$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa File: 77E15212C59011EA8E3FD81FC4F9AE02.roa (raw, json) Hash identifier: JtHLMapTyMh6WT2V30+pgDGyZ7vq5Oqwlj6lFIx0vV4= Subject key identifier: 11:14:15:AC:9E:BD:41:7A:5C:E1:74:02:F6:90:69:0A:F9:B8:EA:92 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B6E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa Signing time: Thu 30 May 2024 16:07:12 +0000 ROA not before: Thu 30 May 2024 16:07:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137107 IP address blocks: 103.108.152.0/22 maxlen: 24 103.109.78.0/23 maxlen: 24 103.120.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35694 (0x8b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:07:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a42f-7117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:eb:f3:a6:01:4e:fa:c5:2b:8e:d4:c5:a5: 06:f0:34:e6:62:53:2e:36:35:1c:24:91:13:5f:3d: cd:da:ac:eb:ff:32:06:80:6d:c1:e6:3c:ba:1b:da: 61:49:38:5b:18:b5:77:60:45:b5:8f:0a:34:e7:82: 7b:c1:d0:82:90:87:d2:8f:a0:99:1a:7a:33:d1:26: a6:3b:71:3f:ee:e8:20:f2:f3:69:6f:62:85:8f:dc: 94:e4:fa:54:90:52:75:fb:72:75:b1:36:1b:50:f8: 1b:de:b9:e6:b3:53:98:0f:1b:ef:0b:12:31:68:ce: ae:9d:50:2c:9c:e2:27:fe:c4:54:d9:88:dc:75:96: a1:c6:23:f6:34:3c:2c:4f:8a:26:16:b2:e3:86:da: c6:66:c3:f8:5e:84:22:c8:55:74:45:f2:bf:90:ab: 36:96:8f:82:25:43:9e:a2:5e:98:0b:2f:d4:f8:dc: 9f:20:79:a1:e8:08:29:fb:c2:c6:7d:c7:a8:77:b7: 80:4b:4a:78:7d:71:6b:55:da:88:45:70:0e:57:57: 8d:bd:f7:7b:8d:e4:51:55:f6:e9:95:6f:b4:81:06: c1:12:24:52:92:2b:6e:8d:73:2a:74:a9:8f:97:1b: 1d:13:a1:f0:24:f9:5b:8f:31:85:1e:59:60:9e:5b: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:14:15:AC:9E:BD:41:7A:5C:E1:74:02:F6:90:69:0A:F9:B8:EA:92 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.152.0/22 103.109.78.0/23 103.120.190.0/23 Signature Algorithm: sha256WithRSAEncryption b4:67:8c:e2:83:24:04:e2:55:10:f6:41:9e:1d:b5:ff:24:e6: 9a:76:d0:2c:ae:8a:72:27:38:63:07:b1:2b:b2:ce:77:0d:d9: b2:f1:bd:fa:3c:cd:cf:a8:09:32:1c:7b:ce:c7:02:9d:18:ae: ed:d1:a6:19:17:6a:b1:73:73:b2:0c:17:05:c5:1a:5d:35:c2: 1f:12:16:56:9b:95:d2:55:7d:fb:2d:18:72:e6:c1:10:00:1d: c9:ab:23:4e:87:b9:77:dd:5d:24:5f:f5:c5:da:62:00:ec:da: e4:ad:e5:19:7d:06:95:bf:7c:32:45:bc:2c:ec:f9:e4:43:f4: 94:82:64:d1:ae:ef:5b:53:fc:3e:15:5a:29:68:cb:2d:5e:fd: 8a:d4:95:ff:ec:7a:fe:80:e4:e1:54:5d:67:8b:93:c8:1b:7e: 76:0f:96:b8:d3:3f:3b:cf:e7:3a:30:43:74:50:6b:10:c7:b3: b7:13:03:34:45:b7:07:f6:15:f3:7a:ed:d4:49:c0:93:20:6e: a4:5b:93:2f:4d:e1:47:e4:53:3f:73:46:58:2f:9d:36:c7:98: 94:4e:3c:75:2f:78:4c:09:59:7d:61:1d:8f:79:8d:1f:28:2e: 37:28:c5:de:ed:1c:ea:34:06:49:40:cd:18:31:5f:4f:92:26: a9:0f:57:ef -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIDAItuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDcxMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0MmYtNzExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxE6/OmAU76xSuO1MWlBvA05mJTLjY1HCSRE189zdqs6/8yBoBtweY8uhva YUk4Wxi1d2BFtY8KNOeCe8HQgpCH0o+gmRp6M9EmpjtxP+7oIPLzaW9ihY/clOT6 VJBSdftydbE2G1D4G9655rNTmA8b7wsSMWjOrp1QLJziJ/7EVNmI3HWWocYj9jQ8 LE+KJhay44baxmbD+F6EIshVdEXyv5CrNpaPgiVDnqJemAsv1PjcnyB5oegIKfvC xn3HqHe3gEtKeH1xa1XaiEVwDldXjb33e43kUVX26ZVvtIEGwRIkUpIrbo1zKnSp j5cbHROh8CT5W48xhR5ZYJ5bpPsCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBQRFBWs nr1BelzhdAL2kGkK+bjqkjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc3RTE1MjEy QzU5MDExRUE4RTNGRDgxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/ BBwwGjAYBAIAATASAwQCZ2yYAwQBZ21OAwQBZ3i+MA0GCSqGSIb3DQEBCwUAA4IB AQC0Z4zigyQE4lUQ9kGeHbX/JOaadtAsropyJzhjB7Erss53Ddmy8b36PM3PqAky HHvOxwKdGK7t0aYZF2qxc3OyDBcFxRpdNcIfEhZWm5XSVX37LRhy5sEQAB3JqyNO h7l33V0kX/XF2mIA7NrkreUZfQaVv3wyRbws7PnkQ/SUgmTRru9bU/w+FVopaMst Xv2K1JX/7Hr+gOThVF1ni5PIG352D5a40z87z+c6MEN0UGsQx7O3EwM0RbcH9hXz eu3UScCTIG6kW5MvTeFH5FM/c0ZYL502x5iUTjx1L3hMCVl9YR2PeY0fKC43KMXe 7RzqNAZJQM0YMV9PkiapD1fv -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:29 2025 by rpki-client