$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa File: 999CFA46ABEF11EB8D78A223C4F9AE02.roa (raw, json) Hash identifier: 9zrJ1Wfk1LivEuII4X71da+i6g2sqbrin0A7ESuV6Sw= Subject key identifier: 4C:43:75:4F:1F:10:D8:76:7B:52:5B:1C:33:90:24:04:AA:BC:1C:5D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BC0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa Signing time: Thu 30 May 2024 16:08:31 +0000 ROA not before: Thu 30 May 2024 16:08:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137629 IP address blocks: 103.113.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35776 (0x8bc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:08:31 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a47e-2b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:6d:5b:7a:e5:24:21:23:db:a3:01:6b:88: 67:74:6d:73:f7:0c:8e:8f:b1:fe:7b:b9:64:2c:70: 37:52:14:de:ac:57:1c:62:79:78:0a:0a:38:2e:f4: e8:6a:0d:52:cf:79:28:45:0e:53:6b:91:36:a4:c7: af:33:15:a3:54:59:a5:e5:b3:5c:e3:85:fb:d1:7f: 87:a7:b8:33:2d:52:bc:af:56:e0:3d:9c:16:57:1c: 96:7b:df:e6:5c:21:3b:94:b5:dc:0a:f4:2a:3a:b6: 10:1d:c7:87:e8:ad:de:77:94:5f:8b:68:cd:5f:a9: 8b:4d:f0:f3:d1:9e:6f:12:ac:4b:59:4d:86:97:5c: 79:7d:be:3b:39:73:d6:ee:04:5f:53:98:0f:83:02: 93:f3:e1:d5:fd:73:7c:42:5f:6d:42:13:e3:89:ce: 64:ab:09:bd:18:98:c6:df:dd:64:7b:4d:81:80:3d: b5:9f:08:0f:46:58:ad:c6:21:da:22:3b:0b:4c:d8: e0:00:ad:3d:7a:fd:7f:fe:0a:ba:0f:25:95:2a:0e: 1b:c4:6a:27:97:1d:d9:ff:cd:76:73:08:5a:84:07: 8e:ba:f2:d9:00:b8:f1:5a:21:bc:2d:b4:4a:57:53: 22:5c:06:31:e3:85:f0:45:98:60:f6:ca:fc:04:4f: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:75:4F:1F:10:D8:76:7B:52:5B:1C:33:90:24:04:AA:BC:1C:5D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/999CFA46ABEF11EB8D78A223C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.228.0/22 Signature Algorithm: sha256WithRSAEncryption 30:85:2b:13:b8:c1:3b:d6:a3:14:a3:cd:3b:f3:ea:9d:18:6d: 81:e5:6e:79:50:d9:80:3b:34:f8:15:d6:06:03:e9:95:3c:15: 86:e1:59:58:c7:b6:50:28:6b:e5:95:ee:24:d3:ff:33:5c:23: 92:b9:31:44:55:02:e9:69:80:c3:b0:ab:a1:12:d6:d5:b8:74: 3b:e4:a9:c7:d2:d1:13:f2:22:e6:3a:3b:4b:ef:b3:52:e6:0e: de:ed:73:8c:87:37:e2:a0:4d:f9:e8:61:dc:01:30:89:28:d5: 15:e6:30:99:a9:d0:46:6a:3b:4b:6c:d5:d6:60:13:68:89:af: f9:18:c9:d9:8d:66:4d:36:2a:86:a8:f7:eb:22:43:f2:90:09: c7:94:05:cb:36:cf:47:13:1c:ae:78:7f:89:9a:e1:41:94:81: 22:56:c6:65:2d:0d:1d:95:71:ec:68:4f:3d:4b:a9:9b:98:35: 8c:cf:7a:86:f2:94:a5:d8:67:e4:aa:2b:cf:a7:59:ba:ec:35: ca:2e:3b:ae:78:b5:af:62:cf:66:0c:22:38:dc:f6:d2:e1:3c: 0d:5d:a9:e5:ae:98:ab:ac:50:69:58:31:b9:3f:cd:cf:98:0e: 63:c0:11:0a:92:28:dd:09:66:f2:12:59:99:a2:b0:5e:e4:c1: c6:1c:ee:88 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIvAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDgzMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0N2UtMmI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuCbVt65SQhI9ujAWuIZ3Rtc/cMjo+x/nu5ZCxwN1IU3qxXHGJ5eAoKOC70 6GoNUs95KEUOU2uRNqTHrzMVo1RZpeWzXOOF+9F/h6e4My1SvK9W4D2cFlcclnvf 5lwhO5S13Ar0Kjq2EB3Hh+it3neUX4tozV+pi03w89GebxKsS1lNhpdceX2+Ozlz 1u4EX1OYD4MCk/Ph1f1zfEJfbUIT44nOZKsJvRiYxt/dZHtNgYA9tZ8ID0ZYrcYh 2iI7C0zY4ACtPXr9f/4Kug8llSoOG8RqJ5cd2f/NdnMIWoQHjrry2QC48VohvC20 SldTIlwGMeOF8EWYYPbK/ARPKlkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRMQ3VP HxDYdntSWxwzkCQEqrwcXTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk5OUNGQTQ2 QUJFRjExRUI4RDc4QTIyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ3HkMA0GCSqGSIb3DQEBCwUAA4IBAQAwhSsTuME71qMU o8078+qdGG2B5W55UNmAOzT4FdYGA+mVPBWG4VlYx7ZQKGvlle4k0/8zXCOSuTFE VQLpaYDDsKuhEtbVuHQ75KnH0tET8iLmOjtL77NS5g7e7XOMhzfioE356GHcATCJ KNUV5jCZqdBGajtLbNXWYBNoia/5GMnZjWZNNiqGqPfrIkPykAnHlAXLNs9HExyu eH+JmuFBlIEiVsZlLQ0dlXHsaE89S6mbmDWMz3qG8pSl2GfkqivPp1m67DXKLjuu eLWvYs9mDCI43PbS4TwNXanlrpirrFBpWDG5P83PmA5jwBEKkijdCWbyElmZorBe 5MHGHO6I -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:08 2024 by rpki-client on console-fra.rpki-client.org