$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/867385D2271D11EFB9B50E2DC4F9AE02.roa File: 867385D2271D11EFB9B50E2DC4F9AE02.roa (raw, json) Hash identifier: Hpu3uet1clTI+2PTBxxSchLjUQtdnaT6qvMtwDdV5r8= Subject key identifier: CF:89:ED:39:12:4B:A1:9B:46:DE:B5:70:7F:C9:B7:AF:27:DD:E3:A2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9E6A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/867385D2271D11EFB9B50E2DC4F9AE02.roa Signing time: Tue 03 Dec 2024 05:31:21 +0000 ROA not before: Tue 03 Dec 2024 05:31:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135766 IP address blocks: 103.111.158.0/24 maxlen: 24 103.127.100.0/22 maxlen: 24 103.144.114.0/23 maxlen: 24 2001:df2:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40554 (0x9e6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 3 05:31:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=674e97a9-a571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:f5:10:98:7e:c3:69:57:ec:b5:61:b0:d1: 84:bf:1d:27:c9:6e:84:42:f2:5c:00:39:65:11:4d: 59:ce:f5:65:3a:ef:30:c8:c8:9f:8f:c1:11:40:b8: ef:d1:d8:80:a0:5e:2f:fe:05:26:31:c1:f7:a8:a5: d0:70:1d:34:c7:a5:fb:3d:45:45:57:56:65:77:d1: a0:e4:a2:56:b1:c8:25:08:eb:43:9d:ee:26:87:67: 5d:b0:2e:23:17:f2:23:fc:b8:7e:d6:94:11:b4:b9: ea:ec:4e:eb:e3:9f:94:93:d9:06:a1:5f:ca:6b:f4: 74:2e:52:9f:1b:bb:32:ae:c0:6d:9c:06:d6:b6:2c: b3:28:6e:d6:a6:d6:f6:ce:47:a2:81:f1:0c:4f:f9: 6f:bc:9c:71:0c:08:10:85:51:11:99:7b:ca:8b:cd: ad:04:53:f3:8e:71:b5:49:8d:5f:88:db:58:4f:a4: 44:b7:64:fc:a1:1a:a8:4b:61:d4:18:db:2b:b2:79: b0:be:70:36:3c:4f:fa:8b:df:e3:ae:b7:84:a1:8e: c2:1d:2e:2e:85:ac:03:5e:ad:6b:09:c2:26:8a:36: 71:71:ba:52:92:ba:ff:08:0e:42:1c:2c:c2:39:c2: 9c:95:90:6a:96:44:bd:86:ff:21:d8:c7:cd:59:e9: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:89:ED:39:12:4B:A1:9B:46:DE:B5:70:7F:C9:B7:AF:27:DD:E3:A2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/867385D2271D11EFB9B50E2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.158.0/24 103.127.100.0/22 103.144.114.0/23 IPv6: 2001:df2:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:9d:ad:83:cd:75:e7:cd:46:a2:e4:07:5b:e6:aa:49:ec:63: 7f:75:52:44:11:17:ff:f1:cd:55:8c:17:ae:fb:e8:d6:ff:8b: 90:0c:ea:56:20:4e:e4:1f:11:43:5a:51:f5:73:62:d5:f6:aa: b3:a7:34:00:ea:dc:d8:d6:62:2f:66:0a:c9:ad:08:2e:3c:ca: e4:8f:c4:07:a1:79:b1:82:0b:71:99:fc:df:ec:c9:a9:f6:b9: fc:e0:d1:fc:7d:4c:75:0b:1b:67:9b:0d:07:24:74:f7:0c:c2: 53:14:af:ad:cb:58:50:c8:e8:65:7f:5a:db:93:ae:03:af:77: b9:ce:56:69:8a:47:93:1c:e0:1e:d0:f6:37:c8:ad:98:64:bb: 7a:55:c2:d8:64:cd:cd:6d:9b:ec:21:65:95:7d:a4:70:86:9b: c4:8b:58:b2:e5:2d:07:94:e0:f6:6e:e5:15:ec:e5:3f:d1:15: f6:89:8d:45:97:08:c2:eb:33:2d:9d:29:0f:ef:4f:50:4b:c6: 38:d1:11:2a:de:c4:7d:42:75:c1:56:66:e9:0c:a1:97:25:a9: 7b:26:a9:b8:6f:6b:05:3b:7c:0f:df:78:67:10:d2:16:33:0d: a2:f7:a3:78:f3:97:a8:3d:40:cf:2c:b7:13:a0:b4:61:57:8b: 68:cd:be:4b -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAJ5qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTIwMzA1MzEyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc0ZTk3YTktYTU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOaE9RCYfsNpV+y1YbDRhL8dJ8luhELyXAA5ZRFNWc71ZTrvMMjIn4/BEUC4 79HYgKBeL/4FJjHB96il0HAdNMel+z1FRVdWZXfRoOSiVrHIJQjrQ53uJodnXbAu IxfyI/y4ftaUEbS56uxO6+OflJPZBqFfymv0dC5Snxu7Mq7AbZwG1rYssyhu1qbW 9s5HooHxDE/5b7yccQwIEIVREZl7yovNrQRT845xtUmNX4jbWE+kRLdk/KEaqEth 1BjbK7J5sL5wNjxP+ovf4663hKGOwh0uLoWsA16tawnCJoo2cXG6UpK6/wgOQhws wjnCnJWQapZEvYb/IdjHzVnprWcCAwEAAaOCArIwggKuMB0GA1UdDgQWBBTPie05 Ekuhm0betXB/ybevJ93jojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2NzM4NUQy MjcxRDExRUZCOUI1MEUyREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQAZ2+eAwQCZ39kAwQBZ5ByMA8EAgACMAkDBwAgAQ3yccAw DQYJKoZIhvcNAQELBQADggEBAEedrYPNdefNRqLkB1vmqknsY391UkQRF//xzVWM F6776Nb/i5AM6lYgTuQfEUNaUfVzYtX2qrOnNADq3NjWYi9mCsmtCC48yuSPxAeh ebGCC3GZ/N/syan2ufzg0fx9THULG2ebDQckdPcMwlMUr63LWFDI6GV/WtuTrgOv d7nOVmmKR5Mc4B7Q9jfIrZhku3pVwthkzc1tm+whZZV9pHCGm8SLWLLlLQeU4PZu 5RXs5T/RFfaJjUWXCMLrMy2dKQ/vT1BLxjjRESrexH1CdcFWZukMoZclqXsmqbhv awU7fA/feGcQ0hYzDaL3o3jzl6g9QM8stxOgtGFXi2jNvks= -----END CERTIFICATE-----Generated at Fri Apr 4 10:56:02 2025 by rpki-client