$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa File: A87FAC6E69D511EF9AA12F53C4F9AE02.roa (raw, json) Hash identifier: T2poUVzGGegmDWeZW/QUuMU/iAIJAKDwqIC+QrtSoZ4= Subject key identifier: 01:E4:85:D4:1C:55:6E:49:26:88:04:F8:2C:E8:63:74:97:6D:07:1E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9A5B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa Signing time: Fri 27 Sep 2024 10:04:30 +0000 ROA not before: Fri 27 Sep 2024 10:04:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135799 IP address blocks: 103.68.28.0/22 maxlen: 24 103.82.125.0/24 maxlen: 24 103.83.127.0/24 maxlen: 24 103.83.148.0/23 maxlen: 24 103.163.124.0/23 maxlen: 24 103.243.5.0/24 maxlen: 24 103.243.6.0/24 maxlen: 24 2401:7dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39515 (0x9a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 27 10:04:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66f6832e-7f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:e6:b6:16:8a:aa:13:c7:12:94:f9:45:ac: 6b:71:b3:65:d1:09:32:5e:5b:e1:36:5f:8d:e3:c4: e7:7c:32:35:0d:ec:ae:65:02:2f:b4:14:a6:fb:af: fd:05:01:37:ce:0d:6c:2d:b8:be:86:6c:42:2d:74: 4b:4a:ac:72:d8:d9:16:5b:47:15:47:79:d6:1c:60: 18:96:1b:5b:91:9f:38:c5:12:dd:e3:a8:b9:a1:55: d5:69:5c:14:ce:55:bc:1e:07:0a:70:d9:14:08:1e: 26:88:72:4f:a8:b1:a4:6c:b6:98:47:fc:96:a0:e4: 61:90:0a:06:bc:89:fd:9d:13:94:89:75:55:aa:4a: 73:a6:d5:42:1e:25:02:f7:8f:5a:a8:04:36:f5:4c: b1:ee:00:7c:cc:c9:5f:ee:63:f0:19:d8:18:00:ba: e3:49:34:b5:25:08:02:13:8c:15:6d:2e:cb:72:92: d8:18:0b:eb:41:ae:88:ad:c8:03:a5:1e:47:cc:31: d6:f4:2a:7c:a7:2e:d7:7d:49:48:94:e0:26:83:72: da:2d:50:08:74:63:a5:a1:45:77:8e:ef:5d:aa:b0: 17:3a:1b:7d:e9:85:2a:53:71:94:1e:40:2c:d1:22: 3a:51:2e:e7:dd:a7:a8:fa:42:09:37:b0:4f:32:e2: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:85:D4:1C:55:6E:49:26:88:04:F8:2C:E8:63:74:97:6D:07:1E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.28.0/22 103.82.125.0/24 103.83.127.0/24 103.83.148.0/23 103.163.124.0/23 103.243.5.0-103.243.6.255 IPv6: 2401:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption 94:cb:a4:a8:0e:bf:c0:30:09:91:b3:fe:f8:98:56:e4:3c:35: 4f:53:02:36:bf:ab:b9:a4:78:9f:c8:df:67:f7:7b:87:7c:90: 7e:bd:a6:04:c2:b9:0d:24:35:78:8d:a8:8f:fa:22:2c:5b:4f: 11:1b:4a:08:2d:17:d9:e3:fa:ec:25:f2:34:03:9e:32:2f:4d: f6:f7:5b:15:b2:7c:8a:df:30:2e:d2:a3:d2:d1:6a:73:51:46: 84:d7:fb:c9:c0:4b:65:8b:e7:4c:8b:57:8f:7c:fb:24:92:05: 49:36:ab:1d:fb:44:14:46:64:9d:55:ac:e4:1f:8e:a8:76:ea: d6:fd:ae:5f:b1:d1:6e:20:f1:af:9a:16:67:84:91:e4:89:ad: 63:5b:b4:35:73:11:fe:2b:64:3b:32:80:c0:be:79:63:c5:d8: d4:73:57:49:5e:96:8c:d3:ca:af:41:54:4c:71:d2:64:32:28: 94:0a:95:01:94:d7:1c:fd:65:27:46:1d:80:43:18:22:1b:6a: 2c:ae:2e:82:3a:94:de:2c:23:89:b9:14:6e:41:e7:af:d8:3b: 06:04:96:f1:53:c3:8c:83:3a:39:aa:93:b7:77:9a:2f:e5:50: 8e:95:33:f0:2b:ae:7c:99:a0:5e:5f:7b:25:de:0e:e8:3d:13: c3:26:e7:3f -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIDAJpbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDkyNzEwMDQzMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZmNjgzMmUtN2Y0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnl5rYWiqoTxxKU+UWsa3GzZdEJMl5b4TZfjePE53wyNQ3srmUCL7QUpvuv /QUBN84NbC24voZsQi10S0qsctjZFltHFUd51hxgGJYbW5GfOMUS3eOouaFV1Wlc FM5VvB4HCnDZFAgeJohyT6ixpGy2mEf8lqDkYZAKBryJ/Z0TlIl1VapKc6bVQh4l AvePWqgENvVMse4AfMzJX+5j8BnYGAC640k0tSUIAhOMFW0uy3KS2BgL60GuiK3I A6UeR8wx1vQqfKcu131JSJTgJoNy2i1QCHRjpaFFd47vXaqwFzobfemFKlNxlB5A LNEiOlEu592nqPpCCTewTzLiMtkCAwEAAaOCAsowggLGMB0GA1UdDgQWBBQB5IXU HFVuSSaIBPgs6GN0l20HHjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E4N0ZBQzZF NjlENTExRUY5QUExMkY1M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFQGCCsGAQUFBwEHAQH/ BEUwQzAyBAIAATAsAwQCZ0QcAwQAZ1J9AwQAZ1N/AwQBZ1OUAwQBZ6N8MAwDBABn 8wUDBABn8wYwDQQCAAIwBwMFACQBfcAwDQYJKoZIhvcNAQELBQADggEBAJTLpKgO v8AwCZGz/viYVuQ8NU9TAja/q7mkeJ/I32f3e4d8kH69pgTCuQ0kNXiNqI/6Iixb TxEbSggtF9nj+uwl8jQDnjIvTfb3WxWyfIrfMC7So9LRanNRRoTX+8nAS2WL50yL V498+ySSBUk2qx37RBRGZJ1VrOQfjqh26tb9rl+x0W4g8a+aFmeEkeSJrWNbtDVz Ef4rZDsygMC+eWPF2NRzV0lelozTyq9BVExx0mQyKJQKlQGU1xz9ZSdGHYBDGCIb aiyuLoI6lN4sI4m5FG5B56/YOwYElvFTw4yDOjmqk7d3mi/lUI6VM/ArrnyZoF5f eyXeDug9E8Mm5z8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:57 2024 by rpki-client on console-ams.rpki-client.org