$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE0879277BE11EEBE6A971AC4F9AE02.roa File: BBE0879277BE11EEBE6A971AC4F9AE02.roa (raw, json) Hash identifier: jxctSpcDXQCt86mg2UCdqdCAsa7YF+9cSE9zVhKVbM4= Subject key identifier: A6:8C:06:9A:0A:82:9A:1E:76:F4:46:C7:51:0C:5F:C5:AF:9E:4E:66 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9D79 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE0879277BE11EEBE6A971AC4F9AE02.roa Signing time: Wed 20 Nov 2024 09:00:52 +0000 ROA not before: Wed 20 Nov 2024 09:00:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151690 IP address blocks: 43.228.166.0/23 maxlen: 24 103.109.220.0/22 maxlen: 24 103.147.93.0/24 maxlen: 24 103.172.56.0/24 maxlen: 24 103.185.100.0/24 maxlen: 24 103.239.12.0/23 maxlen: 24 2001:df3:29c0::/48 maxlen: 48 2001:df4:88c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40313 (0x9d79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 20 09:00:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673da544-4402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:58:68:5d:bf:bd:4b:7b:58:7f:b6:68:2a: e1:ee:df:c9:c0:27:96:7d:94:09:2a:aa:31:cf:fd: 8f:e2:3f:c9:cf:27:57:7e:6e:dd:bd:8f:6b:f0:00: 5b:f7:9b:f5:57:82:b5:c0:aa:64:38:f4:cc:11:de: bf:4d:fa:3f:00:6d:e6:cb:c2:a9:f1:74:0a:e5:43: c8:46:13:73:5b:e4:7d:2b:91:03:76:88:9c:85:c2: 97:83:9d:17:fa:f2:23:42:0b:ac:8b:eb:17:cc:c9: 6c:19:03:ad:9c:27:06:ae:3b:de:d3:5e:36:49:97: 4f:60:5f:66:7d:10:fd:5d:44:c1:3d:43:fa:07:e3: 20:db:94:6f:33:3e:a8:6d:30:5a:52:7a:7d:a9:fd: eb:35:22:bd:63:d3:92:d7:e5:9b:ab:37:06:fe:9e: ed:80:83:1e:23:da:e0:ef:45:1b:e3:76:ae:c9:e0: cd:0e:b8:ce:76:8d:32:e3:81:45:a6:26:79:b6:5a: ff:43:08:de:42:c6:72:56:6a:4a:04:60:28:ae:66: a7:c5:0f:65:25:15:69:22:93:df:9b:11:61:88:c7: 69:a8:75:a4:5e:fc:81:5f:a3:98:5a:06:4f:72:3b: 0c:87:5a:50:6d:80:d0:cd:d8:97:0a:70:5a:40:1c: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8C:06:9A:0A:82:9A:1E:76:F4:46:C7:51:0C:5F:C5:AF:9E:4E:66 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE0879277BE11EEBE6A971AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.166.0/23 103.109.220.0/22 103.147.93.0/24 103.172.56.0/24 103.185.100.0/24 103.239.12.0/23 IPv6: 2001:df3:29c0::/48 2001:df4:88c0::/48 Signature Algorithm: sha256WithRSAEncryption 84:64:ec:59:f0:ba:da:ae:f5:c2:7e:ad:26:05:a9:91:52:75: 38:88:78:8c:e2:54:0a:55:db:45:5d:3f:ab:48:fa:ec:ee:8a: d3:8f:6b:4f:4f:a0:fb:a5:2f:5f:58:c0:7d:f8:e2:73:aa:ad: 50:72:38:56:df:b9:97:e4:8c:b4:35:4a:9d:bd:f1:4c:dc:8a: 63:93:51:38:dc:2d:6b:ad:12:86:e3:97:80:80:0b:a3:51:0d: 74:c2:e1:b2:95:e8:a3:b1:5b:85:23:1c:f0:04:9b:a3:f6:ff: 08:b7:2f:04:cf:26:6c:82:84:ba:ab:ff:da:4d:4f:12:60:fb: 94:89:c9:b3:96:5b:d0:cf:b6:e6:33:fa:ec:ca:b3:af:e9:e2: eb:6e:18:f2:15:19:08:81:29:f7:e9:67:0e:61:b7:ee:44:ec: e2:5e:70:36:b1:df:cc:9d:65:2d:21:c1:41:29:b4:0b:24:1b: 05:a4:4b:fa:3c:88:53:ca:9d:55:e4:29:6a:47:e7:2b:35:cb: cc:7e:d9:bc:5d:93:fc:25:f2:75:af:b9:62:15:4c:a8:a9:46: cc:36:ef:95:38:7f:1b:d6:36:4f:aa:ec:ee:e8:e4:f5:77:50: 75:a3:3b:3f:0e:6a:14:86:fa:22:8d:27:9c:b5:70:d0:92:85: 5e:3f:86:59 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIDAJ15MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTEyMDA5MDA1MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjczZGE1NDQtNDQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlhWGhdv71Le1h/tmgq4e7fycAnln2UCSqqMc/9j+I/yc8nV35u3b2Pa/AA W/eb9VeCtcCqZDj0zBHev036PwBt5svCqfF0CuVDyEYTc1vkfSuRA3aInIXCl4Od F/ryI0ILrIvrF8zJbBkDrZwnBq473tNeNkmXT2BfZn0Q/V1EwT1D+gfjINuUbzM+ qG0wWlJ6fan96zUivWPTktflm6s3Bv6e7YCDHiPa4O9FG+N2rsngzQ64znaNMuOB RaYmebZa/0MI3kLGclZqSgRgKK5mp8UPZSUVaSKT35sRYYjHaah1pF78gV+jmFoG T3I7DIdaUG2A0M3YlwpwWkAcuPcCAwEAAaOCAs0wggLJMB0GA1UdDgQWBBSmjAaa CoKaHnb0RsdRDF/Fr55OZjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JCRTA4Nzky NzdCRTExRUVCRTZBOTcxQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFcGCCsGAQUFBwEHAQH/ BEgwRjAqBAIAATAkAwQBK+SmAwQCZ23cAwQAZ5NdAwQAZ6w4AwQAZ7lkAwQBZ+8M MBgEAgACMBIDBwAgAQ3zKcADBwAgAQ30iMAwDQYJKoZIhvcNAQELBQADggEBAIRk 7Fnwutqu9cJ+rSYFqZFSdTiIeIziVApV20VdP6tI+uzuitOPa09PoPulL19YwH34 4nOqrVByOFbfuZfkjLQ1Sp298UzcimOTUTjcLWutEobjl4CAC6NRDXTC4bKV6KOx W4UjHPAEm6P2/wi3LwTPJmyChLqr/9pNTxJg+5SJybOWW9DPtuYz+uzKs6/p4utu GPIVGQiBKffpZw5ht+5E7OJecDax38ydZS0hwUEptAskGwWkS/o8iFPKnVXkKWpH 5ys1y8x+2bxdk/wl8nWvuWIVTKipRsw275U4fxvWNk+q7O7o5PV3UHWjOz8OahSG +iKNJ5y1cNCShV4/hlk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:50 2024 by rpki-client on console-fra.rpki-client.org