$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa File: 9095CAFCAD0C11EDABA62D22C4F9AE02.roa (raw, json) Hash identifier: RdaQwIureRY2pqM0leJLzmcaDkp3zjgErMhwQ4E97HA= Subject key identifier: 47:95:BB:A1:1C:7B:CB:D6:6D:0F:B0:9A:ED:32:8F:B3:64:FE:10:88 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8FF2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa Signing time: Thu 30 May 2024 16:25:54 +0000 ROA not before: Thu 30 May 2024 16:25:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150649 IP address blocks: 103.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36850 (0x8ff2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:25:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a892-6d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:e3:a0:a9:87:05:c0:57:5e:8b:14:6a:f3: be:a6:d9:26:c1:61:29:e0:da:34:c6:8f:61:fe:ab: b0:a0:29:88:4b:a5:2b:b1:8d:e5:dd:3c:86:ea:44: e9:d6:3d:7e:a1:be:0d:ad:f0:b7:a2:df:b9:d3:68: 89:44:95:7f:f2:13:b5:25:b0:84:a8:08:26:7c:81: 30:04:d8:36:05:5d:57:c4:a5:8b:37:46:1f:f3:96: b5:40:39:0c:0e:e2:9f:b6:14:b6:9b:80:2b:6d:e2: 2c:69:da:1f:75:1b:ae:37:04:0e:86:47:51:78:f8: 77:f4:b3:68:91:8f:b0:67:5a:86:88:19:4c:77:38: a7:b0:07:88:99:52:36:ee:96:4f:63:7f:c2:c2:1a: 10:89:63:76:de:d1:dc:7a:f3:c0:09:0f:a1:e2:7e: fa:9e:f9:98:5a:18:41:70:5f:b2:80:9d:64:6b:9b: c1:d7:50:40:a5:b6:3a:d1:3c:40:e7:5b:92:83:e9: 55:ec:53:93:df:0a:53:d5:67:d0:ac:70:a8:9f:c6: ab:a5:4e:e0:1d:32:0d:0a:bc:a1:9c:5a:aa:c9:61: c6:8d:ce:dc:cb:48:0a:b2:b3:f2:49:31:d7:a8:75: 13:a7:d6:61:59:85:50:d6:14:84:06:54:58:eb:d9: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:95:BB:A1:1C:7B:CB:D6:6D:0F:B0:9A:ED:32:8F:B3:64:FE:10:88 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.106.0/23 Signature Algorithm: sha256WithRSAEncryption 77:22:ed:4d:5b:e2:28:5b:8f:d5:de:46:6b:00:ae:38:80:d4: c7:5d:9e:b4:94:a9:43:9d:c0:cc:fd:6d:56:8c:9d:fb:bd:4e: 16:83:a3:dd:da:97:5a:ff:b3:d2:b2:ae:12:69:f4:96:4a:29: b9:c5:82:7c:d3:78:da:77:43:da:9b:9d:a5:57:8d:c9:84:c1: c2:85:40:51:c7:09:72:c2:5a:c7:3b:26:52:80:10:1d:4f:84: 08:22:5c:cb:45:92:08:d0:e7:81:bb:68:76:e9:70:ee:f9:da: 3f:57:07:17:90:8b:ea:c7:b4:4e:8a:fc:8a:f7:07:97:48:80: a1:45:c7:db:db:ca:6b:92:ad:9e:ae:45:e6:94:92:6b:70:33: 2e:65:77:19:41:4c:15:4f:03:19:de:d0:37:5b:84:59:05:e5: d8:b5:a1:8b:00:d7:b3:48:50:9b:b2:9f:42:4b:5d:50:86:ea: d9:3b:78:f8:78:c8:7b:04:85:0e:ca:93:45:dd:49:33:2e:29: 9e:b6:21:5a:0c:e2:54:91:17:e4:d4:50:37:f8:3e:72:84:fc: 92:b7:42:fb:07:11:b3:97:c8:b9:ef:c0:7b:89:4a:9f:b7:68: 4b:d1:d1:4b:9d:0a:c5:d5:b9:76:04:0d:6d:07:c4:83:9c:0b: 36:c0:53:e4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI/yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjU1NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4OTItNmQ1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIq46CphwXAV16LFGrzvqbZJsFhKeDaNMaPYf6rsKApiEulK7GN5d08hupE 6dY9fqG+Da3wt6LfudNoiUSVf/ITtSWwhKgIJnyBMATYNgVdV8SlizdGH/OWtUA5 DA7in7YUtpuAK23iLGnaH3UbrjcEDoZHUXj4d/SzaJGPsGdahogZTHc4p7AHiJlS Nu6WT2N/wsIaEIljdt7R3HrzwAkPoeJ++p75mFoYQXBfsoCdZGubwddQQKW2OtE8 QOdbkoPpVexTk98KU9Vn0KxwqJ/Gq6VO4B0yDQq8oZxaqslhxo3O3MtICrKz8kkx 16h1E6fWYVmFUNYUhAZUWOvZHLkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRHlbuh HHvL1m0PsJrtMo+zZP4QiDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwOTVDQUZD QUQwQzExRURBQkE2MkQyMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ0hqMA0GCSqGSIb3DQEBCwUAA4IBAQB3Iu1NW+IoW4/V 3kZrAK44gNTHXZ60lKlDncDM/W1WjJ37vU4Wg6Pd2pda/7PSsq4SafSWSim5xYJ8 03jad0Pam52lV43JhMHChUBRxwlywlrHOyZSgBAdT4QIIlzLRZII0OeBu2h26XDu +do/VwcXkIvqx7ROivyK9weXSIChRcfb28prkq2erkXmlJJrcDMuZXcZQUwVTwMZ 3tA3W4RZBeXYtaGLANezSFCbsp9CS11QhurZO3j4eMh7BIUOypNF3UkzLimetiFa DOJUkRfk1FA3+D5yhPySt0L7BxGzl8i578B7iUqft2hL0dFLnQrF1bl2BA1tB8SD nAs2wFPk -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:06 2024 by rpki-client on console-fra.rpki-client.org