$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa File: A1A8E0448E0611EBA685BB7FC4F9AE02.roa (raw, json) Hash identifier: LMjYTYRomv7Ld/sYzBx0cYENS8pOnCLDNILMURgCYuo= Subject key identifier: FD:9D:4B:B3:C1:A5:89:70:DF:F2:C7:48:FC:16:71:9B:3F:5A:CA:78 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8D8F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa Signing time: Thu 30 May 2024 16:16:06 +0000 ROA not before: Thu 30 May 2024 16:16:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141561 IP address blocks: 103.163.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36239 (0x8d8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:16:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a646-06f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:83:63:0a:d2:2e:f6:56:30:5d:53:4f:44: 7e:bd:ba:41:ff:2d:98:40:81:13:98:64:ad:51:4e: b5:75:5d:29:19:fc:58:06:97:1e:46:70:69:6e:9d: 7a:d6:8b:2e:b5:1b:7e:02:88:b1:c0:a0:2f:8f:7d: 39:e1:84:c1:13:e6:cf:f8:4f:38:35:9d:38:47:4b: 60:0b:df:16:33:f7:a2:f6:ca:9d:a0:22:be:eb:b5: f3:05:04:62:51:d7:7d:d8:bb:a8:80:12:9d:72:46: d9:1e:e2:64:38:22:80:7a:44:11:da:28:96:47:26: 49:9a:ef:8b:2f:d0:e1:c9:01:67:24:62:18:6c:7f: 2c:b0:73:30:55:0c:d8:ef:7f:67:e1:74:cd:a1:da: 0f:44:2e:db:fa:ba:af:85:92:91:90:d2:0b:2a:14: 83:a2:25:29:8d:e6:a3:1c:bf:29:88:f0:2f:37:ad: b1:e6:af:46:d7:ac:ff:31:0f:1e:71:a6:0f:b5:30: a4:c6:8b:d6:e8:5f:e4:30:c3:5d:45:9b:52:ab:9d: 89:80:42:1e:58:06:ae:dd:94:cc:17:87:50:b4:3a: 8f:d1:50:9e:5b:6a:e7:8a:9e:4e:e7:99:d1:e6:fa: 0e:58:16:26:e0:bc:66:ef:41:66:4e:0f:9a:9b:6b: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:4B:B3:C1:A5:89:70:DF:F2:C7:48:FC:16:71:9B:3F:5A:CA:78 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.242.0/23 Signature Algorithm: sha256WithRSAEncryption a6:c7:50:34:99:41:ce:fc:d4:d1:cd:df:6c:66:6e:1e:f9:78: 13:93:5d:b7:6b:4c:75:b0:05:3f:4f:a9:8c:85:48:31:84:02: 05:c5:65:ed:d4:ad:dc:d4:1f:7c:d7:26:ff:22:7f:68:5b:69: 4d:16:b1:e8:61:f4:46:c2:98:17:ba:35:14:9e:c1:49:8e:c9: eb:64:da:0a:11:7e:e8:ef:e8:48:0c:77:17:3b:c3:71:2f:fc: bb:d6:8b:3a:1e:31:14:0b:33:28:78:23:40:99:fd:d7:47:b7: eb:a5:5b:00:c0:0f:84:8a:18:d5:cf:00:7c:0c:7c:4b:71:6a: 1e:cf:9c:8d:62:2c:88:5c:ff:88:c4:44:26:f1:4b:f2:c2:6a: 01:08:a4:48:09:d6:1f:51:f8:81:43:ce:64:b9:e8:37:c2:a2: 7d:40:eb:f9:5e:bb:73:51:53:05:09:cf:04:26:ea:e5:ca:21: 0a:01:ea:a8:46:b4:13:c1:4c:e9:b3:bd:d6:71:5a:73:70:fe: 28:25:32:1f:76:f4:03:59:53:20:70:61:19:63:e6:ed:89:c1: f5:60:18:db:6b:10:81:6b:68:a6:f6:e5:58:ff:5f:0e:dd:e5: 1d:e2:33:0b:4c:bb:f8:89:05:91:11:72:31:37:5f:58:45:43: f7:9a:49:45 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI2PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTYwNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2NDYtMDZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTtg2MK0i72VjBdU09Efr26Qf8tmECBE5hkrVFOtXVdKRn8WAaXHkZwaW6d etaLLrUbfgKIscCgL499OeGEwRPmz/hPODWdOEdLYAvfFjP3ovbKnaAivuu18wUE YlHXfdi7qIASnXJG2R7iZDgigHpEEdoolkcmSZrviy/Q4ckBZyRiGGx/LLBzMFUM 2O9/Z+F0zaHaD0Qu2/q6r4WSkZDSCyoUg6IlKY3moxy/KYjwLzetseavRtes/zEP HnGmD7UwpMaL1uhf5DDDXUWbUqudiYBCHlgGrt2UzBeHULQ6j9FQnltq54qeTueZ 0eb6DlgWJuC8Zu9BZk4PmptrgmECAwEAAaOCApUwggKRMB0GA1UdDgQWBBT9nUuz waWJcN/yx0j8FnGbP1rKeDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ExQThFMDQ0 OEUwNjExRUJBNjg1QkI3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6PyMA0GCSqGSIb3DQEBCwUAA4IBAQCmx1A0mUHO/NTR zd9sZm4e+XgTk123a0x1sAU/T6mMhUgxhAIFxWXt1K3c1B981yb/In9oW2lNFrHo YfRGwpgXujUUnsFJjsnrZNoKEX7o7+hIDHcXO8NxL/y71os6HjEUCzMoeCNAmf3X R7frpVsAwA+EihjVzwB8DHxLcWoez5yNYiyIXP+IxEQm8UvywmoBCKRICdYfUfiB Q85kueg3wqJ9QOv5XrtzUVMFCc8EJurlyiEKAeqoRrQTwUzps73WcVpzcP4oJTIf dvQDWVMgcGEZY+bticH1YBjbaxCBa2im9uVY/18O3eUd4jMLTLv4iQWREXIxN19Y RUP3mklF -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:21 2024 by rpki-client on console-ams.rpki-client.org