$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa File: C84244C28F6411EEBED78B33C4F9AE02.roa (raw, json) Hash identifier: zYgrQhU6NhMAus8j8SD68/zHXLGmGeQxVXQmteY7ff8= Subject key identifier: AD:C1:D8:5A:CB:E0:E2:EC:F1:46:F4:7D:3D:A0:A3:59:3C:5B:B5:D6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 895A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa Signing time: Thu 30 May 2024 15:58:29 +0000 ROA not before: Thu 30 May 2024 15:58:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134019 IP address blocks: 45.65.48.0/22 maxlen: 24 103.41.56.0/24 maxlen: 24 103.54.140.0/23 maxlen: 24 103.198.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35162 (0x895a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:58:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a225-3ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:25:fd:b7:b5:c4:49:ac:3a:5b:8f:d2:b9:01: 3b:f5:27:d7:b2:e3:0b:c4:04:e5:5e:8c:e1:a8:1f: 36:38:15:49:47:02:3e:77:cf:ec:81:14:85:cf:ff: ef:4e:f0:64:74:1b:78:30:2b:6f:c2:aa:18:c7:f1: 2c:8f:59:61:a7:a8:58:25:26:9d:ac:e0:d4:fb:90: 70:a3:34:c8:c3:1d:7f:a5:5d:17:07:5e:b3:79:e9: a6:16:33:b3:51:ee:fc:8a:8e:32:12:05:dc:a6:3c: 4b:3f:66:3e:36:56:56:7f:62:5c:52:17:5c:c8:a6: 29:46:8f:e0:1f:df:9d:85:a8:49:fa:2b:96:34:50: 38:e1:f5:33:7d:84:1c:53:92:e9:48:d2:c1:e8:5d: 45:36:a9:a4:b1:49:0f:a9:72:34:35:df:8d:a4:32: 04:c5:f6:39:de:c5:13:c9:f8:9d:0f:06:47:5b:3e: 3e:fd:97:67:b8:a0:7f:d1:b8:0d:2f:e2:4a:95:b4: 2d:cc:f4:08:9e:ef:d6:b9:0e:71:6e:a1:05:6e:89: b7:e3:84:90:a4:26:c2:8a:d6:66:21:37:76:5e:30: 5b:b2:59:62:3b:97:c4:34:34:44:3d:1a:ac:98:49: 23:31:56:b5:5b:7d:0b:ea:c5:74:a5:7a:5c:43:07: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C1:D8:5A:CB:E0:E2:EC:F1:46:F4:7D:3D:A0:A3:59:3C:5B:B5:D6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.65.48.0/22 103.41.56.0/24 103.54.140.0/23 103.198.34.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:49:c0:e5:ff:af:1d:a7:27:bf:b7:de:7b:5c:5b:48:c1:5b: 17:f2:cd:52:9f:f2:c8:43:1c:e3:0d:fb:8e:97:ac:8c:19:97: fa:02:c6:a5:6f:6b:f6:7b:5a:ee:5b:62:25:94:cd:b1:56:8b: 84:b0:47:15:c8:46:57:5d:5e:80:a5:55:bc:61:fd:40:3f:1c: 9d:fb:d7:f2:8e:1f:b6:08:59:2b:4b:7c:09:52:0e:cf:83:1d: 3d:ee:9b:c5:63:77:c4:86:0b:7a:e4:73:94:57:8c:cf:a7:42: 59:91:33:f4:b4:58:73:a1:4a:37:5d:ae:39:23:71:db:56:c4: 7a:7e:03:7e:c1:d7:67:b0:a6:f0:47:f2:a4:b3:a9:55:18:7c: 08:a0:58:a7:67:e7:f0:f8:3c:41:e9:09:84:f6:24:50:67:54: 82:1e:13:eb:f7:38:2b:91:9f:dd:2d:81:48:3c:c9:09:49:3c: 71:ce:dd:cd:7b:8e:7f:5d:53:cd:89:65:66:b8:d6:aa:74:ec: 03:c7:55:47:a3:9b:33:fc:e8:e3:a0:67:7f:69:6b:d8:e9:57: 6b:c6:5c:d8:5b:93:30:b6:97:f0:e0:d0:20:5f:42:ea:a4:9f: ad:1c:7a:ce:c6:7d:48:f6:dd:0b:ee:0c:95:6c:33:2f:9f:8e: ec:b2:24:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAIlaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTgyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyMjUtM2VjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPol/be1xEmsOluP0rkBO/Un17LjC8QE5V6M4agfNjgVSUcCPnfP7IEUhc// 707wZHQbeDArb8KqGMfxLI9ZYaeoWCUmnazg1PuQcKM0yMMdf6VdFwdes3npphYz s1Hu/IqOMhIF3KY8Sz9mPjZWVn9iXFIXXMimKUaP4B/fnYWoSforljRQOOH1M32E HFOS6UjSwehdRTappLFJD6lyNDXfjaQyBMX2Od7FE8n4nQ8GR1s+Pv2XZ7igf9G4 DS/iSpW0Lcz0CJ7v1rkOcW6hBW6Jt+OEkKQmworWZiE3dl4wW7JZYjuXxDQ0RD0a rJhJIzFWtVt9C+rFdKV6XEMHvskCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBStwdha y+Di7PFG9H09oKNZPFu11jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M4NDI0NEMy OEY2NDExRUVCRUQ3OEIzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCLUEwAwQAZyk4AwQBZzaMAwQBZ8YiMA0GCSqGSIb3DQEB CwUAA4IBAQB+ScDl/68dpye/t957XFtIwVsX8s1Sn/LIQxzjDfuOl6yMGZf6Asal b2v2e1ruW2IllM2xVouEsEcVyEZXXV6ApVW8Yf1APxyd+9fyjh+2CFkrS3wJUg7P gx097pvFY3fEhgt65HOUV4zPp0JZkTP0tFhzoUo3Xa45I3HbVsR6fgN+wddnsKbw R/Kks6lVGHwIoFinZ+fw+DxB6QmE9iRQZ1SCHhPr9zgrkZ/dLYFIPMkJSTxxzt3N e45/XVPNiWVmuNaqdOwDx1VHo5sz/OjjoGd/aWvY6VdrxlzYW5Mwtpfw4NAgX0Lq pJ+tHHrOxn1I9t0L7gyVbDMvn47ssiSn -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:26 2024 by rpki-client on console-ams.rpki-client.org