$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA9D339E694D11ECB6F9B541C4F9AE02.roa File: AA9D339E694D11ECB6F9B541C4F9AE02.roa (raw, json) Hash identifier: K3D/zP60K0kLSo65Gou+zi/qXH360+454X13J73eatw= Subject key identifier: BE:21:6F:73:1F:FA:6B:9A:D7:21:81:85:70:C0:20:AE:25:29:7C:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BCD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA9D339E694D11ECB6F9B541C4F9AE02.roa Signing time: Thu 30 May 2024 16:08:43 +0000 ROA not before: Thu 30 May 2024 16:08:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137649 IP address blocks: 103.120.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35789 (0x8bcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:08:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a48a-cfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:26:2f:0e:47:ef:4e:15:c0:c4:d6:79:2e: 29:85:1e:3e:61:65:53:14:27:f2:4d:68:98:a8:73: 81:63:2b:e2:1e:69:aa:9f:88:8c:8b:c7:bf:04:41: f4:df:c2:f4:51:d4:59:de:9a:88:89:f1:6d:38:2b: c6:b9:d5:ca:7e:21:e9:5b:1b:1a:b4:f2:15:6c:94: bd:9c:02:4b:27:e1:e5:e1:64:64:2e:3a:aa:aa:51: c7:50:a0:1f:fa:67:5c:d6:7c:5d:c9:94:eb:b6:4c: 39:66:d4:6d:d7:56:30:c8:1e:a8:7e:a6:95:4d:31: 86:53:44:23:a0:c6:05:e3:07:4c:db:36:07:ed:27: 0d:c5:9a:b0:3b:dd:5b:89:92:b8:9b:05:66:8e:12: 19:b8:68:b4:a3:33:f9:f2:4e:68:1c:64:1b:a4:0b: af:97:89:70:20:04:d8:c6:d2:39:7c:e1:5d:64:71: 5e:3c:bb:ab:3c:db:34:de:29:dd:26:31:ac:df:01: d3:92:87:0b:7c:25:18:44:3f:4c:24:9e:38:7e:99: 01:f9:c0:b4:89:f1:28:f9:c0:ee:fe:4e:47:42:51: d8:e5:e5:3b:d2:8e:dc:fa:9e:a0:0a:56:23:20:70: 7d:4e:e9:2a:15:69:08:9b:7f:46:be:54:f4:ce:27: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:21:6F:73:1F:FA:6B:9A:D7:21:81:85:70:C0:20:AE:25:29:7C:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA9D339E694D11ECB6F9B541C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.0.0/22 Signature Algorithm: sha256WithRSAEncryption 73:f6:5a:78:2d:44:fc:f0:8d:0d:13:e6:da:89:21:2f:34:bb: 51:29:96:7c:ec:7c:4f:b1:69:b4:22:3f:ff:2d:7d:08:fc:17: 26:51:ea:5c:ee:df:32:3f:ea:2a:99:f5:10:51:11:cf:95:87: f7:a2:54:83:d9:ca:b7:95:92:8c:ce:bf:3d:ae:e2:9f:9b:1c: a5:0c:41:d5:4a:00:9e:c2:c8:82:6a:f4:3e:c4:c9:6b:c9:6f: 9d:88:e6:44:c0:04:cd:7a:1b:00:56:69:55:28:71:e0:f9:63: cb:33:ef:e0:10:13:89:e9:b0:92:c9:10:41:6f:78:45:6b:da: e5:06:14:62:d9:b6:01:57:a9:3f:b1:e9:36:a2:b7:95:4c:62: 55:03:f0:4a:3c:19:dc:34:c0:a8:16:e1:9f:62:52:0e:cf:7c: be:8f:42:dc:69:5a:c3:89:22:6a:bb:8d:45:32:12:27:12:ca: aa:36:de:b3:b3:1e:f4:66:32:9a:92:52:73:1e:f8:90:7d:24: bb:d9:c1:1a:60:08:8f:08:6f:4c:43:2e:dd:97:9b:ac:51:75: af:a1:36:a0:1e:38:35:c1:e4:7d:67:39:30:14:fb:db:d7:3f: f7:cd:ee:91:9e:e9:d6:87:28:5e:a2:5c:a4:c5:c6:af:0c:9c: bc:86:ee:b3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIvNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDg0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0OGEtY2ZiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/eJi8OR+9OFcDE1nkuKYUePmFlUxQn8k1omKhzgWMr4h5pqp+IjIvHvwRB 9N/C9FHUWd6aiInxbTgrxrnVyn4h6VsbGrTyFWyUvZwCSyfh5eFkZC46qqpRx1Cg H/pnXNZ8XcmU67ZMOWbUbddWMMgeqH6mlU0xhlNEI6DGBeMHTNs2B+0nDcWasDvd W4mSuJsFZo4SGbhotKMz+fJOaBxkG6QLr5eJcCAE2MbSOXzhXWRxXjy7qzzbNN4p 3SYxrN8B05KHC3wlGEQ/TCSeOH6ZAfnAtInxKPnA7v5OR0JR2OXlO9KO3PqeoApW IyBwfU7pKhVpCJt/Rr5U9M4n3GsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBS+IW9z H/prmtchgYVwwCCuJSl83DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBOUQzMzlF Njk0RDExRUNCNkY5QjU0MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ3gAMA0GCSqGSIb3DQEBCwUAA4IBAQBz9lp4LUT88I0N E+baiSEvNLtRKZZ87HxPsWm0Ij//LX0I/BcmUepc7t8yP+oqmfUQURHPlYf3olSD 2cq3lZKMzr89ruKfmxylDEHVSgCewsiCavQ+xMlryW+diOZEwATNehsAVmlVKHHg +WPLM+/gEBOJ6bCSyRBBb3hFa9rlBhRi2bYBV6k/sek2oreVTGJVA/BKPBncNMCo FuGfYlIOz3y+j0LcaVrDiSJqu41FMhInEsqqNt6zsx70ZjKaklJzHviQfSS72cEa YAiPCG9MQy7dl5usUXWvoTagHjg1weR9ZzkwFPvb1z/3ze6RnunWhyheolykxcav DJy8hu6z -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:11 2024 by rpki-client on console-fra.rpki-client.org