$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE4D72C42011EF8B1A7A34C4F9AE02.roa File: CCDE4D72C42011EF8B1A7A34C4F9AE02.roa (raw, json) Hash identifier: dwfRw6zrXE+t27l5dHkw4mNjjbAIrwt9kzA1Kiwa2iQ= Subject key identifier: AD:4C:90:90:D8:7F:73:BE:A0:98:9B:12:38:E9:F5:CE:DE:86:82:4D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A08C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE4D72C42011EF8B1A7A34C4F9AE02.roa Signing time: Fri 27 Dec 2024 11:04:52 +0000 ROA not before: Fri 27 Dec 2024 11:04:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140151 IP address blocks: 103.155.195.0/24 maxlen: 24 2407:f0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41100 (0xa08c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 27 11:04:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=676e89d3-491b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:30:4b:79:1a:22:a5:c9:c7:62:1c:9f:0b: a4:70:e3:f8:e5:ac:cc:71:de:6b:81:ed:78:a7:93: 35:d3:03:0c:c8:1e:4b:d5:02:c1:21:77:41:ce:18: 42:10:7c:43:98:96:82:aa:0e:33:d1:89:3c:3a:e6: 21:14:31:32:ef:63:c2:fa:d3:0f:8b:14:9f:76:86: a8:60:ca:e5:5c:de:19:bf:b9:0b:be:02:67:5e:37: f8:9e:fd:42:39:41:97:72:49:57:4d:23:7b:fe:06: 30:12:f7:c9:a1:62:11:7e:9b:fc:f7:8c:21:ef:7b: 65:67:6d:fa:3f:99:93:08:02:35:d5:32:fd:30:64: 25:b1:be:42:21:eb:6d:c9:c7:f4:11:e9:6f:c9:72: 5c:75:24:48:02:b1:d5:e0:87:6e:be:f9:6a:eb:b9: 90:2e:de:d9:3d:a2:47:3c:21:f7:01:2b:b8:1c:2b: 46:74:99:d7:9d:b8:3a:4d:6c:48:e9:02:a6:c7:95: e1:4d:12:10:ea:be:d8:d9:68:5a:ab:f6:4a:96:e0: a5:44:ba:9a:c0:cf:44:51:00:25:d8:df:48:73:51: 3f:a1:8d:17:63:75:aa:03:7b:fe:46:a6:5a:cf:dc: b1:9f:65:65:d7:e0:56:8a:f1:d4:9d:13:db:3e:52: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:90:90:D8:7F:73:BE:A0:98:9B:12:38:E9:F5:CE:DE:86:82:4D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE4D72C42011EF8B1A7A34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.195.0/24 IPv6: 2407:f0c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:08:73:45:82:c9:d8:10:34:59:e3:f4:4a:7e:0a:f2:3e:6a: bc:4c:f5:96:7b:bb:29:ce:76:07:20:ce:7e:e0:c9:8c:f0:1e: 2c:67:04:be:49:55:76:18:5e:d0:6e:5d:f1:32:16:4f:2e:a7: 15:99:50:88:c2:af:f7:c8:e0:97:e1:ee:22:4c:a1:53:14:40: 95:63:76:10:b0:19:69:2c:d0:60:a0:7b:fc:f7:17:06:47:bc: f9:90:c2:eb:b1:ea:21:cb:14:c1:8a:93:de:c8:76:84:40:0e: bf:d1:71:19:5f:ff:c3:82:72:ab:d0:b1:23:66:c3:28:75:7c: b5:38:c2:8c:10:92:6f:77:fb:d7:a1:b0:53:08:fe:d1:ed:9b: 07:6c:cb:40:cb:c1:26:95:43:e8:4e:b9:a4:90:59:c5:5c:c6: 6e:9f:3f:4c:7a:1d:5a:4a:04:fe:24:1a:72:ad:31:af:50:90: a8:5a:fe:1c:94:57:51:ed:25:2f:c4:a3:d7:02:37:74:ac:d4: a7:e7:8f:81:7b:c8:86:ac:8b:39:2c:86:d8:d1:e1:f1:aa:b8: e0:28:7a:a6:5f:ac:f1:c7:cb:8d:b4:73:b5:9e:04:59:6f:9e: 77:74:c2:36:c7:24:14:a1:ef:17:53:4d:35:25:65:ac:1e:57: e5:71:41:5b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAKCMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTIyNzExMDQ1MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc2ZTg5ZDMtNDkxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXBMEt5GiKlycdiHJ8LpHDj+OWszHHea4HteKeTNdMDDMgeS9UCwSF3Qc4Y QhB8Q5iWgqoOM9GJPDrmIRQxMu9jwvrTD4sUn3aGqGDK5VzeGb+5C74CZ143+J79 QjlBl3JJV00je/4GMBL3yaFiEX6b/PeMIe97ZWdt+j+ZkwgCNdUy/TBkJbG+QiHr bcnH9BHpb8lyXHUkSAKx1eCHbr75auu5kC7e2T2iRzwh9wEruBwrRnSZ1524Ok1s SOkCpseV4U0SEOq+2NloWqv2SpbgpUS6msDPRFEAJdjfSHNRP6GNF2N1qgN7/kam Ws/csZ9lZdfgVorx1J0T2z5SgKUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBStTJCQ 2H9zvqCYmxI46fXO3oaCTTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDREU0RDcy QzQyMDExRUY4QjFBN0EzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQAZ5vDMA0EAgACMAcDBQAkB/DAMA0GCSqGSIb3DQEBCwUA A4IBAQCICHNFgsnYEDRZ4/RKfgryPmq8TPWWe7spznYHIM5+4MmM8B4sZwS+SVV2 GF7Qbl3xMhZPLqcVmVCIwq/3yOCX4e4iTKFTFECVY3YQsBlpLNBgoHv89xcGR7z5 kMLrseohyxTBipPeyHaEQA6/0XEZX//DgnKr0LEjZsModXy1OMKMEJJvd/vXobBT CP7R7ZsHbMtAy8EmlUPoTrmkkFnFXMZunz9Meh1aSgT+JBpyrTGvUJCoWv4clFdR 7SUvxKPXAjd0rNSn54+Be8iGrIs5LIbY0eHxqrjgKHqmX6zxx8uNtHO1ngRZb553 dMI2xyQUoe8XU001JWWsHlflcUFb -----END CERTIFICATE-----Generated at Fri Apr 4 10:56:01 2025 by rpki-client