$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa File: B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa (raw, json) Hash identifier: mebOXnUy3hugtElwCL6aNhS9pBD2rO43sGpr6ILP5bY= Subject key identifier: 9B:47:8D:25:FE:C4:02:A5:40:B2:7A:23:E4:B6:6A:2A:77:07:33:3D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8C49 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa Signing time: Thu 30 May 2024 16:10:40 +0000 ROA not before: Thu 30 May 2024 16:10:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138760 IP address blocks: 103.139.66.0/23 maxlen: 24 103.164.26.0/24 maxlen: 24 103.164.27.0/24 maxlen: 24 2001:df1:a780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35913 (0x8c49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:10:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a500-17bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:84:17:21:46:fd:c3:d6:b0:02:e0:90:dd: 99:a3:2b:27:15:17:d8:ba:1e:69:69:70:18:9e:9d: b8:5b:22:02:ef:da:fc:04:53:0f:79:a6:0a:16:25: 14:a9:cd:4d:af:0b:06:8b:57:ed:f2:1b:d8:30:72: 76:73:fc:45:0c:a4:ee:40:90:84:e7:00:43:5a:b3: 84:aa:e3:d6:a4:8b:08:a1:e4:3c:c4:67:cc:56:34: 86:79:89:93:22:93:1f:cb:90:1f:a1:20:aa:9c:88: e6:e7:7b:14:84:1d:a9:47:b0:a4:36:40:dc:a5:81: 94:e2:5e:ed:13:d7:d4:e6:4a:8d:71:71:03:99:07: 20:47:a4:ea:02:b5:f8:4d:72:b8:ad:04:6c:0a:6c: 25:b0:f2:38:60:0a:93:78:60:45:3c:25:42:95:31: bd:19:b1:c6:ca:79:c6:8c:b2:24:cb:d1:fc:d5:2e: b0:20:6d:91:cf:62:0c:5b:ae:1e:fc:99:a5:8a:ac: 86:f3:9e:8b:dc:73:84:fe:4c:71:f3:57:82:55:61: 35:05:54:8e:b9:f5:9e:eb:9f:7b:cf:26:23:fb:d2: af:9d:40:c3:f3:3d:94:69:0a:c0:91:db:00:d8:a4: 9c:f1:b2:c8:50:9f:35:ae:4f:5e:35:99:3c:bb:6a: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:47:8D:25:FE:C4:02:A5:40:B2:7A:23:E4:B6:6A:2A:77:07:33:3D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.66.0/23 103.164.26.0/23 IPv6: 2001:df1:a780::/48 Signature Algorithm: sha256WithRSAEncryption b3:db:9a:a4:ca:3d:05:41:0e:e6:be:5a:9e:40:c3:1b:0d:d1: 15:da:8d:5b:e9:5b:51:5b:3d:8d:51:c1:f2:1b:98:76:b1:c8: 5e:73:c1:86:d5:60:b8:e0:f1:4f:4e:c6:8a:e2:26:24:68:4b: 06:bb:72:9a:78:31:fa:b0:5a:1f:0c:84:0c:5d:a5:9f:77:ad: 0a:7f:90:18:92:54:67:e3:de:42:75:7a:0f:81:77:99:d8:e5: 62:8d:ac:76:f9:20:a1:b2:12:1d:1d:8d:8e:f8:da:4b:07:f4: be:ca:36:d9:43:04:d7:a5:40:e8:09:b6:7f:4c:3e:37:a9:77: ec:7a:6c:75:de:35:dc:67:0c:ba:6e:d6:0b:b3:fb:30:c8:60: ac:75:1c:95:01:cc:d6:c8:ee:32:df:89:7b:bf:4f:70:e1:d6: 32:3d:0d:1d:2f:08:bd:b9:31:29:87:83:46:9d:93:40:db:7f: fd:66:68:63:3b:58:bf:97:d0:aa:ae:d9:ab:9e:28:80:1c:22: a7:eb:af:ca:e6:32:e7:30:9c:1f:b5:63:35:af:6f:56:73:c6: 4a:b3:cd:11:4c:a6:7e:18:01:b3:12:b0:8d:17:7a:89:92:27: 0c:e3:00:d4:7d:d5:f9:e2:31:93:23:67:51:f6:56:dd:49:65: 75:08:26:f8 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIxJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTA0MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE1MDAtMTdiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjhhBchRv3D1rAC4JDdmaMrJxUX2LoeaWlwGJ6duFsiAu/a/ARTD3mmChYl FKnNTa8LBotX7fIb2DBydnP8RQyk7kCQhOcAQ1qzhKrj1qSLCKHkPMRnzFY0hnmJ kyKTH8uQH6EgqpyI5ud7FIQdqUewpDZA3KWBlOJe7RPX1OZKjXFxA5kHIEek6gK1 +E1yuK0EbApsJbDyOGAKk3hgRTwlQpUxvRmxxsp5xoyyJMvR/NUusCBtkc9iDFuu HvyZpYqshvOei9xzhP5McfNXglVhNQVUjrn1nuufe88mI/vSr51Aw/M9lGkKwJHb ANiknPGyyFCfNa5PXjWZPLtqnt8CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSbR40l /sQCpUCyeiPktmoqdwczPTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxQzhEOEY4 MTczOTExRUVCQ0EyREQzRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZ4tCAwQBZ6QaMA8EAgACMAkDBwAgAQ3xp4AwDQYJKoZI hvcNAQELBQADggEBALPbmqTKPQVBDua+Wp5AwxsN0RXajVvpW1FbPY1RwfIbmHax yF5zwYbVYLjg8U9OxoriJiRoSwa7cpp4MfqwWh8MhAxdpZ93rQp/kBiSVGfj3kJ1 eg+Bd5nY5WKNrHb5IKGyEh0djY742ksH9L7KNtlDBNelQOgJtn9MPjepd+x6bHXe NdxnDLpu1guz+zDIYKx1HJUBzNbI7jLfiXu/T3Dh1jI9DR0vCL25MSmHg0adk0Db f/1maGM7WL+X0Kqu2aueKIAcIqfrr8rmMucwnB+1YzWvb1ZzxkqzzRFMpn4YAbMS sI0XeomSJwzjANR91fniMZMjZ1H2Vt1JZXUIJvg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:49 2024 by rpki-client on console-fra.rpki-client.org