$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D05CDA7EEE0711EBA7927F6CC4F9AE02.roa File: D05CDA7EEE0711EBA7927F6CC4F9AE02.roa (raw, json) Hash identifier: TOn+0RShiexiNBZOTyU1MEySRJM5C/WGwDv7nL1u5u4= Subject key identifier: A6:3F:CA:DF:15:EB:17:13:9B:05:27:D8:A9:FD:E1:19:91:69:CE:2E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DED Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D05CDA7EEE0711EBA7927F6CC4F9AE02.roa Signing time: Thu 30 May 2024 16:17:37 +0000 ROA not before: Thu 30 May 2024 16:17:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142444 IP address blocks: 103.170.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36333 (0x8ded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:17:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6a1-3186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:b0:25:7d:f9:18:c3:11:ef:40:d0:4a:00: 7b:8e:8c:b0:63:c6:cf:55:b9:4f:f6:6a:b6:66:e1: c4:77:10:60:20:5b:93:87:82:2a:1b:1a:f9:8f:5c: 3b:23:2d:a4:89:8c:b4:d8:93:d0:a3:44:85:3d:49: dd:78:68:39:e9:14:67:e6:d5:dc:73:d4:e9:a5:54: e4:b5:f6:a9:f6:a8:59:bd:93:bf:14:fb:76:21:28: 75:89:c9:7b:cf:4a:a7:d6:ff:20:d4:98:b4:96:9a: ce:bc:33:15:13:a4:38:06:1b:41:c4:df:9c:1c:af: 83:57:62:91:5a:a7:1f:94:cf:34:5d:9c:d6:c5:0c: b8:e7:86:4c:fa:08:a8:2b:50:5d:03:24:15:72:47: b6:cd:6e:3d:d0:3c:60:03:2c:d2:f0:aa:3f:bd:08: 8a:b5:7d:47:50:4e:75:14:0a:b2:3a:65:18:1e:d1: cd:52:34:a2:03:0b:05:5b:cb:13:77:5a:18:3e:a6: 5e:4e:60:ed:f9:3e:25:69:30:65:c9:50:14:0a:b3: 8c:3f:ed:a6:43:ce:cc:9d:4a:d4:7b:1e:51:2c:e4: 6d:b4:d1:7a:88:81:10:41:50:62:d8:0f:9f:8b:df: a8:72:91:01:01:1c:dc:1f:ba:38:ab:f1:d3:ad:29: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:CA:DF:15:EB:17:13:9B:05:27:D8:A9:FD:E1:19:91:69:CE:2E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D05CDA7EEE0711EBA7927F6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.66.0/23 Signature Algorithm: sha256WithRSAEncryption 48:5b:a3:7b:33:a0:ed:41:44:9f:55:a6:41:d6:01:a7:c5:86: 31:4f:0b:a7:08:a9:88:27:9e:19:9b:b8:ab:91:8d:d9:ba:a7: 25:ce:9c:0a:0d:ab:fd:6d:d5:3c:10:98:06:18:d9:5a:ed:b9: fa:9b:4d:24:ff:75:1e:5f:82:62:b9:c5:36:f7:f4:f0:86:98: cf:47:97:0b:c7:4c:38:96:7c:e0:8b:47:41:ff:cf:1f:79:42: ff:f0:7f:42:52:09:1e:58:45:33:8a:5b:bf:38:e6:5d:e6:5f: 18:94:5b:a3:ad:56:9d:e3:90:6c:ea:f3:a1:dd:28:25:7c:ed: ef:68:91:f3:3f:27:7a:82:d5:45:4d:9b:e2:0d:64:1d:96:a6: 39:7c:ba:db:27:bf:3a:d2:a5:85:03:9d:62:81:ae:4e:6e:10: 67:b2:be:9c:01:57:e6:82:9e:3d:91:f0:32:78:68:8d:85:bd: 70:7a:39:43:61:3a:5b:ce:d4:eb:5d:8b:c3:1e:2f:51:16:c4: 1e:d4:2d:4b:c0:8e:06:cc:9a:e9:43:98:98:c2:9c:0e:8d:20: 4c:e2:9c:b5:d3:04:2d:1e:6c:09:aa:02:91:fa:32:d2:09:5f: d2:5f:28:fb:fa:9b:44:13:9f:a0:9d:99:8e:5e:7f:05:15:c1: 45:73:5b:c9 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI3tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTczN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2YTEtMzE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOJsCV9+RjDEe9A0EoAe46MsGPGz1W5T/ZqtmbhxHcQYCBbk4eCKhsa+Y9c OyMtpImMtNiT0KNEhT1J3XhoOekUZ+bV3HPU6aVU5LX2qfaoWb2TvxT7diEodYnJ e89Kp9b/INSYtJaazrwzFROkOAYbQcTfnByvg1dikVqnH5TPNF2c1sUMuOeGTPoI qCtQXQMkFXJHts1uPdA8YAMs0vCqP70IirV9R1BOdRQKsjplGB7RzVI0ogMLBVvL E3daGD6mXk5g7fk+JWkwZclQFAqzjD/tpkPOzJ1K1HseUSzkbbTReoiBEEFQYtgP n4vfqHKRAQEc3B+6OKvx060p2asCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSmP8rf FesXE5sFJ9ip/eEZkWnOLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QwNUNEQTdF RUUwNzExRUJBNzkyN0Y2Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6pCMA0GCSqGSIb3DQEBCwUAA4IBAQBIW6N7M6DtQUSf VaZB1gGnxYYxTwunCKmIJ54Zm7irkY3ZuqclzpwKDav9bdU8EJgGGNla7bn6m00k /3UeX4JiucU29/TwhpjPR5cLx0w4lnzgi0dB/88feUL/8H9CUgkeWEUzilu/OOZd 5l8YlFujrVad45Bs6vOh3SglfO3vaJHzPyd6gtVFTZviDWQdlqY5fLrbJ7860qWF A51iga5ObhBnsr6cAVfmgp49kfAyeGiNhb1wejlDYTpbztTrXYvDHi9RFsQe1C1L wI4GzJrpQ5iYwpwOjSBM4py10wQtHmwJqgKR+jLSCV/SXyj7+ptEE5+gnZmOXn8F FcFFc1vJ -----END CERTIFICATE-----Generated at Fri Nov 22 13:35:16 2024 by rpki-client on console-fra.rpki-client.org