:d2:ef:90:43:c6:43:fa:83:36:8e:be:aa:3f:2a: e0:8b:bd:4f:74:1a:ba:dc:7a:dc:34:cf:ba:bf:42:65:78:99: c0:0c:da:40:a6:c2:9d:c7:63:bc:0b:66:92:4e:51:f4:51:4c: f4:a6:4a:40:99:08:e6:19:c0:9e:35:31:47:88:c7:00:38:5c: 11:1b:08:db:43:6e:a5:01:91:27:5a:0e:9b:59:bf:ca:d8:a8: 43:53:2c:cd -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAI2qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTYzMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2NjAtMTcxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKokOjViqbBmq5C6te6Oio5c2uKQhSsOXMpN3ui477w8eNJoTUf4JQQxjyo xHZwUD3KSVaucjgIOLlfLXaHYerPUa9H7XPFx0/BpOZtGGbCLXI9iJbDVOyPq5L0 EASNAVQzanUOnQ/sv0Ez9AZpJ4Ezsjyc6nq274birSRKt+6aVty/t/Oh5WXLXjh1 S8S/oJgHO448oKfwy8uDL++THhUBvhTwzcAGQz8tlYSk2bYrju5SMipYMeHZ+qGB DEYjfTXPBXnIvv4WlHbYTum+fKEMIVjwg+Kng+whvk0ro9LhF23LHJ9juFr9o3UT ak63JgVaoTAvdrkcKeCTm3wgsucCAwEAAaOCArIwggKuMB0GA1UdDgQWBBQAX73V hJF6j1RJ5dGKmx3sdqBgkzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0MTJEODky OTc3MDExRUI4OTFCMTY2MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQBZ6WoAwQBZ6sEAwQBZ7YKMA8EAgACMAkDBwAgAQ33L4Aw DQYJKoZIhvcNAQELBQADggEBAHDaubtzG3ULt6dmsI0mhqKIoK+ii2q+UbWoRIdL 2ojEuDJKINtRpGseyhb1xCFeK2yK5UdeC1lz2udSW7rJRvrEMlPeEOW/6uCEWHP0 tyrLC7DKTdRsytj1wQLE2PGZuxKSGiw0k5eseU/3KxAvaKtbTq37eYkqnSBHEjpX F9/DPYsFjWQCGJmGYN1SaIa7KsvIPouYJyO9sT8dhU9szhvL2qVx3ETS75BDxkP6 gzaOvqo/KuCLvU90Grrcetw0z7q/QmV4mcAM2kCmwp3HY7wLZpJOUfRRTPSmSkCZ COYZwJ41MUeIxwA4XBEbCNtDbqUBkSdaDptZv8rYqENTLM0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:43 2024 by rpki-client on console-fra.rpki-client.org