$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/898B9CD6656E11EDB913FB2BC4F9AE02.roa File: 898B9CD6656E11EDB913FB2BC4F9AE02.roa (raw, json) Hash identifier: k+p5pORJhsefRSvgm0V2va3GKLJvpMfZ3mQRSKVvlS8= Subject key identifier: 3C:46:53:96:BC:A9:5C:5C:52:9B:8B:6B:00:D1:8A:59:65:48:12:F0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B07 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/898B9CD6656E11EDB913FB2BC4F9AE02.roa Signing time: Thu 30 May 2024 16:05:28 +0000 ROA not before: Thu 30 May 2024 16:05:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136368 IP address blocks: 103.89.64.0/22 maxlen: 24 2001:df1:2480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35591 (0x8b07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:05:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a3c7-e72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:de:e5:74:22:6c:d1:be:89:24:ab:c2:1c: 56:ed:6d:fa:ab:c5:27:f9:cf:d1:fc:58:19:0c:b2: fd:7b:e5:02:b0:e5:bd:6d:aa:ba:59:4a:d2:02:d9: c4:c2:73:bd:6c:e7:0f:8e:f0:b9:ec:1e:33:d6:e1: 46:7c:6f:a0:fa:41:45:b3:ea:40:92:fb:b0:ec:ec: 6e:5f:7b:89:e0:14:0a:86:c0:2e:f4:08:b2:be:17: 88:c6:2e:ae:ec:87:04:de:32:d8:d8:a1:7f:04:53: 3e:c4:bd:88:98:cf:06:59:31:83:53:f9:9d:0a:a3: 61:01:b9:c1:16:28:73:11:6c:a3:e3:91:f9:ea:5b: 15:80:38:b7:39:dd:5d:25:60:48:12:d0:7d:82:c3: 58:23:ad:a4:48:9d:4a:6e:68:30:90:b2:12:ac:0d: e0:cd:4a:5d:01:57:0a:b1:4c:e8:83:b9:59:ee:c4: cd:bb:36:83:e2:b5:eb:32:9a:60:9c:28:c5:bc:7a: 17:50:3f:14:5f:8b:9e:a3:27:a5:41:92:d3:91:8b: 54:8d:3f:de:49:14:f8:3d:c3:83:d1:e5:5f:03:44: bb:8c:35:81:67:12:de:14:df:97:90:6a:3b:60:48: 3a:b2:f9:f3:a6:1d:e0:1c:10:b2:56:40:a1:0b:d5: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:53:96:BC:A9:5C:5C:52:9B:8B:6B:00:D1:8A:59:65:48:12:F0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/898B9CD6656E11EDB913FB2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.64.0/22 IPv6: 2001:df1:2480::/48 Signature Algorithm: sha256WithRSAEncryption 62:11:2e:cd:3f:ad:17:5d:7a:06:94:84:a5:72:51:70:cb:55: de:8a:cb:6a:8a:78:db:72:8d:55:fd:79:5a:c6:0b:9e:30:46: df:9c:6f:c3:d0:82:f7:8d:9c:25:6c:8d:6c:15:48:4b:f5:60: 2c:58:c9:f5:84:bf:bb:6a:46:2a:de:8f:64:7f:ed:f7:38:b8: 60:b7:19:b7:b2:a0:0a:9c:da:44:72:df:63:f2:b7:f5:8c:08: c1:21:6c:05:56:0d:09:7f:a5:1e:d4:ac:d2:ff:60:94:9e:02: 99:17:c1:cd:2a:6e:75:8e:6b:0a:4a:a6:ff:6e:d7:fe:22:b1: 6c:fe:4f:e9:8e:02:b3:40:62:0f:97:1c:7c:fb:27:be:cc:34: f5:f6:44:2d:89:70:97:ae:df:42:95:b5:2e:78:51:02:5d:f6: 9e:a2:54:c7:1b:56:c8:91:d1:e3:75:32:9b:69:8f:c8:f5:c3: 92:32:84:f6:e1:bf:93:26:82:26:c3:bd:0c:0c:57:fa:81:2b: dc:79:6e:26:e3:c3:a5:cd:d1:37:21:b9:5e:d3:dd:60:c8:3c: 1f:42:03:5d:3d:79:1e:b1:0c:9b:9d:a1:9f:30:09:57:26:ce: 1a:56:66:ad:61:6f:3f:3b:47:49:aa:d2:31:2e:e6:c9:93:39: 5c:58:2d:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIsHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDUyOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzYzctZTcyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcq3uV0ImzRvokkq8IcVu1t+qvFJ/nP0fxYGQyy/XvlArDlvW2qullK0gLZ xMJzvWznD47wueweM9bhRnxvoPpBRbPqQJL7sOzsbl97ieAUCobALvQIsr4XiMYu ruyHBN4y2NihfwRTPsS9iJjPBlkxg1P5nQqjYQG5wRYocxFso+OR+epbFYA4tznd XSVgSBLQfYLDWCOtpEidSm5oMJCyEqwN4M1KXQFXCrFM6IO5We7Ezbs2g+K16zKa YJwoxbx6F1A/FF+LnqMnpUGS05GLVI0/3kkU+D3Dg9HlXwNEu4w1gWcS3hTfl5Bq O2BIOrL586Yd4BwQslZAoQvVp2kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQ8RlOW vKlcXFKbi2sA0YpZZUgS8DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg5OEI5Q0Q2 NjU2RTExRURCOTEzRkIyQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQCZ1lAMA8EAgACMAkDBwAgAQ3xJIAwDQYJKoZIhvcNAQEL BQADggEBAGIRLs0/rRddegaUhKVyUXDLVd6Ky2qKeNtyjVX9eVrGC54wRt+cb8PQ gveNnCVsjWwVSEv1YCxYyfWEv7tqRirej2R/7fc4uGC3GbeyoAqc2kRy32Pyt/WM CMEhbAVWDQl/pR7UrNL/YJSeApkXwc0qbnWOawpKpv9u1/4isWz+T+mOArNAYg+X HHz7J77MNPX2RC2JcJeu30KVtS54UQJd9p6iVMcbVsiR0eN1Mptpj8j1w5IyhPbh v5MmgibDvQwMV/qBK9x5bibjw6XN0TchuV7T3WDIPB9CA109eR6xDJudoZ8wCVcm zhpWZq1hbz87R0mq0jEu5smTOVxYLTM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:45 2024 by rpki-client on console-fra.rpki-client.org