$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa File: A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa (raw, json) Hash identifier: HRZJRpXvwHH7jh2kTttyzF4j9BQ6e7RIhOEbAMWqb0w= Subject key identifier: 54:93:9D:BA:07:0D:1F:43:FC:16:CE:10:80:6B:B0:15:3B:CC:67:A9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8EE8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa Signing time: Thu 30 May 2024 16:21:37 +0000 ROA not before: Thu 30 May 2024 16:21:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149232 IP address blocks: 103.181.232.0/23 maxlen: 24 2001:df3:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36584 (0x8ee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:21:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a791-6e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:46:de:e9:8b:83:0d:00:1f:ce:a7:45:50: 2a:88:32:89:13:3e:da:a0:88:e1:f3:69:c6:47:cd: 57:0a:bc:41:71:ec:e7:36:03:63:c3:ec:91:04:ac: c7:35:6c:36:f1:ba:6f:c2:63:31:20:57:b5:96:0a: ad:3e:bc:57:90:8f:df:9c:19:43:90:d1:ca:6e:d4: 22:91:2d:10:d8:d7:0e:20:84:c8:cd:be:e4:77:95: 24:9b:32:07:2f:1c:35:2f:60:60:a6:f3:11:46:db: 27:3f:51:ee:a4:24:67:fa:ac:69:17:55:57:57:ab: da:d7:21:4a:7a:47:ca:d4:f1:41:fd:56:5b:b9:76: 62:c3:11:a2:f7:76:85:35:df:49:0e:34:3c:a1:1c: 2b:bd:54:44:ef:3b:ab:1c:e1:63:19:4d:2b:19:e9: cf:3e:cf:aa:81:1e:98:77:81:cb:4a:6f:6f:a7:bb: 67:21:44:f3:3d:18:8e:c8:c8:c6:a9:7b:22:10:ec: 2d:ee:1e:22:a4:cc:20:8d:0e:45:63:b0:3d:b7:58: 6e:1d:da:1e:33:11:c5:79:f8:32:38:f0:e6:4c:fc: 92:89:b8:66:dd:0c:38:3d:96:bc:5c:57:0c:5d:8d: 6a:ca:42:6c:bb:35:77:0a:b9:20:6b:b7:24:4c:cf: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:9D:BA:07:0D:1F:43:FC:16:CE:10:80:6B:B0:15:3B:CC:67:A9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.232.0/23 IPv6: 2001:df3:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:61:53:4a:77:94:4b:bd:30:af:8f:84:43:9f:96:dc:ec:8e: c3:02:71:58:15:9d:23:95:10:51:b7:91:cb:03:1d:88:6f:6d: 76:f9:f8:02:00:ab:da:34:c7:b9:3b:24:f8:16:0f:5b:d5:7a: 01:c7:28:58:69:10:cb:56:ba:c9:56:e1:92:3c:5a:4e:fa:ab: 32:c0:48:6d:f0:26:8a:79:22:7b:48:18:f2:10:7c:c4:f5:2b: f8:a2:73:b9:3f:f6:86:05:8f:ff:ab:30:e0:35:95:0e:aa:1e: e6:c7:ff:24:7e:d7:83:aa:f2:9f:08:e8:ea:07:96:0d:fb:5c: ed:5c:51:d0:f3:0c:c1:dd:90:4c:18:8f:2f:2d:65:1b:81:f8: ad:cd:cf:0c:a2:07:6f:a9:c9:60:6b:32:e3:cc:72:ac:bf:68: 03:a9:6c:54:21:35:1b:45:5c:db:5f:c5:e0:3f:5e:6f:cd:b4: 06:55:3b:16:48:e8:95:07:1a:0c:1d:3c:7d:88:16:73:cf:28: ac:63:b2:2d:ec:00:91:dd:0f:82:3d:5f:64:a2:fa:dc:05:72: 47:73:f4:80:1a:94:3c:21:e5:09:ab:a3:23:f4:bf:78:b8:48: 3b:c6:72:8f:c7:02:6d:01:11:e1:ba:5b:59:40:9d:e1:91:48: ca:f3:f9:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI7oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjEzN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3OTEtNmU5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXaRt7pi4MNAB/Op0VQKogyiRM+2qCI4fNpxkfNVwq8QXHs5zYDY8PskQSs xzVsNvG6b8JjMSBXtZYKrT68V5CP35wZQ5DRym7UIpEtENjXDiCEyM2+5HeVJJsy By8cNS9gYKbzEUbbJz9R7qQkZ/qsaRdVV1er2tchSnpHytTxQf1WW7l2YsMRovd2 hTXfSQ40PKEcK71URO87qxzhYxlNKxnpzz7PqoEemHeBy0pvb6e7ZyFE8z0YjsjI xql7IhDsLe4eIqTMII0ORWOwPbdYbh3aHjMRxXn4Mjjw5kz8kom4Zt0MOD2WvFxX DF2NaspCbLs1dwq5IGu3JEzPpmMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRUk526 Bw0fQ/wWzhCAa7AVO8xnqTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2M0IxRTVB OTJGNzExRUM5RkYzQUMyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7XoMA8EAgACMAkDBwAgAQ3zjcAwDQYJKoZIhvcNAQEL BQADggEBAJ5hU0p3lEu9MK+PhEOfltzsjsMCcVgVnSOVEFG3kcsDHYhvbXb5+AIA q9o0x7k7JPgWD1vVegHHKFhpEMtWuslW4ZI8Wk76qzLASG3wJop5IntIGPIQfMT1 K/iic7k/9oYFj/+rMOA1lQ6qHubH/yR+14Oq8p8I6OoHlg37XO1cUdDzDMHdkEwY jy8tZRuB+K3NzwyiB2+pyWBrMuPMcqy/aAOpbFQhNRtFXNtfxeA/Xm/NtAZVOxZI 6JUHGgwdPH2IFnPPKKxjsi3sAJHdD4I9X2Si+twFckdz9IAalDwh5QmroyP0v3i4 SDvGco/HAm0BEeG6W1lAneGRSMrz+XA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:57 2024 by rpki-client on console-ams.rpki-client.org