$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3FC6DCA97CC11EDB7D5B312C4F9AE02.roa File: B3FC6DCA97CC11EDB7D5B312C4F9AE02.roa (raw, json) Hash identifier: +JehDkYi6FshM2eNd1h5BR6/QsgND03skV3JUqT7QPY= Subject key identifier: 9B:C2:C8:43:75:D2:E6:D6:A7:15:CA:09:47:8E:03:7B:22:9C:82:E5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8ED8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3FC6DCA97CC11EDB7D5B312C4F9AE02.roa Signing time: Thu 30 May 2024 16:21:22 +0000 ROA not before: Thu 30 May 2024 16:21:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149211 IP address blocks: 103.178.128.0/24 maxlen: 24 103.178.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36568 (0x8ed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:21:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a782-f67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:55:aa:15:b5:bf:5a:79:0f:01:7d:11:32: 1e:8b:e5:53:60:9a:27:32:19:0c:a0:2e:99:67:a7: 84:7f:59:60:fb:fd:53:3f:e5:ec:78:e0:42:92:5f: 43:60:05:b7:e9:34:73:70:38:fa:9b:87:15:ad:9e: 0d:7f:53:07:3b:e5:c1:04:3a:2c:d7:4f:03:2d:a0: 3c:e1:26:1b:26:07:28:cf:d0:9b:ba:a0:19:1d:f4: 95:38:30:b8:bb:76:d8:88:af:e2:67:56:19:91:19: c5:1b:c5:82:fc:11:8d:72:ff:46:1f:f0:28:a3:9e: c7:89:7a:18:bc:f4:08:d3:7a:34:a6:f8:79:b3:67: 2a:03:68:95:98:06:be:80:9f:4f:40:b4:5d:44:fc: 22:e1:24:8a:6e:3f:a5:32:f9:b2:b3:23:cc:52:d5: 1b:fb:aa:fe:27:6f:eb:c5:4c:d1:73:3f:23:31:46: 4e:b1:e3:91:fe:53:09:63:b5:d0:52:84:96:7b:06: 1b:25:b2:45:e7:45:c0:a0:64:4d:6a:7c:65:f0:a9: f2:52:92:59:45:29:49:d9:11:29:fc:3c:30:9c:f5: e9:86:64:fb:ca:0e:90:be:08:b7:ec:d9:cf:55:12: 16:87:8b:53:21:6c:c3:a5:f2:0f:f7:2a:ec:a5:8f: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:C8:43:75:D2:E6:D6:A7:15:CA:09:47:8E:03:7B:22:9C:82:E5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B3FC6DCA97CC11EDB7D5B312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.128.0/23 Signature Algorithm: sha256WithRSAEncryption 90:5b:ba:14:81:da:19:32:2d:58:d2:c6:bf:45:3d:a1:33:4d: 78:84:ca:a5:3a:3f:3d:1a:de:0e:69:3f:f1:40:b0:8d:c3:db: 84:95:e4:64:64:5c:42:26:be:0f:95:b4:43:bd:99:74:16:57: a6:e2:b6:b1:f5:62:c1:84:d5:be:9f:0f:cb:a0:d8:34:f8:fa: 7f:d6:89:0b:03:f8:8e:50:5f:f5:31:66:e2:0b:6f:7b:33:b8: 48:fb:00:63:02:f7:16:e3:d9:1b:9f:8c:e4:0b:75:56:04:95: 5e:c4:20:0b:88:fb:bc:d3:ac:c5:16:da:bc:d0:df:85:98:28: a1:6f:92:2c:86:30:85:98:ac:68:b5:2b:4c:28:41:98:fb:18: 0f:e4:30:7a:c1:bf:e5:f5:36:3c:96:70:dd:4e:47:f6:9a:88: 7b:14:31:07:0e:a3:c7:7c:fe:f2:d8:00:b1:b2:0a:43:0e:2c: 9e:1c:db:5b:b1:11:02:cc:1a:4a:fb:5d:e5:75:b0:44:00:ec: ec:f5:f5:ce:06:b3:00:2a:99:48:42:92:88:52:cb:65:cf:91: 5a:8d:a5:09:ed:84:4b:82:a4:9a:bb:0a:f0:0a:d0:fb:a0:4f: 51:b4:e5:1d:32:30:7b:76:30:f5:aa:e1:b5:a1:27:13:97:44: f3:72:ed:7c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI7YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjEyMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3ODItZjY3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALO/VaoVtb9aeQ8BfREyHovlU2CaJzIZDKAumWenhH9ZYPv9Uz/l7HjgQpJf Q2AFt+k0c3A4+puHFa2eDX9TBzvlwQQ6LNdPAy2gPOEmGyYHKM/Qm7qgGR30lTgw uLt22Iiv4mdWGZEZxRvFgvwRjXL/Rh/wKKOex4l6GLz0CNN6NKb4ebNnKgNolZgG voCfT0C0XUT8IuEkim4/pTL5srMjzFLVG/uq/idv68VM0XM/IzFGTrHjkf5TCWO1 0FKElnsGGyWyRedFwKBkTWp8ZfCp8lKSWUUpSdkRKfw8MJz16YZk+8oOkL4It+zZ z1USFoeLUyFsw6XyD/cq7KWPaxMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSbwshD ddLm1qcVyglHjgN7IpyC5TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IzRkM2RENB OTdDQzExRURCN0Q1QjMxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ7KAMA0GCSqGSIb3DQEBCwUAA4IBAQCQW7oUgdoZMi1Y 0sa/RT2hM014hMqlOj89Gt4OaT/xQLCNw9uEleRkZFxCJr4PlbRDvZl0Flem4rax 9WLBhNW+nw/LoNg0+Pp/1okLA/iOUF/1MWbiC297M7hI+wBjAvcW49kbn4zkC3VW BJVexCALiPu806zFFtq80N+FmCihb5IshjCFmKxotStMKEGY+xgP5DB6wb/l9TY8 lnDdTkf2moh7FDEHDqPHfP7y2ACxsgpDDiyeHNtbsRECzBpK+13ldbBEAOzs9fXO BrMAKplIQpKIUstlz5FajaUJ7YRLgqSauwrwCtD7oE9RtOUdMjB7djD1quG1oScT l0Tzcu18 -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:54 2025 by rpki-client