$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa File: CBA9007448B911EFB11C3E3BC4F9AE02.roa (raw, json) Hash identifier: wg7/ZBSQP96wR7t9bRQAB/FEUSycMC0mnBtLH3GJJOk= Subject key identifier: 28:20:0E:14:06:58:6A:E2:86:92:15:08:CE:83:A2:7E:F3:28:F5:29 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9F8F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa Signing time: Wed 18 Dec 2024 10:02:57 +0000 ROA not before: Wed 18 Dec 2024 10:02:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151772 IP address blocks: 103.23.92.0/23 maxlen: 24 103.159.106.0/24 maxlen: 24 103.159.107.0/24 maxlen: 24 2001:df2:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40847 (0x9f8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 18 10:02:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67629dd1-6311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:52:04:42:34:85:d9:de:f9:1d:77:b4:d8: d4:7b:2c:43:1e:7e:44:69:d9:dd:e5:27:57:17:2f: 91:8c:e6:ac:c5:07:63:fa:db:c6:ba:70:cc:f0:8b: ac:be:7c:56:66:7e:65:83:51:45:bb:f2:83:9f:ec: 2a:e9:ea:63:c5:90:f0:36:28:d2:8d:25:53:46:35: 9a:4a:85:cf:da:8b:4a:a6:7c:38:92:5b:12:c5:6e: 41:1e:e0:9c:83:83:cd:46:d1:e8:71:db:02:e8:11: f0:6d:45:02:4d:ff:fa:72:22:f8:34:61:4a:73:fb: 92:91:69:ad:4c:21:23:59:e1:16:df:75:0f:c8:99: 6c:f1:54:12:ee:95:de:a1:2c:72:bd:6b:f4:30:3e: f6:0f:4a:28:8d:dc:75:dc:73:cd:6b:c7:e1:48:b8: 9b:fd:99:1d:1f:43:5a:96:c7:33:ad:cf:0f:f5:44: e9:e4:f6:58:64:31:b3:39:cb:1e:da:f1:86:57:26: 8b:3f:3f:c2:01:e9:08:57:d2:f9:70:46:c4:4d:d7: d1:e0:cb:8f:1b:1f:75:64:65:57:23:88:c9:48:c1: 29:97:10:a2:db:de:6a:90:5d:a2:0c:c4:40:df:48: c6:18:c1:02:e9:a0:a8:6b:82:38:b0:6e:c6:cf:11: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:0E:14:06:58:6A:E2:86:92:15:08:CE:83:A2:7E:F3:28:F5:29 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.92.0/23 103.159.106.0/23 IPv6: 2001:df2:dac0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:01:49:16:db:28:82:ef:83:8d:0f:b5:d8:fd:99:9b:b3:65: f3:e6:5e:09:2b:4f:f9:d1:a0:d9:7e:6c:8d:56:f2:08:7f:7f: 58:81:d1:ea:ea:c2:64:16:66:bb:37:1e:f0:07:77:99:a4:1e: 2b:06:25:ad:f0:32:bf:65:4e:51:14:e1:c8:00:62:f0:6a:6a: 9a:bf:94:c8:d7:ca:cc:a2:e4:a0:87:bf:2f:5f:f4:c1:64:f1: 48:dc:b9:cb:53:2c:99:35:b6:ae:db:fc:58:b5:4d:9f:43:12: 87:f9:89:a0:09:83:f7:3c:cf:9c:2a:a9:34:b5:6e:17:fe:c7: 15:34:ee:1a:92:23:8a:c2:7a:ac:d0:51:c4:80:e2:a0:8d:e3: 2c:e5:ae:29:6f:32:32:b5:05:68:8f:bb:9e:45:44:c6:0f:1d: b0:53:74:60:91:da:90:f0:17:d1:a0:ff:63:f2:33:b7:b6:15: 67:b8:67:03:b6:84:da:3a:34:ed:e6:db:a4:ec:81:14:f8:d7: f5:ca:a9:bc:86:de:77:01:a7:0f:6f:6f:f8:cb:af:c6:86:1c: 6a:c6:9d:d6:80:b8:f5:46:ab:82:86:47:35:7c:4a:70:18:80: 66:6f:cf:a7:6a:7a:a9:18:85:c4:11:1d:6f:b1:78:28:f1:8a: 32:d4:37:28 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAJ+PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTIxODEwMDI1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc2MjlkZDEtNjMxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaFUgRCNIXZ3vkdd7TY1HssQx5+RGnZ3eUnVxcvkYzmrMUHY/rbxrpwzPCL rL58VmZ+ZYNRRbvyg5/sKunqY8WQ8DYo0o0lU0Y1mkqFz9qLSqZ8OJJbEsVuQR7g nIODzUbR6HHbAugR8G1FAk3/+nIi+DRhSnP7kpFprUwhI1nhFt91D8iZbPFUEu6V 3qEscr1r9DA+9g9KKI3cddxzzWvH4Ui4m/2ZHR9DWpbHM63PD/VE6eT2WGQxsznL Htrxhlcmiz8/wgHpCFfS+XBGxE3X0eDLjxsfdWRlVyOIyUjBKZcQotveapBdogzE QN9IxhjBAumgqGuCOLBuxs8R5YMCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQoIA4U Blhq4oaSFQjOg6J+8yj1KTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCQTkwMDc0 NDhCOTExRUZCMTFDM0UzQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZxdcAwQBZ59qMA8EAgACMAkDBwAgAQ3y2sAwDQYJKoZI hvcNAQELBQADggEBAB4BSRbbKILvg40Ptdj9mZuzZfPmXgkrT/nRoNl+bI1W8gh/ f1iB0erqwmQWZrs3HvAHd5mkHisGJa3wMr9lTlEU4cgAYvBqapq/lMjXysyi5KCH vy9f9MFk8UjcuctTLJk1tq7b/Fi1TZ9DEof5iaAJg/c8z5wqqTS1bhf+xxU07hqS I4rCeqzQUcSA4qCN4yzlrilvMjK1BWiPu55FRMYPHbBTdGCR2pDwF9Gg/2PyM7e2 FWe4ZwO2hNo6NO3m26TsgRT41/XKqbyG3ncBpw9vb/jLr8aGHGrGndaAuPVGq4KG RzV8SnAYgGZvz6dqeqkYhcQRHW+xeCjxijLUNyg= -----END CERTIFICATE-----Generated at Fri Apr 4 20:24:40 2025 by rpki-client