$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B896959CD09E11EA8D1F3A63C4F9AE02.roa File: B896959CD09E11EA8D1F3A63C4F9AE02.roa (raw, json) Hash identifier: RqmfPXGx0RbnXzNPgtFU58tJBx1ZXVYtkGMqxzj0yEE= Subject key identifier: 75:CD:18:E2:EF:6D:92:B7:DD:8F:4B:B6:71:02:C0:31:11:FB:C0:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89D8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B896959CD09E11EA8D1F3A63C4F9AE02.roa Signing time: Thu 30 May 2024 16:00:32 +0000 ROA not before: Thu 30 May 2024 16:00:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134886 IP address blocks: 103.121.72.0/22 maxlen: 24 103.142.199.0/24 maxlen: 24 103.156.236.0/23 maxlen: 24 103.179.123.0/24 maxlen: 24 103.181.208.0/24 maxlen: 24 103.190.96.0/23 maxlen: 24 2406:47c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35288 (0x89d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:00:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a2a0-8588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:1f:3c:c4:43:9d:90:8b:2d:81:73:ce:94: a8:48:b9:f9:b9:2d:36:f2:75:fd:8a:d7:ad:62:a0: fe:d2:c2:9e:3c:ce:1a:8a:3d:0b:f7:87:cf:45:21: ba:e7:f0:32:98:5d:e8:e1:83:91:ed:79:8c:3d:62: 8c:54:aa:22:9a:5c:2f:98:80:ea:a9:8e:3c:90:1c: 15:35:c7:8c:20:43:d2:5e:d6:99:4a:fc:60:19:81: 53:64:71:19:62:0a:88:09:31:18:0e:2c:3a:ab:d0: e8:2e:12:c4:4e:2d:7b:fe:1c:76:cb:2a:f6:39:4c: 08:ea:7b:e9:a4:f1:0d:dc:0e:06:4f:95:63:17:80: b3:88:37:7b:d6:d5:d5:25:df:09:4d:68:c0:51:60: f9:8c:ce:3c:1c:a3:08:b0:d5:86:93:1a:c6:ff:ce: 28:e5:14:59:c1:7d:69:c7:72:4f:ea:f2:3e:92:69: 5e:d2:2e:fe:d8:7d:78:42:c7:76:49:68:c9:e5:02: de:2d:f6:0e:b8:7f:ac:9b:0e:a5:1d:8c:cd:dd:a1: e6:da:e9:13:84:da:08:d7:e9:38:2d:65:16:fb:f8: f1:09:43:48:42:e2:60:fb:e3:50:aa:8b:8d:a0:38: 4f:8b:a9:22:1f:35:40:4a:e7:e9:16:1c:76:18:f9: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CD:18:E2:EF:6D:92:B7:DD:8F:4B:B6:71:02:C0:31:11:FB:C0:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B896959CD09E11EA8D1F3A63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.72.0/22 103.142.199.0/24 103.156.236.0/23 103.179.123.0/24 103.181.208.0/24 103.190.96.0/23 IPv6: 2406:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 4b:f5:f7:19:60:b4:f6:82:a0:d6:10:51:5e:56:85:cf:c6:65: 5e:d1:1a:0e:ba:23:6f:55:9f:a9:8a:58:79:ef:1d:47:c8:a5: ca:cd:f8:fe:94:03:c5:81:50:f8:49:ca:59:1f:8e:d7:34:eb: ee:6b:c9:5e:a7:e7:05:72:0d:f8:ab:08:d1:5f:8d:e3:bf:6b: 1d:8b:3f:12:4d:9f:01:58:5c:35:ce:32:32:d9:9c:c2:7f:38: ec:01:74:8b:b4:31:dd:9a:53:73:34:28:f4:f3:64:41:0d:41: 2f:23:a5:37:59:b2:85:3a:96:f9:83:01:a8:52:96:8c:6b:99: 7d:af:b4:b7:7b:77:eb:1e:c2:ed:23:da:d3:53:82:76:45:9f: b0:73:fd:c9:4e:88:db:7f:d2:9f:b0:69:e1:4c:5c:bc:45:10: 71:ad:02:41:14:96:fb:4b:d6:71:4f:b1:18:cb:4d:6b:72:ab: 7d:fe:b4:04:d6:19:24:fc:a5:8b:72:af:18:ae:68:04:53:2d: bf:8c:3f:c5:80:4a:5f:73:f1:90:92:70:0a:91:c5:9d:50:ec: 6a:72:3c:24:4a:78:45:ae:93:22:aa:e6:10:4f:44:6a:b0:bf: 01:f1:af:d8:83:ac:0e:6f:36:22:e4:ad:5d:87:13:28:07:80: c8:36:e8:33 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIDAInYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAzMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyYTAtODU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJofHzzEQ52Qiy2Bc86UqEi5+bktNvJ1/YrXrWKg/tLCnjzOGoo9C/eHz0Uh uufwMphd6OGDke15jD1ijFSqIppcL5iA6qmOPJAcFTXHjCBD0l7WmUr8YBmBU2Rx GWIKiAkxGA4sOqvQ6C4SxE4te/4cdssq9jlMCOp76aTxDdwOBk+VYxeAs4g3e9bV 1SXfCU1owFFg+YzOPByjCLDVhpMaxv/OKOUUWcF9acdyT+ryPpJpXtIu/th9eELH dkloyeUC3i32Drh/rJsOpR2Mzd2h5trpE4TaCNfpOC1lFvv48QlDSELiYPvjUKqL jaA4T4upIh81QErn6RYcdhj5CrECAwEAAaOCAsIwggK+MB0GA1UdDgQWBBR1zRji 722St92PS7ZxAsAxEfvAyTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I4OTY5NTlD RDA5RTExRUE4RDFGM0E2M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCZ3lIAwQAZ47HAwQBZ5zsAwQAZ7N7AwQAZ7XQAwQBZ75g MA0EAgACMAcDBQAkBkfAMA0GCSqGSIb3DQEBCwUAA4IBAQBL9fcZYLT2gqDWEFFe VoXPxmVe0RoOuiNvVZ+pilh57x1HyKXKzfj+lAPFgVD4ScpZH47XNOvua8lep+cF cg34qwjRX43jv2sdiz8STZ8BWFw1zjIy2ZzCfzjsAXSLtDHdmlNzNCj082RBDUEv I6U3WbKFOpb5gwGoUpaMa5l9r7S3e3frHsLtI9rTU4J2RZ+wc/3JTojbf9KfsGnh TFy8RRBxrQJBFJb7S9ZxT7EYy01rcqt9/rQE1hkk/KWLcq8YrmgEUy2/jD/FgEpf c/GQknAKkcWdUOxqcjwkSnhFrpMiquYQT0RqsL8B8a/Yg6wObzYi5K1dhxMoB4DI Nugz -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:54 2025 by rpki-client