$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa File: B75C7B8E688111EC89ED595FC4F9AE02.roa (raw, json) Hash identifier: 0z1aocZ/TXatNhmeAXgUvZ0nhpT6RRccGehbU2oaqBg= Subject key identifier: F9:E9:14:2B:B8:DB:9A:B9:C7:79:05:CB:F8:67:D6:54:12:01:50:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8ECB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa Signing time: Thu 30 May 2024 16:21:11 +0000 ROA not before: Thu 30 May 2024 16:21:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149187 IP address blocks: 103.175.174.0/23 maxlen: 24 103.177.12.0/23 maxlen: 24 103.178.114.0/24 maxlen: 24 103.178.115.0/24 maxlen: 24 103.179.194.0/23 maxlen: 24 2400:4620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36555 (0x8ecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:21:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a777-f6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:29:63:de:cb:ba:c2:c6:73:fc:ef:3f:ff: e0:70:2e:62:22:3b:11:f0:cd:b5:0d:8b:d8:1d:d8: 3d:d6:38:08:7d:dd:ac:75:89:11:ff:51:8d:32:d5: 73:ff:63:3b:89:f0:51:86:40:71:9a:58:25:77:1d: ee:aa:51:b6:06:58:b4:ce:a7:52:c6:6a:b4:b5:b0: a6:10:a6:34:bf:aa:fc:42:b4:21:78:91:6f:c9:59: c6:72:ed:c2:df:69:db:e9:fd:c7:a6:90:0b:e0:06: f2:42:71:7d:ad:31:f3:9b:81:bf:e4:00:36:ea:c3: 87:f1:3f:91:95:b1:49:3b:a1:a7:9a:10:0d:94:e9: 66:97:80:70:0d:43:1b:66:18:58:b8:28:e0:59:ce: c6:a8:b7:9d:8e:7f:c0:dd:4a:60:01:68:fa:c9:6b: 96:e1:b8:3d:8e:9d:2b:77:fc:c1:c8:de:9e:69:f9: d8:94:13:fd:22:ca:ee:bb:13:79:b6:52:fc:32:2e: df:4e:48:b9:e7:ad:d7:3e:b3:21:ae:db:1a:3e:3c: 1b:9f:83:97:f7:3e:8d:a4:38:26:28:70:03:88:16: 8a:13:5d:3f:e5:d3:20:a5:34:fd:73:30:49:40:05: 29:e4:ee:fc:85:19:22:89:ef:5b:91:c7:3f:0c:3a: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:14:2B:B8:DB:9A:B9:C7:79:05:CB:F8:67:D6:54:12:01:50:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.174.0/23 103.177.12.0/23 103.178.114.0/23 103.179.194.0/23 IPv6: 2400:4620::/32 Signature Algorithm: sha256WithRSAEncryption 4c:87:8d:fd:02:3c:50:37:97:c0:b6:25:e6:8a:a4:17:7f:e8: 7b:4e:14:5f:45:0a:65:2b:e5:7f:30:d4:3a:46:93:a1:7b:6b: bf:16:21:ed:51:00:3b:ed:d5:3d:ca:68:be:79:81:b0:b1:55: 40:bc:0a:f5:52:ae:a3:a0:8a:90:c3:ef:7a:bf:53:1e:af:03: c3:45:c8:89:6e:a7:0b:ba:5b:3c:d4:6c:e1:70:f3:b5:65:71: 14:5f:db:48:d8:0c:9d:ed:44:be:0a:41:28:f9:93:e7:cd:3c: c1:a1:9a:a4:f8:f5:77:6a:95:18:4a:ff:f8:d5:b6:e3:89:04: b4:14:e5:70:05:43:b3:7f:a1:7b:cf:6e:4f:4f:0d:2a:a9:2e: e6:a2:f4:d8:c5:e6:c4:b2:1a:f4:52:12:d6:ff:cf:7f:3e:ef: 9a:23:58:2b:58:ea:5a:3c:07:92:47:60:7b:dd:fc:dd:ec:32: 98:0e:4f:2d:7b:70:4f:f6:fa:bc:e4:79:9f:ba:59:99:20:b4: 2e:48:58:69:ea:d3:b1:72:81:f4:c7:2a:97:84:1c:73:f8:72: 22:f0:f8:96:46:77:3a:1c:b7:bc:ca:45:36:12:7f:06:cc:72: 61:f1:4c:09:bb:66:6c:f2:f8:de:50:a7:0c:26:e2:4d:35:36: 74:45:f7:62 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIDAI7LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjExMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3NzctZjZlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2/KWPey7rCxnP87z//4HAuYiI7EfDNtQ2L2B3YPdY4CH3drHWJEf9RjTLV c/9jO4nwUYZAcZpYJXcd7qpRtgZYtM6nUsZqtLWwphCmNL+q/EK0IXiRb8lZxnLt wt9p2+n9x6aQC+AG8kJxfa0x85uBv+QANurDh/E/kZWxSTuhp5oQDZTpZpeAcA1D G2YYWLgo4FnOxqi3nY5/wN1KYAFo+slrluG4PY6dK3f8wcjenmn52JQT/SLK7rsT ebZS/DIu305Iueet1z6zIa7bGj48G5+Dl/c+jaQ4JihwA4gWihNdP+XTIKU0/XMw SUAFKeTu/IUZIonvW5HHPww67GUCAwEAAaOCArYwggKyMB0GA1UdDgQWBBT56RQr uNuaucd5Bcv4Z9ZUEgFQMjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I3NUM3QjhF Njg4MTExRUM4OUVENTk1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQBZ6+uAwQBZ7EMAwQBZ7JyAwQBZ7PCMA0EAgACMAcDBQAk AEYgMA0GCSqGSIb3DQEBCwUAA4IBAQBMh439AjxQN5fAtiXmiqQXf+h7ThRfRQpl K+V/MNQ6RpOhe2u/FiHtUQA77dU9ymi+eYGwsVVAvAr1Uq6joIqQw+96v1MerwPD RciJbqcLuls81GzhcPO1ZXEUX9tI2Ayd7US+CkEo+ZPnzTzBoZqk+PV3apUYSv/4 1bbjiQS0FOVwBUOzf6F7z25PTw0qqS7movTYxebEshr0UhLW/89/Pu+aI1grWOpa PAeSR2B73fzd7DKYDk8te3BP9vq85HmfulmZILQuSFhp6tOxcoH0xyqXhBxz+HIi 8PiWRnc6HLe8ykU2En8GzHJh8UwJu2Zs8vjeUKcMJuJNNTZ0Rfdi -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:06 2024 by rpki-client on console-fra.rpki-client.org