$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa File: C7A673C8A7DE11EBB197BF39C4F9AE02.roa (raw, json) Hash identifier: sqUf/ZnXSrk4b+ECC0KPQQ5RdFnCbHw2PHpwDawkPnc= Subject key identifier: F5:25:30:69:35:8C:D0:3A:F0:B3:F1:20:CB:C0:68:5A:5C:EA:21:E6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DD7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa Signing time: Thu 30 May 2024 16:17:16 +0000 ROA not before: Thu 30 May 2024 16:17:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141863 IP address blocks: 103.163.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36311 (0x8dd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:17:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a68c-c08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:d0:b4:1a:89:da:3d:1f:d1:09:0a:4c:f3: 5e:da:ba:0a:76:b9:f1:78:00:40:4c:92:56:b0:50: f7:a4:25:5b:28:fa:e0:76:67:21:33:9e:39:a6:9d: 04:75:14:12:b0:67:f7:70:6d:1e:a4:31:36:1c:85: 3e:6f:52:72:a1:13:7e:77:2c:18:7c:bb:41:25:65: 62:8f:f6:fb:80:82:4a:f5:78:77:c3:ce:eb:a2:cd: da:b8:ff:08:a1:bf:c4:8a:5f:bb:38:f8:22:44:14: dc:af:cd:38:fa:a3:4c:ab:7e:d7:0f:e9:02:58:80: 6d:39:f6:4e:c0:3a:f0:a1:ac:e2:27:f8:cb:ee:59: 19:5d:75:67:e0:08:76:d8:93:88:5b:fe:a7:0a:7a: 44:6d:1f:b0:35:c9:14:60:7f:7f:98:0e:53:ba:09: 41:e4:5a:f0:14:2f:f4:10:bb:b3:7b:db:53:42:28: 40:51:86:2c:13:ef:8a:2c:cf:81:4b:32:5e:37:9c: b6:df:56:87:3c:66:8b:28:b7:62:52:ad:46:14:2c: 33:74:3c:30:5d:33:a0:e1:a5:ea:18:44:0e:85:42: ea:75:93:3e:b8:f4:19:74:f4:53:a6:de:f3:ef:82: 82:bd:eb:07:c7:d8:7f:30:23:15:68:b1:41:ae:e1: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:25:30:69:35:8C:D0:3A:F0:B3:F1:20:CB:C0:68:5A:5C:EA:21:E6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.194.0/23 Signature Algorithm: sha256WithRSAEncryption 56:c2:b1:31:7f:2f:68:d2:7b:9f:b8:25:b6:cd:c5:8a:36:9e: 13:95:a4:9a:06:f7:21:39:b4:8f:28:09:99:06:3c:c3:c6:8d: a3:f5:a5:65:b6:21:30:d5:70:b2:4f:10:5b:81:85:84:09:04: 3c:86:28:ef:c4:a7:32:db:39:38:88:76:86:1d:64:2b:01:21: 2a:86:b7:8b:aa:ca:33:ed:cf:f6:84:0e:39:7a:6a:5c:f3:a5: ef:a0:7d:dd:b7:49:5e:a1:f2:98:40:39:af:25:54:0d:b8:8d: fe:46:08:96:ea:23:ec:99:c5:be:fa:8e:8f:1d:ce:68:6e:db: 67:b3:64:9f:8a:24:38:bf:6e:0f:39:82:1b:b2:46:99:d9:f2: e3:93:4e:50:bd:1c:23:15:33:8d:10:23:54:4b:01:7b:7f:03: b2:eb:75:49:b0:a0:3b:7f:ca:3d:0e:d0:a4:e3:ef:ee:22:24: 95:ff:3c:c4:ad:dc:5d:6a:ce:1b:de:27:f3:f8:10:ce:fb:b9: f5:b1:81:a1:8d:73:2e:47:56:32:96:22:ba:04:4f:ac:fc:09: e7:a5:7a:ed:1c:54:dd:81:02:30:d0:26:a7:cf:bf:33:f0:8f: 1f:3a:2f:c1:4a:a5:4e:af:7f:70:27:03:ba:7c:8b:19:9c:0c: 98:0c:fe:aa -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI3XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTcxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2OGMtYzA4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTi0LQaido9H9EJCkzzXtq6Cna58XgAQEySVrBQ96QlWyj64HZnITOeOaad BHUUErBn93BtHqQxNhyFPm9ScqETfncsGHy7QSVlYo/2+4CCSvV4d8PO66LN2rj/ CKG/xIpfuzj4IkQU3K/NOPqjTKt+1w/pAliAbTn2TsA68KGs4if4y+5ZGV11Z+AI dtiTiFv+pwp6RG0fsDXJFGB/f5gOU7oJQeRa8BQv9BC7s3vbU0IoQFGGLBPviizP gUsyXjectt9Whzxmiyi3YlKtRhQsM3Q8MF0zoOGl6hhEDoVC6nWTPrj0GXT0U6be 8++Cgr3rB8fYfzAjFWixQa7h93ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBT1JTBp NYzQOvCz8SDLwGhaXOoh5jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M3QTY3M0M4 QTdERTExRUJCMTk3QkYzOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6PCMA0GCSqGSIb3DQEBCwUAA4IBAQBWwrExfy9o0nuf uCW2zcWKNp4TlaSaBvchObSPKAmZBjzDxo2j9aVltiEw1XCyTxBbgYWECQQ8hijv xKcy2zk4iHaGHWQrASEqhreLqsoz7c/2hA45empc86XvoH3dt0leofKYQDmvJVQN uI3+RgiW6iPsmcW++o6PHc5obttns2SfiiQ4v24POYIbskaZ2fLjk05QvRwjFTON ECNUSwF7fwOy63VJsKA7f8o9DtCk4+/uIiSV/zzErdxdas4b3ifz+BDO+7n1sYGh jXMuR1YyliK6BE+s/AnnpXrtHFTdgQIw0Canz78z8I8fOi/BSqVOr39wJwO6fIsZ nAyYDP6q -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:39 2025 by rpki-client