$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa File: D28A5F86771411EE957B4716C4F9AE02.roa (raw, json) Hash identifier: XXlQZ9RQoHIr5jrZmVcraYgzYScqYkbUQJmWQQMVrnA= Subject key identifier: E5:31:17:3A:E5:65:70:AB:B1:2E:0A:87:D2:13:41:52:58:B8:33:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E19 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa Signing time: Thu 30 May 2024 16:18:19 +0000 ROA not before: Thu 30 May 2024 16:18:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142502 IP address blocks: 27.0.253.0/24 maxlen: 24 43.246.104.0/24 maxlen: 24 45.249.124.0/22 maxlen: 22 45.249.124.0/23 maxlen: 24 45.249.236.0/22 maxlen: 24 45.251.244.0/22 maxlen: 24 45.251.252.0/22 maxlen: 24 103.66.116.0/22 maxlen: 24 103.66.144.0/24 maxlen: 24 103.68.50.0/24 maxlen: 24 103.68.51.0/24 maxlen: 24 103.70.96.0/20 maxlen: 24 137.59.128.0/20 maxlen: 24 2407:ca40::/32 maxlen: 32 2407:ca40:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36377 (0x8e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:18:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6cb-9387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:ae:f0:3a:bc:fc:ce:0c:2d:bd:44:ea:ca: 7f:93:31:68:25:c6:fc:07:18:30:a6:8f:69:b8:83: 57:ae:8b:00:18:95:ca:57:28:ba:e4:b2:52:e5:7a: 90:2d:76:de:4d:ec:84:21:26:64:93:12:d5:fa:6d: cc:c2:53:50:88:ed:c3:94:c2:4a:3e:da:c9:3b:61: 21:09:ca:d8:dc:65:4b:79:2c:6b:dc:d9:b2:d1:fb: fd:17:42:92:57:df:05:70:67:92:d6:24:e8:da:51: 98:5a:ab:ca:9b:95:b7:d8:4c:37:72:1e:c3:62:8f: a0:01:77:84:ad:eb:cd:7c:a8:2a:65:31:f7:cb:f6: 89:39:d2:41:bb:07:85:71:c9:e5:47:8d:d4:83:14: 25:f3:72:90:28:e6:64:36:ab:ae:41:82:7d:80:31: d5:fe:7b:1f:67:5a:c3:02:d9:57:bc:ae:77:80:0c: 41:e1:47:1f:d6:22:9c:61:50:bd:1b:1d:56:0d:37: f9:aa:94:1b:d2:2b:e7:bd:e8:9b:00:0a:c5:fa:59: bc:22:00:d7:c8:7c:fe:39:73:1d:74:52:65:21:d2: 6b:90:9e:9c:3a:f0:9a:dd:eb:03:b1:a5:ba:4d:47: be:75:ab:9f:86:d1:f8:8d:dd:c8:56:0e:d9:e9:9e: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:31:17:3A:E5:65:70:AB:B1:2E:0A:87:D2:13:41:52:58:B8:33:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.253.0/24 43.246.104.0/24 45.249.124.0/22 45.249.236.0/22 45.251.244.0/22 45.251.252.0/22 103.66.116.0/22 103.66.144.0/24 103.68.50.0/23 103.70.96.0/20 137.59.128.0/20 IPv6: 2407:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 3d:f1:84:49:55:1b:41:43:fe:5c:14:09:e2:d6:32:0e:44:fe: 28:3c:81:09:cf:5a:fa:69:6d:53:43:6e:c7:4a:3f:6b:1b:50: d8:a8:62:44:78:1c:be:46:da:f1:29:76:b0:bf:a6:52:d1:e7: 58:0b:ac:ea:0f:0e:9e:a8:d2:0b:68:24:4c:1f:a6:f7:99:7c: 87:06:50:ca:e9:e6:ff:13:f8:31:74:1a:ad:66:0b:96:dd:80: 8c:50:f5:c2:b6:4c:79:48:48:4f:f5:6a:c1:1c:11:b8:0e:98: 29:cd:93:d1:22:39:b8:c0:d2:92:16:ed:83:36:db:2e:16:69: cd:ba:06:1c:e7:9c:30:be:12:cd:4d:ec:c8:cd:15:8b:0f:3d: d5:68:10:88:5c:99:02:e1:51:f1:33:b0:10:29:5a:ba:16:ce: 84:7d:47:6d:14:95:96:5c:e0:c7:69:7c:4b:19:63:fa:f3:52: 27:8c:c7:77:fd:59:0e:3a:99:c1:da:4a:9d:51:d2:70:cb:4d: 8c:c6:4b:27:ad:98:37:e0:40:e1:fe:de:0a:78:26:7f:62:8b: ad:5c:b7:4e:de:d1:36:de:01:cc:ab:bb:f8:80:0f:1e:7a:59: 2f:22:50:00:62:82:cb:0b:30:73:89:50:a2:0e:c8:34:86:db: fd:4b:92:62 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIDAI4ZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTgxOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2Y2ItOTM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIbrvA6vPzODC29ROrKf5MxaCXG/AcYMKaPabiDV66LABiVylcouuSyUuV6 kC123k3shCEmZJMS1fptzMJTUIjtw5TCSj7ayTthIQnK2NxlS3ksa9zZstH7/RdC klffBXBnktYk6NpRmFqrypuVt9hMN3Iew2KPoAF3hK3rzXyoKmUx98v2iTnSQbsH hXHJ5UeN1IMUJfNykCjmZDarrkGCfYAx1f57H2dawwLZV7yud4AMQeFHH9YinGFQ vRsdVg03+aqUG9Ir573omwAKxfpZvCIA18h8/jlzHXRSZSHSa5CenDrwmt3rA7Gl uk1HvnWrn4bR+I3dyFYO2eme/xUCAwEAAaOCAuAwggLcMB0GA1UdDgQWBBTlMRc6 5WVwq7EuCofSE0FSWLgzVjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyOEE1Rjg2 NzcxNDExRUU5NTdCNDcxNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGoGCCsGAQUFBwEHAQH/ BFswWTBIBAIAATBCAwQAGwD9AwQAK/ZoAwQCLfl8AwQCLfnsAwQCLfv0AwQCLfv8 AwQCZ0J0AwQAZ0KQAwQBZ0QyAwQEZ0ZgAwQEiTuAMA0EAgACMAcDBQAkB8pAMA0G CSqGSIb3DQEBCwUAA4IBAQA98YRJVRtBQ/5cFAni1jIORP4oPIEJz1r6aW1TQ27H Sj9rG1DYqGJEeBy+RtrxKXawv6ZS0edYC6zqDw6eqNILaCRMH6b3mXyHBlDK6eb/ E/gxdBqtZguW3YCMUPXCtkx5SEhP9WrBHBG4DpgpzZPRIjm4wNKSFu2DNtsuFmnN ugYc55wwvhLNTezIzRWLDz3VaBCIXJkC4VHxM7AQKVq6Fs6EfUdtFJWWXODHaXxL GWP681InjMd3/VkOOpnB2kqdUdJwy02MxksnrZg34EDh/t4KeCZ/YoutXLdO3tE2 3gHMq7v4gA8eelkvIlAAYoLLCzBziVCiDsg0htv9S5Ji -----END CERTIFICATE-----Generated at Sun Feb 16 20:14:47 2025 by rpki-client