$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa File: 7494BE70EEAF11EB9FF10D4FC4F9AE02.roa (raw, json) Hash identifier: jek6r90t3rY8dry0A6++oJA60sHALGTg42i7Z3FM0wg= Subject key identifier: DF:CC:61:F9:98:1B:D4:8B:C8:9B:2A:98:94:9B:93:56:58:F9:22:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E1B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa Signing time: Thu 30 May 2024 16:18:21 +0000 ROA not before: Thu 30 May 2024 16:18:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142504 IP address blocks: 103.170.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36379 (0x8e1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:18:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6cd-fcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:98:7c:ce:cf:26:81:36:3e:c0:84:91:95: 08:6b:cf:6c:bc:b1:23:4d:c9:e0:fd:d0:e1:70:cf: c1:cc:af:b2:1c:16:8b:46:a1:31:16:f0:f5:72:4f: ec:88:dd:f6:72:4c:b3:08:77:e0:81:2e:1a:b7:24: d9:89:e5:94:31:21:dc:3f:a2:95:47:db:fb:fc:b9: d0:0d:a6:ec:d3:e7:25:0a:e8:ba:bd:3a:7a:10:89: b3:62:0f:d4:47:9f:cd:d4:3d:4d:67:0d:43:27:59: 1d:99:06:45:94:32:d3:96:86:c3:25:f4:90:86:b0: 37:3d:4a:14:ce:68:21:27:8d:6e:cf:d3:85:31:ba: 76:2a:74:8a:a9:27:5a:ca:c5:50:cd:71:2d:fd:9d: 87:a8:ba:8c:c1:c0:1f:e7:98:3a:e8:b3:c9:e6:5c: 26:c0:7e:01:c3:d8:2c:10:3e:d0:f1:07:50:d6:1a: a1:7d:14:43:24:1d:7d:ce:72:04:16:72:29:8a:d8: f2:68:fd:dc:ba:e0:80:82:d0:8f:d7:6f:0f:b8:57: 7f:0f:33:b9:23:59:60:d9:9b:3d:6f:9c:92:1f:c5: c7:e6:40:73:24:30:c6:fb:9d:dc:13:6b:c2:9f:29: dd:67:f7:f2:02:16:cd:de:e8:f1:d3:3f:68:8a:23: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:61:F9:98:1B:D4:8B:C8:9B:2A:98:94:9B:93:56:58:F9:22:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9d:87:68:18:ce:32:d2:ea:ea:dc:80:01:92:54:5c:73:0a: cd:39:8d:bc:e8:25:f3:6a:49:df:06:a5:8d:c2:d7:f1:95:4c: 15:33:92:8e:38:01:d8:86:4a:1c:f3:78:17:69:f4:4a:38:92: ce:cf:26:75:ae:9b:9e:e7:13:83:b3:3a:fe:5f:ee:9a:10:61: ca:d7:f7:dd:b4:95:e4:be:d5:a1:56:29:5f:94:1a:4b:f6:5e: 7b:6d:b8:e8:6b:61:6a:7c:2e:ec:6a:b5:db:48:df:28:a1:52: 30:2b:5e:db:28:93:0d:5d:8e:8a:eb:6c:ee:0b:68:c6:50:f9: 81:56:b1:35:71:ba:e2:44:1d:a2:9a:2b:c2:dc:17:3c:27:a7: 03:dc:b0:f8:f3:47:89:0d:ff:80:52:3b:8e:be:97:0e:3b:73: 09:be:7b:64:64:a0:9c:10:da:ae:39:ae:1a:d6:dd:34:0b:7f: 67:b6:cf:d5:65:53:20:4b:4a:82:2a:fb:6c:53:f8:dd:0e:16: 09:42:6b:88:74:7a:3a:f5:b8:86:4b:be:f1:65:32:ab:39:ea: 85:eb:1e:39:bb:c4:b1:19:43:10:9c:5f:7b:ab:34:67:ed:c4: 19:f9:b2:81:39:d1:e2:f0:29:b2:da:96:63:c5:45:4a:90:1d: 7f:ba:d3:3a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI4bMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTgyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2Y2QtZmNmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiimHzOzyaBNj7AhJGVCGvPbLyxI03J4P3Q4XDPwcyvshwWi0ahMRbw9XJP 7Ijd9nJMswh34IEuGrck2YnllDEh3D+ilUfb+/y50A2m7NPnJQrour06ehCJs2IP 1EefzdQ9TWcNQydZHZkGRZQy05aGwyX0kIawNz1KFM5oISeNbs/ThTG6dip0iqkn WsrFUM1xLf2dh6i6jMHAH+eYOuizyeZcJsB+AcPYLBA+0PEHUNYaoX0UQyQdfc5y BBZyKYrY8mj93LrggILQj9dvD7hXfw8zuSNZYNmbPW+ckh/Fx+ZAcyQwxvud3BNr wp8p3Wf38gIWzd7o8dM/aIojY2sCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTfzGH5 mBvUi8ibKpiUm5NWWPkiITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0OTRCRTcw RUVBRjExRUI5RkYxMEQ0RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6ooMA0GCSqGSIb3DQEBCwUAA4IBAQBcnYdoGM4y0urq 3IABklRccwrNOY286CXzaknfBqWNwtfxlUwVM5KOOAHYhkoc83gXafRKOJLOzyZ1 rpue5xODszr+X+6aEGHK1/fdtJXkvtWhVilflBpL9l57bbjoa2FqfC7sarXbSN8o oVIwK17bKJMNXY6K62zuC2jGUPmBVrE1cbriRB2imivC3Bc8J6cD3LD480eJDf+A UjuOvpcOO3MJvntkZKCcENquOa4a1t00C39nts/VZVMgS0qCKvtsU/jdDhYJQmuI dHo69biGS77xZTKrOeqF6x45u8SxGUMQnF97qzRn7cQZ+bKBOdHi8Cmy2pZjxUVK kB1/utM6 -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:43 2024 by rpki-client on console-fra.rpki-client.org