$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa File: 96FF852E61D711EEA6CF0A0FC4F9AE02.roa (raw, json) Hash identifier: yvjTa3BVa0TwO3J2Lxqqm1kAtoYG+3oiM9Uie2txv24= Subject key identifier: 45:AA:38:18:B6:5C:2B:E8:C4:6F:15:D0:44:62:BC:27:60:A5:17:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9045 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa Signing time: Thu 30 May 2024 16:27:15 +0000 ROA not before: Thu 30 May 2024 16:27:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151688 IP address blocks: 103.213.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36933 (0x9045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:27:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a8e3-ebe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:7f:68:39:7d:d8:b1:6d:27:98:fd:10:d4: 04:f1:d5:85:48:80:7d:86:d3:e6:40:74:12:a3:5a: 20:33:fe:80:36:ee:ba:96:53:5f:59:4b:ea:53:82: 96:b1:12:fc:c7:b8:dd:7b:47:e6:a5:86:62:c7:65: 52:6b:6e:79:6b:fe:e1:50:ce:78:23:4a:f0:7f:d8: 0a:47:d8:86:9a:b0:b5:dd:55:c4:80:c0:b9:98:9b: e7:b0:6b:ac:d6:7d:85:ba:86:f6:c9:22:44:39:ee: ba:4e:61:ad:78:39:e8:90:66:92:ef:e2:72:95:ee: df:73:51:2d:aa:6b:3f:f7:6f:6c:ee:4c:3b:d1:31: 1b:6c:95:3b:e6:f1:3e:93:be:15:5f:00:66:98:2b: 04:9a:34:07:e5:d6:3b:75:40:ac:88:e3:64:58:b7: 2b:ff:ee:38:09:07:23:2b:6f:86:0b:97:43:9b:6d: ab:4d:b9:c3:a6:66:a4:0b:ec:b1:da:bf:e5:7e:df: 42:56:7a:b1:05:45:dd:44:9e:4c:37:7d:eb:77:62: 0c:3d:64:06:45:35:d2:64:6d:0c:3b:c5:58:75:c2: 1f:9c:52:40:d4:d8:83:53:a6:e8:e0:a2:50:ac:0c: 9d:02:09:fd:52:2b:a2:c5:b2:a5:2b:27:a8:33:d8: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:38:18:B6:5C:2B:E8:C4:6F:15:D0:44:62:BC:27:60:A5:17:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.222.0/23 Signature Algorithm: sha256WithRSAEncryption 64:74:7b:a7:cf:88:db:0d:73:d5:63:e9:15:22:bc:a6:5b:a9: b8:94:8f:7d:7e:8d:e2:2d:c1:a7:35:89:d0:68:ba:37:ba:6e: d7:3b:bb:f8:90:5c:9e:41:d7:0d:29:0e:41:f1:81:d5:4c:13: 8e:7e:a5:36:b0:06:1e:1b:e4:4b:54:f9:af:bf:38:27:35:3b: a6:6a:07:b6:f5:89:fe:7d:25:b6:6a:f2:65:26:49:b8:d2:eb: 1c:38:cd:3e:f8:9a:99:d2:7a:45:50:e6:5c:11:02:b4:f1:ca: 2d:e3:16:58:49:7a:69:e8:a5:34:ba:72:2f:e2:42:c1:45:ec: e8:60:7d:6b:0e:fe:aa:1a:6b:77:d6:a8:2e:93:5d:0c:00:4b: d5:1d:65:58:9a:96:83:68:4d:56:72:df:6c:d4:26:b5:2e:66: 96:19:64:40:92:1a:39:d3:88:e8:6a:58:78:6a:65:a6:5b:d5: 61:27:ae:70:e3:6f:00:b9:e5:e2:9d:32:bc:17:25:84:84:93: 58:ee:7b:7c:93:ac:7d:d0:52:8a:f2:f7:ae:f8:c7:d0:1d:cb: 3a:9e:af:29:a6:92:0a:aa:b7:2c:08:7a:1d:c5:6e:b8:b1:8a: 9f:f8:68:39:00:e1:2a:34:2f:51:bb:8b:27:c7:2a:cf:26:d9: e7:9e:4e:ff -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJBFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjcxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4ZTMtZWJlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4vf2g5fdixbSeY/RDUBPHVhUiAfYbT5kB0EqNaIDP+gDbuupZTX1lL6lOC lrES/Me43XtH5qWGYsdlUmtueWv+4VDOeCNK8H/YCkfYhpqwtd1VxIDAuZib57Br rNZ9hbqG9skiRDnuuk5hrXg56JBmku/icpXu33NRLaprP/dvbO5MO9ExG2yVO+bx PpO+FV8AZpgrBJo0B+XWO3VArIjjZFi3K//uOAkHIytvhguXQ5ttq025w6ZmpAvs sdq/5X7fQlZ6sQVF3USeTDd963diDD1kBkU10mRtDDvFWHXCH5xSQNTYg1Om6OCi UKwMnQIJ/VIrosWypSsnqDPY2hUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRFqjgY tlwr6MRvFdBEYrwnYKUXGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk2RkY4NTJF NjFENzExRUVBNkNGMEEwRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ9XeMA0GCSqGSIb3DQEBCwUAA4IBAQBkdHunz4jbDXPV Y+kVIrymW6m4lI99fo3iLcGnNYnQaLo3um7XO7v4kFyeQdcNKQ5B8YHVTBOOfqU2 sAYeG+RLVPmvvzgnNTumage29Yn+fSW2avJlJkm40uscOM0++JqZ0npFUOZcEQK0 8cot4xZYSXpp6KU0unIv4kLBRezoYH1rDv6qGmt31qguk10MAEvVHWVYmpaDaE1W ct9s1Ca1LmaWGWRAkho504joalh4amWmW9VhJ65w428AueXinTK8FyWEhJNY7nt8 k6x90FKK8veu+MfQHcs6nq8pppIKqrcsCHodxW64sYqf+Gg5AOEqNC9Ru4snxyrP Jtnnnk7/ -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:46 2024 by rpki-client on console-fra.rpki-client.org