$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa File: C23A5982E81311ED8E3D6035C4F9AE02.roa (raw, json) Hash identifier: X2p1Bm6/trmOXuYUmOwFT2CoEdSmIU/HzikPsTgpoP8= Subject key identifier: 34:05:3D:74:4B:EF:D0:83:54:CF:E8:31:DB:7E:37:3B:53:3A:A1:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89B4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa Signing time: Thu 30 May 2024 15:59:55 +0000 ROA not before: Thu 30 May 2024 15:59:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134343 IP address blocks: 103.110.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35252 (0x89b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:59:55 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a27b-c0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:d2:b3:12:73:6d:44:25:28:c3:d6:de:ad: 8c:d9:d7:c2:7d:c4:d6:a0:8d:17:61:c2:91:d3:d9: d1:5f:55:3c:59:c4:58:a0:3c:43:75:89:4b:8c:b9: 69:2b:d3:7f:64:63:9e:e8:42:ac:ae:a5:33:49:b8: f7:b4:aa:5b:60:ee:7b:f6:7b:72:42:ef:ba:52:e5: e5:67:de:e7:61:5b:2c:d3:ec:d5:1b:f7:7d:e1:95: 64:61:6b:8a:90:5a:19:d5:39:6b:73:b7:ff:63:ea: b2:dd:63:b5:e7:23:27:2f:95:52:3b:88:d2:66:4f: c4:39:8e:95:40:6c:4d:86:2a:83:75:a2:f7:29:ea: a0:40:92:69:65:b4:f3:b7:d2:39:fa:ee:ef:b6:86: a4:a0:79:67:a7:65:b6:30:d6:2f:52:08:f9:0a:12: 2a:7e:19:a7:86:44:4b:a7:af:a9:b5:a3:49:f8:7d: 77:3a:23:2a:f3:6d:e1:9a:27:19:60:4f:cc:a8:66: b7:81:26:e9:93:11:39:94:78:5d:f1:7e:79:1b:2a: 60:32:de:d7:f3:a2:09:8b:58:0b:49:20:bc:59:32: 2c:55:2c:c3:ca:af:6c:8b:fa:9a:ae:01:20:fb:6e: d2:90:d6:30:b2:1e:bf:f9:5d:bf:6b:48:40:e3:4d: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:05:3D:74:4B:EF:D0:83:54:CF:E8:31:DB:7E:37:3B:53:3A:A1:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.102.0/23 Signature Algorithm: sha256WithRSAEncryption 36:93:a0:31:e1:2d:d4:74:29:5a:f7:ab:c7:e6:d1:aa:04:4d: 93:a8:a0:40:a9:5d:f6:07:d0:4e:e0:c0:ab:e7:37:84:5f:5a: 07:bf:9c:1f:d8:2b:2c:a5:0b:a1:fa:28:49:d1:59:f8:52:e8: 78:88:ab:76:1e:69:5d:0c:f7:64:b1:05:4f:66:e7:95:4a:3f: 13:ec:79:51:cc:f1:b4:75:83:f3:ed:e4:1d:35:44:7e:c1:1f: 67:d8:3e:ae:f1:4c:8f:2d:68:c7:0f:a5:82:5e:36:ba:5d:fa: b8:d6:5f:df:53:94:ef:c3:bb:0f:01:26:d9:dd:c1:30:c6:f5: 9f:f4:ea:13:7f:5c:68:99:f0:7b:6b:4e:43:14:39:83:3f:40: 98:7b:7e:d1:0f:89:38:e8:31:27:2e:dd:37:71:c2:98:bb:ef: 6c:56:c3:d2:14:4b:17:ac:81:b0:3b:75:23:9f:b1:b3:77:52: 01:77:23:a0:5a:99:05:dc:64:fd:7f:9c:c5:57:45:d3:c0:dc: 66:49:b0:b7:3f:db:62:ca:f3:b7:92:fd:59:67:a8:a7:b0:65: 6b:b3:95:2d:a7:7f:f7:1b:c9:ac:42:5a:de:44:e1:76:9d:9b: 3b:e0:e0:29:3f:bf:23:7c:01:3e:eb:fa:e6:53:c9:fb:c7:79: d0:a5:5e:ef -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIm0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTk1NVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyN2ItYzBkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEO0rMSc21EJSjD1t6tjNnXwn3E1qCNF2HCkdPZ0V9VPFnEWKA8Q3WJS4y5 aSvTf2RjnuhCrK6lM0m497SqW2Due/Z7ckLvulLl5Wfe52FbLNPs1Rv3feGVZGFr ipBaGdU5a3O3/2Pqst1jtecjJy+VUjuI0mZPxDmOlUBsTYYqg3Wi9ynqoECSaWW0 87fSOfru77aGpKB5Z6dltjDWL1II+QoSKn4Zp4ZES6evqbWjSfh9dzojKvNt4Zon GWBPzKhmt4Em6ZMROZR4XfF+eRsqYDLe1/OiCYtYC0kgvFkyLFUsw8qvbIv6mq4B IPtu0pDWMLIev/ldv2tIQONNC5sCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ0BT10 S+/Qg1TP6DHbfjc7UzqhlDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyM0E1OTgy RTgxMzExRUQ4RTNENjAzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ25mMA0GCSqGSIb3DQEBCwUAA4IBAQA2k6Ax4S3UdCla 96vH5tGqBE2TqKBAqV32B9BO4MCr5zeEX1oHv5wf2CsspQuh+ihJ0Vn4Uuh4iKt2 HmldDPdksQVPZueVSj8T7HlRzPG0dYPz7eQdNUR+wR9n2D6u8UyPLWjHD6WCXja6 Xfq41l/fU5Tvw7sPASbZ3cEwxvWf9OoTf1xomfB7a05DFDmDP0CYe37RD4k46DEn Lt03ccKYu+9sVsPSFEsXrIGwO3Ujn7Gzd1IBdyOgWpkF3GT9f5zFV0XTwNxmSbC3 P9tiyvO3kv1ZZ6insGVrs5Utp3/3G8msQlreROF2nZs74OApP78jfAE+6/rmU8n7 x3nQpV7v -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:29 2025 by rpki-client