$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B15E7DFCB80F11ED9E4CC631C4F9AE02.roa File: B15E7DFCB80F11ED9E4CC631C4F9AE02.roa (raw, json) Hash identifier: 2wd+FViqqPHSe07epWu970crj9CzCMBLIwXDH70vJmQ= Subject key identifier: 98:3B:5D:0E:F4:30:0A:C9:F2:82:66:92:F0:66:99:36:20:8D:56:38 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8FEB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B15E7DFCB80F11ED9E4CC631C4F9AE02.roa Signing time: Thu 30 May 2024 16:25:48 +0000 ROA not before: Thu 30 May 2024 16:25:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150640 IP address blocks: 103.206.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36843 (0x8feb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:25:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a88c-bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:03:64:e6:31:75:3f:8c:bd:18:85:55:79: 71:17:9e:c0:3b:94:9e:7f:ac:cc:62:92:91:c4:b6: ac:58:0c:e5:79:0d:ed:b6:25:b2:1a:e2:4e:71:cf: 9f:6c:8c:32:79:50:3e:22:47:9a:14:fb:4d:39:a3: 3d:0b:5d:7c:19:a2:96:c7:c1:b0:64:20:91:d0:19: 30:fd:0c:cf:73:43:cb:19:3a:83:d5:47:77:86:f6: 89:9e:e4:9b:4f:f1:2d:c8:70:4e:e6:5b:51:fb:b0: 24:81:9e:01:f4:eb:07:35:fd:7c:3c:b4:bb:cf:c2: 7d:1e:3b:ff:58:57:6a:4d:e6:86:65:69:ad:d4:2a: 42:9e:95:f7:bf:eb:21:ca:20:a0:e0:c2:ff:4e:3e: 98:58:94:8f:ad:30:8a:5d:17:cb:9c:36:d7:4a:20: 55:58:1d:0c:c4:a2:6c:59:88:4f:7e:29:e2:7b:3b: a2:1b:c7:a3:80:3b:24:21:4b:85:88:a2:70:f5:6b: 5f:b1:cd:63:f9:f7:88:35:53:6d:10:15:53:8d:f8: 31:8c:5e:61:d7:b3:1e:f3:17:97:86:f0:4a:e4:54: 23:e7:2c:fd:73:ca:3d:32:31:65:bb:e1:ba:11:3e: 0e:11:cd:ac:58:4b:82:1f:e3:a8:32:1e:df:a2:ec: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:5D:0E:F4:30:0A:C9:F2:82:66:92:F0:66:99:36:20:8D:56:38 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B15E7DFCB80F11ED9E4CC631C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.29.0/24 Signature Algorithm: sha256WithRSAEncryption 99:c4:bb:fc:3d:f1:73:a9:6f:b6:3b:51:6c:84:9e:f2:a6:8b: 7b:df:42:59:31:2f:37:ea:21:92:0d:f9:7a:1b:51:6e:5c:cb: 09:84:f3:6c:5a:82:a0:1d:da:19:ef:50:38:f6:18:09:56:2f: ae:10:84:cd:6e:81:9e:81:a3:f8:40:a3:44:b0:71:6d:25:7c: 1a:3a:1a:39:23:e0:03:0e:65:21:4d:40:08:82:01:d7:a2:5e: 3d:07:7a:01:25:68:cb:f3:8d:23:80:39:a8:ba:2b:aa:3b:53: 5a:40:8e:f5:40:58:77:be:cb:c3:e1:10:ce:4b:db:d7:1b:81: 43:ff:69:ee:80:2f:13:0e:1c:63:8a:0f:07:fa:72:6a:62:be: 6e:d2:04:cf:01:c0:23:9e:8e:67:8e:7a:01:a1:95:3e:fc:f2: 0d:24:70:e8:26:bb:2a:1e:35:3d:db:cd:74:33:d5:2d:90:91: 3b:b3:c4:5f:d6:f7:4f:9b:5d:b5:3f:e1:4b:b5:bd:9e:6c:af: 67:f1:1e:cc:f6:19:e9:df:a1:79:37:72:99:38:46:9a:86:da: 80:ce:cf:12:5b:67:68:c1:76:61:b2:cb:ee:39:ed:2d:d8:49: 4e:a7:e9:74:1b:61:20:5e:79:2a:19:13:09:72:69:7a:77:2c: bd:86:5d:cc -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI/rMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjU0OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4OGMtYmRhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVFA2TmMXU/jL0YhVV5cReewDuUnn+szGKSkcS2rFgM5XkN7bYlshriTnHP n2yMMnlQPiJHmhT7TTmjPQtdfBmilsfBsGQgkdAZMP0Mz3NDyxk6g9VHd4b2iZ7k m0/xLchwTuZbUfuwJIGeAfTrBzX9fDy0u8/CfR47/1hXak3mhmVprdQqQp6V97/r IcogoODC/04+mFiUj60wil0Xy5w210ogVVgdDMSibFmIT34p4ns7ohvHo4A7JCFL hYiicPVrX7HNY/n3iDVTbRAVU434MYxeYdezHvMXl4bwSuRUI+cs/XPKPTIxZbvh uhE+DhHNrFhLgh/jqDIe36LsAQ0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSYO10O 9DAKyfKCZpLwZpk2II1WODAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxNUU3REZD QjgwRjExRUQ5RTRDQzYzMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ84dMA0GCSqGSIb3DQEBCwUAA4IBAQCZxLv8PfFzqW+2 O1FshJ7ypot730JZMS836iGSDfl6G1FuXMsJhPNsWoKgHdoZ71A49hgJVi+uEITN boGegaP4QKNEsHFtJXwaOho5I+ADDmUhTUAIggHXol49B3oBJWjL840jgDmouiuq O1NaQI71QFh3vsvD4RDOS9vXG4FD/2nugC8TDhxjig8H+nJqYr5u0gTPAcAjno5n jnoBoZU+/PINJHDoJrsqHjU92810M9UtkJE7s8Rf1vdPm121P+FLtb2ebK9n8R7M 9hnp36F5N3KZOEaahtqAzs8SW2dowXZhssvuOe0t2ElOp+l0G2EgXnkqGRMJcml6 dyy9hl3M -----END CERTIFICATE-----Generated at Sun Feb 16 20:19:35 2025 by rpki-client