$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa File: AD9046524AC711EDBA1A577FC4F9AE02.roa (raw, json) Hash identifier: /rgukhnfF9qEih/Cre7W+/Hc0jIA9tKd0DMmVsYnd7A= Subject key identifier: 1A:C2:49:73:25:E7:95:82:0A:71:25:E4:1F:90:A4:DB:6E:7C:E9:E0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DC6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa Signing time: Thu 30 May 2024 16:16:59 +0000 ROA not before: Thu 30 May 2024 16:16:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141840 IP address blocks: 103.168.85.0/24 maxlen: 24 2001:df1:5dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36294 (0x8dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:16:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a67a-7457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:84:13:a9:02:62:0c:a3:d8:bf:76:51:2f: 76:f7:74:bc:87:e9:50:3e:a5:e5:cd:07:f5:78:fe: 88:07:54:88:72:0f:46:e3:17:37:37:98:21:d4:cf: f5:51:8a:18:e9:f9:b6:86:bf:05:8c:ea:ea:f5:18: ed:2d:96:aa:16:d0:29:a6:c9:f1:57:25:13:16:5e: d1:2d:b1:00:57:c0:e2:07:d8:2f:f3:bf:c9:fd:df: 4e:0a:dd:83:cf:3b:8e:de:99:01:71:3c:5a:32:35: d5:b9:1c:3e:c2:95:40:22:b7:a6:dc:75:16:06:e7: 8b:a7:0b:cb:68:f1:40:0a:0b:84:47:2e:5c:74:3c: 49:d2:4c:40:63:37:7a:d4:2f:5f:41:fb:1a:24:27: 78:17:77:8a:87:2c:4f:2b:e1:7e:2f:e7:80:0b:ec: fd:8f:d1:34:ab:3f:46:80:c6:31:09:02:71:53:02: e2:30:39:0d:2c:19:c8:87:28:1e:8b:36:7a:f5:d0: c1:d6:e3:d2:a4:30:40:1e:02:f8:97:3e:68:d6:f6: 76:c1:cb:bf:ec:d8:8f:63:6c:28:06:e4:52:a2:3c: 92:13:9f:75:e0:3b:60:68:8c:ce:ca:dd:4a:f9:a6: 9f:88:28:4c:3d:51:31:97:16:ec:13:b8:81:d3:4b: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:49:73:25:E7:95:82:0A:71:25:E4:1F:90:A4:DB:6E:7C:E9:E0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD9046524AC711EDBA1A577FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.85.0/24 IPv6: 2001:df1:5dc0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:35:42:ef:d1:d6:10:58:2a:46:f3:4f:28:f1:05:ec:7d:b2: 63:dd:13:95:37:dd:65:36:f3:0c:c0:d4:f8:ce:76:70:ec:00: 37:2e:84:b3:42:f0:e9:07:aa:ab:d8:36:de:5c:03:ba:63:3d: 4d:d4:93:b6:91:02:66:d6:3d:e2:bd:99:b1:ea:6e:e4:6d:78: 89:51:0d:fc:f2:c5:81:35:d5:e2:33:db:94:41:07:61:d6:af: ff:9f:de:71:d6:3d:92:53:9e:db:c1:44:03:4b:ba:dd:40:60: 1c:b1:62:62:61:bf:25:5f:49:ec:bf:b0:2b:9c:25:0d:42:36: e2:f8:37:97:28:c6:95:da:bc:65:a2:c8:b5:cb:2e:96:69:2a: 23:4e:90:65:e5:ce:03:2a:8b:9b:d4:40:7c:a4:17:51:4d:56: b5:6d:c6:b7:76:4a:a5:69:28:d1:17:3d:90:46:4b:d1:d3:5a: 08:e5:52:66:e8:fa:e2:da:69:ca:bd:29:43:b5:99:e9:78:76: f2:3f:d2:44:2e:a0:1b:46:9a:04:97:32:c2:ab:8a:a5:51:c2: 11:aa:bb:fc:ef:33:ee:5e:7f:3a:4a:b7:73:ff:f0:34:bb:c7: 7b:9a:3a:36:b4:7c:83:27:25:bd:08:94:50:a4:31:06:07:fb: ec:ba:a1:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI3GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTY1OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2N2EtNzQ1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQOhBOpAmIMo9i/dlEvdvd0vIfpUD6l5c0H9Xj+iAdUiHIPRuMXNzeYIdTP 9VGKGOn5toa/BYzq6vUY7S2WqhbQKabJ8VclExZe0S2xAFfA4gfYL/O/yf3fTgrd g887jt6ZAXE8WjI11bkcPsKVQCK3ptx1Fgbni6cLy2jxQAoLhEcuXHQ8SdJMQGM3 etQvX0H7GiQneBd3iocsTyvhfi/ngAvs/Y/RNKs/RoDGMQkCcVMC4jA5DSwZyIco Hos2evXQwdbj0qQwQB4C+Jc+aNb2dsHLv+zYj2NsKAbkUqI8khOfdeA7YGiMzsrd Svmmn4goTD1RMZcW7BO4gdNLeyECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQawklz JeeVggpxJeQfkKTbbnzp4DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FEOTA0NjUy NEFDNzExRURCQTFBNTc3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ6hVMA8EAgACMAkDBwAgAQ3xXcAwDQYJKoZIhvcNAQEL BQADggEBAGw1Qu/R1hBYKkbzTyjxBex9smPdE5U33WU28wzA1PjOdnDsADcuhLNC 8OkHqqvYNt5cA7pjPU3Uk7aRAmbWPeK9mbHqbuRteIlRDfzyxYE11eIz25RBB2HW r/+f3nHWPZJTntvBRANLut1AYByxYmJhvyVfSey/sCucJQ1CNuL4N5coxpXavGWi yLXLLpZpKiNOkGXlzgMqi5vUQHykF1FNVrVtxrd2SqVpKNEXPZBGS9HTWgjlUmbo +uLaacq9KUO1mel4dvI/0kQuoBtGmgSXMsKriqVRwhGqu/zvM+5efzpKt3P/8DS7 x3uaOja0fIMnJb0IlFCkMQYH++y6oVI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:28 2025 by rpki-client