$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa File: CE68E3FE803B11ECA8F12731C4F9AE02.roa (raw, json) Hash identifier: p7znQKoHewXccf4w2/bcnEABDxzEvRNBMKQ1f0fLi/g= Subject key identifier: F7:E6:E2:A1:B1:29:66:A4:02:FF:DF:99:9C:94:ED:AE:E1:22:3C:29 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DB9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa Signing time: Thu 30 May 2024 16:16:47 +0000 ROA not before: Thu 30 May 2024 16:16:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141820 IP address blocks: 103.164.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36281 (0x8db9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:16:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a66f-a80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:0f:e6:08:f0:de:02:c7:72:60:61:79:45: 6c:c4:7f:42:8b:d3:30:dd:7b:42:1f:3b:cf:dc:be: ae:b2:f2:f4:d5:ee:8f:b6:78:1c:20:26:63:f4:d2: dd:54:25:24:8c:2c:71:a7:fb:1f:78:38:04:56:19: cc:b7:40:3a:39:36:91:fa:be:f7:e4:bf:53:a9:09: c6:a2:41:8a:bb:04:76:7f:85:79:5c:4b:91:af:87: e7:54:26:e9:c6:9f:47:ab:6d:9f:22:36:c6:b5:92: 7f:c6:6e:f4:f8:9c:91:32:06:ce:bc:e3:23:5a:59: 23:55:a0:ec:84:93:11:3c:01:63:83:0c:7a:ed:fe: 96:fd:19:23:03:9f:5d:d5:b3:ae:24:02:75:99:1f: 41:72:b3:68:11:83:49:42:46:6d:06:9f:0e:f1:85: 0b:7f:28:2f:1f:77:ab:b9:d5:7a:73:09:07:59:aa: 93:41:55:63:36:d4:9c:32:79:eb:63:77:dc:60:c8: 31:4f:70:67:81:b0:74:5e:f6:35:4e:e0:a2:fe:dc: 65:dc:19:9f:6d:b8:fb:7a:f0:d1:09:bb:57:58:f4: f6:0b:9b:61:55:b1:9e:41:bb:91:bd:a7:7f:55:eb: 3b:a1:77:95:23:c1:e2:48:e7:dd:80:0b:94:7d:49: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:E2:A1:B1:29:66:A4:02:FF:DF:99:9C:94:ED:AE:E1:22:3C:29 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:31:0a:3c:49:c4:3d:49:60:a0:3b:2a:ac:13:db:b2:c9:63: 54:8f:8d:e2:53:57:64:4b:35:cf:f1:56:b9:99:da:e5:16:38: 37:c8:f7:f9:72:ae:56:49:66:30:9b:99:e9:7c:87:70:27:36: f5:a7:a4:96:9d:a1:73:c4:3b:7a:09:9a:79:4b:0f:81:79:c7: 95:74:98:d0:77:34:83:49:72:4d:46:05:8d:8b:fd:80:83:e3: 27:95:7c:64:00:b4:da:49:69:23:f5:28:15:9d:84:40:ed:40: 6b:59:7b:df:ed:ba:c3:5f:d5:a3:aa:f6:3f:cd:cb:8f:35:a7: 7f:b6:12:47:83:5a:76:90:b3:26:83:e0:dd:c8:4b:cb:ed:bc: 48:69:62:87:69:22:20:1d:3a:39:0d:fd:47:d6:15:87:a4:fb: ea:76:aa:1e:6b:a0:a9:2b:ff:ce:46:17:1c:e1:37:7b:09:cd: d0:82:a6:54:e1:4c:d9:1b:3e:a2:91:db:da:a8:5a:ac:54:9d: 6e:08:76:ac:d3:e6:de:36:70:a9:17:5a:fc:a3:25:a0:22:7d: 19:10:69:d7:b9:c4:c9:7f:ea:8d:a4:3e:b0:ca:fa:b3:4d:34: 06:56:ea:8f:ca:1e:8c:21:a0:7f:a4:66:e9:82:d0:6b:fd:1f: 34:3d:a3:d8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI25MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTY0N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2NmYtYTgwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAUD+YI8N4Cx3JgYXlFbMR/QovTMN17Qh87z9y+rrLy9NXuj7Z4HCAmY/TS 3VQlJIwscaf7H3g4BFYZzLdAOjk2kfq+9+S/U6kJxqJBirsEdn+FeVxLka+H51Qm 6cafR6ttnyI2xrWSf8Zu9PickTIGzrzjI1pZI1Wg7ISTETwBY4MMeu3+lv0ZIwOf XdWzriQCdZkfQXKzaBGDSUJGbQafDvGFC38oLx93q7nVenMJB1mqk0FVYzbUnDJ5 62N33GDIMU9wZ4GwdF72NU7gov7cZdwZn224+3rw0Qm7V1j09gubYVWxnkG7kb2n f1XrO6F3lSPB4kjn3YALlH1JDQUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT35uKh sSlmpAL/35mclO2u4SI8KTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFNjhFM0ZF ODAzQjExRUNBOEYxMjczMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6SMMA0GCSqGSIb3DQEBCwUAA4IBAQBaMQo8ScQ9SWCg OyqsE9uyyWNUj43iU1dkSzXP8Va5mdrlFjg3yPf5cq5WSWYwm5npfIdwJzb1p6SW naFzxDt6CZp5Sw+BeceVdJjQdzSDSXJNRgWNi/2Ag+MnlXxkALTaSWkj9SgVnYRA 7UBrWXvf7brDX9WjqvY/zcuPNad/thJHg1p2kLMmg+DdyEvL7bxIaWKHaSIgHTo5 Df1H1hWHpPvqdqoea6CpK//ORhcc4Td7Cc3QgqZU4UzZGz6ikdvaqFqsVJ1uCHas 0+beNnCpF1r8oyWgIn0ZEGnXucTJf+qNpD6wyvqzTTQGVuqPyh6MIaB/pGbpgtBr /R80PaPY -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:49 2025 by rpki-client