$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa File: C06DA67038B211EC961D5863C4F9AE02.roa (raw, json) Hash identifier: Sd9o/DonLQ4ENhGA+z5FjpfjHEfHro+kjWu2wt3uMtM= Subject key identifier: A7:93:F0:56:75:D5:02:93:72:60:7D:33:04:D2:EF:C0:DA:9D:CC:4E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 897B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa Signing time: Thu 30 May 2024 15:59:00 +0000 ROA not before: Thu 30 May 2024 15:59:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134258 IP address blocks: 103.197.220.0/23 maxlen: 24 103.197.222.0/23 maxlen: 24 157.119.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35195 (0x897b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:59:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a244-9684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:60:4f:ba:b8:23:cd:40:a0:b2:e9:8b:ae: 49:25:f3:5a:c9:88:7b:27:78:c0:fd:9e:08:04:cc: 70:34:f0:0e:d0:17:5b:60:c7:90:ed:89:78:2d:28: 6e:d1:f1:80:ff:cf:91:8e:02:e7:bc:dd:92:3f:2d: a9:87:86:f1:52:80:3e:1e:dd:1a:25:9c:d2:f8:a9: 23:10:6c:ca:33:24:43:ab:96:3a:ce:0a:6f:4c:ca: 14:fc:50:58:68:f0:02:61:81:9c:0f:76:a4:9a:1f: aa:8b:4c:ac:46:94:95:bb:35:b7:6d:71:c8:ef:93: c6:e2:69:fe:81:d0:e6:08:8c:1f:3a:35:7c:8c:bd: 58:ba:e4:e5:fa:ea:de:9a:21:77:1d:e8:fc:a0:8b: 80:79:94:ea:64:da:17:c9:3f:0f:30:e4:43:09:c8: fa:cf:00:ad:62:1d:9e:4e:74:2b:d3:62:9c:f7:83: 46:b1:f0:0a:0d:f8:5e:36:c4:ae:8e:db:13:e9:6d: 61:b6:f8:a3:05:7f:6f:7c:9f:49:3a:ad:ce:41:f2: 3e:0a:cc:c7:59:b1:ba:4e:5f:7e:f4:bd:0c:03:bd: 72:4d:51:d1:07:75:a2:a9:af:06:c5:28:dd:de:70: 17:9a:93:53:47:81:fb:47:a6:21:9b:2a:61:68:c7: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:F0:56:75:D5:02:93:72:60:7D:33:04:D2:EF:C0:DA:9D:CC:4E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.220.0/22 157.119.168.0/22 Signature Algorithm: sha256WithRSAEncryption b4:a8:45:b9:0a:35:40:c3:80:32:bb:2c:4c:99:5f:9f:15:57: 91:93:7c:eb:10:97:40:bd:46:78:fa:d7:0f:cc:72:05:98:92: 9f:aa:b4:fb:13:21:c4:e0:ce:ff:ae:39:cf:cb:99:85:86:07: a2:3f:0a:15:d5:5e:16:49:11:9c:f7:15:33:61:db:e0:8b:42: af:dd:86:01:45:70:9d:af:35:2c:6e:bc:6f:60:42:2c:6d:fb: f2:97:9e:f0:dd:6e:3a:1f:0b:87:94:c1:f7:52:34:16:42:87: 63:b7:e5:04:31:b9:28:5e:5a:6a:f1:12:cd:cf:b5:e7:6f:06: f1:7c:7f:77:19:ff:c4:fb:ea:5c:02:cd:74:e0:eb:a0:36:b6: 3b:ea:00:49:da:61:6b:c3:70:59:27:55:ca:0a:c0:1d:d5:07: 64:56:8a:19:bf:e2:41:80:c4:ce:95:58:90:94:62:70:66:38: 16:c5:cb:93:fe:d8:79:c5:cc:85:b1:8b:31:bc:13:37:85:fd: 3c:1f:42:b3:54:1c:7b:07:71:80:91:42:1a:8a:b1:84:92:8f: 03:3c:ae:6c:b8:5a:dc:12:f9:a9:82:c8:50:4b:3c:e9:9a:7e: 51:5f:f2:dd:71:11:8e:a6:9b:e9:17:6d:8f:50:da:4f:c5:fe: 25:46:ee:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIl7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTkwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyNDQtOTY4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALU9YE+6uCPNQKCy6YuuSSXzWsmIeyd4wP2eCATMcDTwDtAXW2DHkO2JeC0o btHxgP/PkY4C57zdkj8tqYeG8VKAPh7dGiWc0vipIxBsyjMkQ6uWOs4Kb0zKFPxQ WGjwAmGBnA92pJofqotMrEaUlbs1t21xyO+TxuJp/oHQ5giMHzo1fIy9WLrk5frq 3pohdx3o/KCLgHmU6mTaF8k/DzDkQwnI+s8ArWIdnk50K9NinPeDRrHwCg34XjbE ro7bE+ltYbb4owV/b3yfSTqtzkHyPgrMx1mxuk5ffvS9DAO9ck1R0Qd1oqmvBsUo 3d5wF5qTU0eB+0emIZsqYWjHp6ECAwEAAaOCApswggKXMB0GA1UdDgQWBBSnk/BW ddUCk3JgfTME0u/A2p3MTjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MwNkRBNjcw MzhCMjExRUM5NjFENTg2M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCZ8XcAwQCnXeoMA0GCSqGSIb3DQEBCwUAA4IBAQC0qEW5 CjVAw4AyuyxMmV+fFVeRk3zrEJdAvUZ4+tcPzHIFmJKfqrT7EyHE4M7/rjnPy5mF hgeiPwoV1V4WSRGc9xUzYdvgi0Kv3YYBRXCdrzUsbrxvYEIsbfvyl57w3W46HwuH lMH3UjQWQodjt+UEMbkoXlpq8RLNz7XnbwbxfH93Gf/E++pcAs104OugNrY76gBJ 2mFrw3BZJ1XKCsAd1QdkVooZv+JBgMTOlViQlGJwZjgWxcuT/th5xcyFsYsxvBM3 hf08H0KzVBx7B3GAkUIairGEko8DPK5suFrcEvmpgshQSzzpmn5RX/LdcRGOppvp F22PUNpPxf4lRu7O -----END CERTIFICATE-----Generated at Sun Feb 16 20:40:24 2025 by rpki-client