$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa File: C8CC3298243C11EDB970A574C4F9AE02.roa (raw, json) Hash identifier: 5kTZk0Dwo6TiPSTM890nLwAomXZDvBCNWxPE7XuBTdg= Subject key identifier: 21:54:30:85:B7:40:39:85:29:F0:AD:67:8F:3A:B7:87:CD:0C:74:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F72 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa Signing time: Thu 30 May 2024 16:23:50 +0000 ROA not before: Thu 30 May 2024 16:23:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150034 IP address blocks: 103.190.144.0/23 maxlen: 24 2400:9160::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36722 (0x8f72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:23:50 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a816-ee91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:5e:b0:04:b2:0f:5f:4e:2b:91:1c:c4:5f: 81:e4:df:2a:39:13:4f:7f:78:16:57:02:2a:d6:f9: 92:91:c3:12:02:ff:cc:75:cc:19:7d:e4:da:07:eb: b7:2e:b8:b6:55:ef:cb:7a:bf:c6:3a:56:4e:0d:a4: 29:e4:a8:1a:cf:20:0d:fa:17:ee:a5:67:7b:32:92: e6:44:88:ba:a2:d0:fa:2f:c4:ed:9d:1b:74:d3:21: cc:f0:82:16:bd:b2:1d:e2:bd:58:35:61:0b:fd:2e: a8:33:ea:1f:80:c1:c1:70:92:2b:a5:15:2b:2e:91: 5c:35:0f:35:5a:b0:5d:7e:de:f9:48:7d:76:54:25: c9:c4:31:73:b9:a7:f4:81:44:e5:20:ad:ff:d1:7e: 8a:9a:7b:02:b1:23:0b:bc:82:e8:e0:54:e9:9b:02: 63:a8:2c:38:dd:2d:ec:98:5c:3e:9b:a2:b6:87:31: de:a3:3e:8f:fd:7f:a4:76:46:94:3a:a4:d6:36:6c: a8:b3:6b:ce:a7:d8:8c:46:11:86:a9:f8:e0:c2:fc: 58:87:ac:2c:7d:4b:d4:06:7d:f5:3f:0d:13:47:c4: 30:4d:b2:9e:8c:ed:2b:4f:31:38:7b:70:12:69:b7: 57:d9:6e:f2:7e:97:2f:89:6f:4b:3d:0f:b3:05:25: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:30:85:B7:40:39:85:29:F0:AD:67:8F:3A:B7:87:CD:0C:74:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.144.0/23 IPv6: 2400:9160::/32 Signature Algorithm: sha256WithRSAEncryption 95:1d:2f:ac:f8:85:c2:df:0b:8f:9d:b1:fb:dc:0d:67:7b:cb: 5a:d3:d5:64:0c:f4:18:c9:97:1c:0e:7b:0b:60:94:25:5d:97: f9:47:46:65:42:13:ea:dc:83:1f:d4:49:61:e7:ce:4d:16:53: de:46:91:0b:93:90:9d:cc:22:a4:6c:5c:57:d7:4f:f0:2e:70: b9:ff:37:a3:95:c7:61:a7:cd:30:46:55:a3:9d:9e:e3:29:ea: 48:01:ac:01:d1:cd:8c:dd:d1:a7:83:3d:82:1f:04:2a:35:53: bd:e0:6a:22:6f:41:1f:2d:aa:ee:56:cc:40:40:6c:bb:04:ac: 7e:df:c2:a2:81:13:aa:66:eb:8a:12:ef:ab:19:26:6e:4d:c1: ad:30:0f:fd:b8:6d:8f:87:4f:89:7a:13:14:67:4f:97:06:ac: aa:01:63:08:32:b5:a0:48:2e:68:d4:5f:37:9d:af:6a:d6:72: 8c:7a:7b:1e:72:d0:45:2a:ad:14:5b:63:0d:48:ee:22:0a:e2: 13:51:23:f4:e2:ba:a8:cf:f0:09:8d:f2:32:40:c5:65:f3:a9: 20:df:5d:07:63:7c:bc:3d:27:f4:4e:c6:ae:b0:1d:5a:28:3d: a3:89:f1:f5:97:d4:bd:e1:72:8a:05:52:82:b2:e2:fa:1e:ae: 06:a5:19:f9 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAI9yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjM1MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4MTYtZWU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPZXrAEsg9fTiuRHMRfgeTfKjkTT394FlcCKtb5kpHDEgL/zHXMGX3k2gfr ty64tlXvy3q/xjpWTg2kKeSoGs8gDfoX7qVnezKS5kSIuqLQ+i/E7Z0bdNMhzPCC Fr2yHeK9WDVhC/0uqDPqH4DBwXCSK6UVKy6RXDUPNVqwXX7e+Uh9dlQlycQxc7mn 9IFE5SCt/9F+ipp7ArEjC7yC6OBU6ZsCY6gsON0t7JhcPpuitocx3qM+j/1/pHZG lDqk1jZsqLNrzqfYjEYRhqn44ML8WIesLH1L1AZ99T8NE0fEME2ynoztK08xOHtw Emm3V9lu8n6XL4lvSz0PswUlwG0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQhVDCF t0A5hSnwrWePOreHzQx0+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M4Q0MzMjk4 MjQzQzExRURCOTcwQTU3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ76QMA0EAgACMAcDBQAkAJFgMA0GCSqGSIb3DQEBCwUA A4IBAQCVHS+s+IXC3wuPnbH73A1ne8ta09VkDPQYyZccDnsLYJQlXZf5R0ZlQhPq 3IMf1Elh585NFlPeRpELk5CdzCKkbFxX10/wLnC5/zejlcdhp80wRlWjnZ7jKepI AawB0c2M3dGngz2CHwQqNVO94Goib0EfLaruVsxAQGy7BKx+38KigROqZuuKEu+r GSZuTcGtMA/9uG2Ph0+JehMUZ0+XBqyqAWMIMrWgSC5o1F83na9q1nKMensectBF Kq0UW2MNSO4iCuITUSP04rqoz/AJjfIyQMVl86kg310HY3y8PSf0TsausB1aKD2j ifH1l9S94XKKBVKCsuL6Hq4GpRn5 -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:26 2024 by rpki-client on console-ams.rpki-client.org