$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa File: 85D2F052D5E111ECB31AC843C4F9AE02.roa (raw, json) Hash identifier: 4KVtjiN2CCIi4xwfpE/VjdGG/0fO1vm9E7bf9tOFiZc= Subject key identifier: 0A:FA:FB:39:82:07:70:D1:69:72:E8:CF:DE:3E:7E:58:A6:C4:0A:39 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89C9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa Signing time: Thu 30 May 2024 16:00:18 +0000 ROA not before: Thu 30 May 2024 16:00:18 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134868 IP address blocks: 103.139.201.0/24 maxlen: 24 103.139.222.0/23 maxlen: 24 103.209.16.0/23 maxlen: 24 103.211.162.0/23 maxlen: 24 2001:df0:9580::/48 maxlen: 48 2001:df1:3e00::/48 maxlen: 56 2001:df2:82c0::/48 maxlen: 48 2402:a740::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35273 (0x89c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:00:18 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a292-01cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:42:a8:be:6e:54:61:f7:0d:e7:90:7e:f8: 87:4f:11:a5:98:53:e3:52:3f:93:ac:df:bb:e9:64: c9:29:87:53:2a:0c:96:c7:b2:ba:84:38:66:30:4b: d2:46:da:e4:87:41:7c:d4:c3:ef:33:f7:bf:31:55: a6:13:74:61:d2:32:52:33:af:78:65:5d:23:b9:66: 40:c5:fa:69:84:4f:8e:75:65:02:70:11:71:89:9c: 2a:7f:dd:6d:af:f6:49:85:18:f0:50:9c:b9:d9:85: de:6e:c2:bf:73:f5:31:5d:c3:66:cb:9c:ad:c9:97: ce:39:0d:95:e7:7c:e5:a2:03:a6:c4:27:c1:f4:5b: f2:9e:a1:29:df:4f:90:08:e9:87:b6:93:32:d5:3b: 59:eb:16:aa:2a:23:be:5e:1a:05:0d:e7:95:3e:67: 6c:62:0d:02:12:fd:37:08:6c:13:7c:97:9c:81:28: 98:0e:59:3f:e5:60:e0:f4:af:b0:55:f9:d1:15:3d: 7d:82:93:52:b2:1f:d9:41:28:f3:31:d8:ea:16:79: e4:64:3f:ed:d6:aa:a8:01:68:33:e4:9d:d9:44:bd: fc:a9:2e:b1:f7:31:db:23:e0:5a:88:5a:e5:20:83: 3f:2c:ac:54:89:7a:50:65:01:de:95:f7:65:83:0f: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FA:FB:39:82:07:70:D1:69:72:E8:CF:DE:3E:7E:58:A6:C4:0A:39 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.201.0/24 103.139.222.0/23 103.209.16.0/23 103.211.162.0/23 IPv6: 2001:df0:9580::/48 2001:df1:3e00::/48 2001:df2:82c0::/48 2402:a740::/32 Signature Algorithm: sha256WithRSAEncryption 1b:96:fd:29:7f:06:11:2e:22:ef:7d:f9:3d:ef:3c:34:a8:89: e6:25:08:9c:87:e4:8b:0c:c8:40:70:e6:57:a5:4c:92:ae:27: d6:75:f4:7e:93:e3:b3:99:81:1b:8e:42:44:8b:d1:4a:c3:7a: 5c:a6:07:7d:35:92:b5:f0:c6:a1:5b:9e:e0:f1:f7:aa:d7:11: 35:a8:0c:c8:6f:39:f1:e8:92:cb:c1:6e:06:b0:3c:d4:47:32: 51:19:75:92:bb:87:06:03:b2:48:4b:09:48:f2:0a:36:fb:ea: 03:5c:70:42:90:2e:10:e8:65:70:fc:fe:f5:ce:84:78:f3:ce: 74:2d:8f:ba:5e:02:03:66:ea:7e:d7:aa:ec:c8:8a:07:54:ee: da:d5:72:dd:dc:08:fe:d5:88:25:8a:e2:b6:5a:b0:7a:28:69: 92:e0:61:78:29:bc:9f:4c:05:45:8e:44:3e:b4:74:a3:83:cc: 5f:ca:25:4f:42:84:a3:22:2e:da:43:20:6a:11:85:fa:ac:9a: 2e:a4:6a:f5:51:27:a2:e7:28:54:48:33:86:8b:3a:20:dc:24: 14:13:be:f9:d8:1b:d0:74:0f:44:a9:4c:ed:7c:7e:74:21:cb: 96:22:be:8a:2f:68:94:19:e8:83:34:c3:5d:97:c5:ed:d2:94: 98:be:ba:6c -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIDAInJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAxOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyOTItMDFjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOWQqi+blRh9w3nkH74h08RpZhT41I/k6zfu+lkySmHUyoMlseyuoQ4ZjBL 0kba5IdBfNTD7zP3vzFVphN0YdIyUjOveGVdI7lmQMX6aYRPjnVlAnARcYmcKn/d ba/2SYUY8FCcudmF3m7Cv3P1MV3DZsucrcmXzjkNled85aIDpsQnwfRb8p6hKd9P kAjph7aTMtU7WesWqiojvl4aBQ3nlT5nbGINAhL9NwhsE3yXnIEomA5ZP+Vg4PSv sFX50RU9fYKTUrIf2UEo8zHY6hZ55GQ/7daqqAFoM+Sd2US9/Kkusfcx2yPgWoha 5SCDPyysVIl6UGUB3pX3ZYMPdaMCAwEAAaOCAtEwggLNMB0GA1UdDgQWBBQK+vs5 ggdw0Wly6M/ePn5YpsQKOTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg1RDJGMDUy RDVFMTExRUNCMzFBQzg0M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBwEHAQH/ BEwwSjAeBAIAATAYAwQAZ4vJAwQBZ4veAwQBZ9EQAwQBZ9OiMCgEAgACMCIDBwAg AQ3wlYADBwAgAQ3xPgADBwAgAQ3ygsADBQAkAqdAMA0GCSqGSIb3DQEBCwUAA4IB AQAblv0pfwYRLiLvffk97zw0qInmJQich+SLDMhAcOZXpUySrifWdfR+k+OzmYEb jkJEi9FKw3pcpgd9NZK18MahW57g8feq1xE1qAzIbznx6JLLwW4GsDzURzJRGXWS u4cGA7JISwlI8go2++oDXHBCkC4Q6GVw/P71zoR48850LY+6XgIDZup+16rsyIoH VO7a1XLd3Aj+1YgliuK2WrB6KGmS4GF4KbyfTAVFjkQ+tHSjg8xfyiVPQoSjIi7a QyBqEYX6rJoupGr1USei5yhUSDOGizog3CQUE7752BvQdA9EqUztfH50IcuWIr6K L2iUGeiDNMNdl8Xt0pSYvrps -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:00 2024 by rpki-client on console-fra.rpki-client.org