$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa File: 7B2DCE6E4B0711EEB154A577C4F9AE02.roa (raw, json) Hash identifier: hHdWBDe1gllsnkGNWR975YZAvv37bQvu/ZCP/zjXETY= Subject key identifier: D6:B7:57:67:F3:B1:13:49:F7:05:5B:45:41:97:36:2F:21:E4:FB:F7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9074 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa Signing time: Thu 30 May 2024 16:27:59 +0000 ROA not before: Thu 30 May 2024 16:27:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151766 IP address blocks: 103.206.144.0/22 maxlen: 24 103.207.124.0/22 maxlen: 24 106.0.40.0/22 maxlen: 24 121.46.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36980 (0x9074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:27:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a90f-0d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:2f:3f:27:d5:cb:8c:63:26:5e:7b:c8:7f: 2d:50:13:86:c9:27:48:43:32:79:07:2b:5e:37:e3: 8b:f2:23:c3:ba:75:ad:54:11:02:97:a3:f8:62:54: 13:90:d8:af:d4:b8:92:50:86:63:00:06:2f:a0:5f: 3d:0f:88:a0:9c:e4:5e:9b:3c:fb:6b:f5:ba:6c:ae: 4d:b8:81:0a:a6:e9:48:59:31:64:a0:a0:73:e7:d0: a7:d6:24:6b:55:b1:7b:03:71:94:cc:9f:33:a4:1e: 0b:9f:37:98:a9:a9:37:c4:44:71:6b:e1:6c:0b:ac: 2d:c9:06:eb:f0:dd:45:01:87:f5:8e:6a:8e:85:e1: a1:0d:df:50:b2:84:54:8a:d7:56:4a:c6:73:85:5a: b9:38:21:cf:9f:16:60:b0:d1:b1:c2:f1:1c:e1:34: fe:6a:69:a9:84:b3:86:87:fc:8b:35:4d:c7:f2:ef: 4f:db:cd:cc:eb:00:ea:1e:20:38:b3:60:94:d3:60: 8a:8e:a7:ff:ee:61:ca:12:46:cf:35:56:ad:ea:5b: 5b:c4:bb:32:25:24:42:54:35:0c:5d:bf:a4:e3:17: 9e:03:30:74:9d:85:8a:b6:0e:28:70:88:73:ed:3d: bb:1f:68:f1:dd:c5:26:06:67:ca:bf:0e:49:a3:4f: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:57:67:F3:B1:13:49:F7:05:5B:45:41:97:36:2F:21:E4:FB:F7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.144.0/22 103.207.124.0/22 106.0.40.0/22 121.46.92.0/22 Signature Algorithm: sha256WithRSAEncryption 06:bc:a1:2d:24:be:fe:12:7b:be:c4:79:b2:a8:c4:ba:f8:54: 0c:31:61:c7:6c:ac:0b:ea:e2:1b:22:4d:c5:15:f5:61:13:f3: 35:41:73:58:59:b6:78:2f:f4:f6:13:f2:42:7f:ad:4c:a0:af: a3:92:34:15:bc:82:77:41:1d:30:02:6a:9d:55:6e:77:65:04: 36:4a:04:0b:e2:00:94:39:75:9b:ff:74:1d:71:ef:59:78:45: d0:11:6a:f5:5e:30:98:25:ac:13:84:f7:7a:e4:7c:16:21:40: 81:7b:67:83:7a:d4:b0:63:23:4f:b3:af:83:c7:0d:87:ae:65: 0e:96:2e:29:ec:97:72:6f:46:20:cb:e8:e7:25:f0:a9:5b:8e: f8:b9:93:21:6f:3a:9a:e0:f1:d0:6a:6d:14:29:bc:9c:05:6a: dd:60:4b:da:24:c3:e1:79:ad:36:8a:8b:b3:a9:08:fa:d8:ed: ac:94:b4:fc:5b:1f:34:cc:78:65:c4:3a:ba:9d:d8:62:2b:f3: c1:b1:bc:7b:84:f3:29:44:f3:8c:b0:da:06:da:46:6d:ba:36: 00:5f:86:90:6c:7f:98:ce:bc:14:9e:93:a5:6d:4b:8d:53:d8: b7:6d:a4:52:5c:32:29:82:d6:74:43:40:67:0c:4d:f4:5c:87: 74:31:e3:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAJB0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2Mjc1OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5MGYtMGQ0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqNLz8n1cuMYyZee8h/LVAThsknSEMyeQcrXjfji/Ijw7p1rVQRApej+GJU E5DYr9S4klCGYwAGL6BfPQ+IoJzkXps8+2v1umyuTbiBCqbpSFkxZKCgc+fQp9Yk a1WxewNxlMyfM6QeC583mKmpN8REcWvhbAusLckG6/DdRQGH9Y5qjoXhoQ3fULKE VIrXVkrGc4VauTghz58WYLDRscLxHOE0/mppqYSzhof8izVNx/LvT9vNzOsA6h4g OLNglNNgio6n/+5hyhJGzzVWrepbW8S7MiUkQlQ1DF2/pOMXngMwdJ2FirYOKHCI c+09ux9o8d3FJgZnyr8OSaNPsIcCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTWt1dn 87ETSfcFW0VBlzYvIeT79zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCMkRDRTZF NEIwNzExRUVCMTU0QTU3N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCZ86QAwQCZ898AwQCagAoAwQCeS5cMA0GCSqGSIb3DQEB CwUAA4IBAQAGvKEtJL7+Enu+xHmyqMS6+FQMMWHHbKwL6uIbIk3FFfVhE/M1QXNY WbZ4L/T2E/JCf61MoK+jkjQVvIJ3QR0wAmqdVW53ZQQ2SgQL4gCUOXWb/3Qdce9Z eEXQEWr1XjCYJawThPd65HwWIUCBe2eDetSwYyNPs6+Dxw2HrmUOli4p7Jdyb0Yg y+jnJfCpW474uZMhbzqa4PHQam0UKbycBWrdYEvaJMPhea02iouzqQj62O2slLT8 Wx80zHhlxDq6ndhiK/PBsbx7hPMpRPOMsNoG2kZtujYAX4aQbH+YzrwUnpOlbUuN U9i3baRSXDIpgtZ0Q0BnDE30XId0MeP5 -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:30 2025 by rpki-client