$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa File: D2C21CB203CD11ECA480B07CC4F9AE02.roa (raw, json) Hash identifier: ypO81SaS1FpN4CPqmiVlx2vdNfahEyerw6d0QXw+aSY= Subject key identifier: AC:D4:59:E8:BC:3D:51:7F:E4:34:67:66:99:36:14:94:38:E6:86:2C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89DF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa Signing time: Thu 30 May 2024 16:00:39 +0000 ROA not before: Thu 30 May 2024 16:00:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134899 IP address blocks: 36.255.248.0/22 maxlen: 24 45.118.216.0/22 maxlen: 24 103.59.4.0/22 maxlen: 24 103.71.192.0/22 maxlen: 24 103.175.250.0/23 maxlen: 24 103.210.64.0/22 maxlen: 24 2404:9fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35295 (0x89df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:00:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a2a6-59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:24:59:45:bb:99:f8:31:1c:b7:31:c3:e6:2f: 88:fb:b0:27:85:11:e3:db:1a:2d:a9:28:cd:7d:64: 62:b6:8f:0c:57:97:f8:14:0f:ce:c5:6e:dd:18:8b: a8:28:ea:06:6b:e5:9a:2e:4c:f1:2b:a2:19:7a:e6: 87:1c:fd:e5:71:bd:d8:60:1f:78:85:39:4d:61:fe: 0d:37:18:3c:c2:a6:bd:f3:fb:70:aa:39:b9:36:9d: 97:df:d9:53:f7:bf:81:79:11:5b:58:e0:26:c3:c9: 5a:cd:f4:a7:11:14:4e:cf:a1:ac:38:a3:57:aa:86: 82:89:2c:91:45:f3:c1:49:29:c1:fd:53:57:41:f3: c2:a4:eb:81:b2:88:2b:83:32:b4:14:85:73:66:65: 6c:72:95:20:b7:05:00:9b:50:e2:62:35:6f:46:65: 50:e3:e4:e8:2d:82:ad:29:7b:15:42:b3:ed:4e:15: 0b:fc:de:72:2c:1c:e6:7a:e6:5f:95:d7:fc:b4:b7: 0b:c7:86:d5:4a:70:4f:22:64:88:9e:c2:f4:21:d1: 77:29:e0:1f:53:2a:0f:08:be:99:09:0b:9e:b3:bd: ab:a6:8a:88:d6:30:b0:21:df:f5:dd:80:84:6c:8a: 0c:09:a5:a7:9d:54:cc:96:46:1b:0b:37:3e:bb:08: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D4:59:E8:BC:3D:51:7F:E4:34:67:66:99:36:14:94:38:E6:86:2C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2C21CB203CD11ECA480B07CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.248.0/22 45.118.216.0/22 103.59.4.0/22 103.71.192.0/22 103.175.250.0/23 103.210.64.0/22 IPv6: 2404:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 33:30:a8:69:48:3d:3b:a0:61:18:32:73:34:e4:28:5f:fb:ec: d1:76:f9:e4:15:b7:5c:d2:8c:89:6e:16:41:d0:ed:b9:21:fa: b5:0d:32:15:e0:3d:31:10:75:3a:d6:df:3f:99:1d:34:c0:ff: ba:b4:e3:bb:69:d8:29:1a:41:64:22:18:49:c7:8d:65:53:42: 05:88:61:6a:d4:e1:c9:e8:24:23:82:97:a9:dc:e0:c6:ca:50: 22:d7:d3:e8:b5:0c:fd:de:51:c2:d4:6f:09:4a:17:6f:c7:43: 97:9e:27:d6:65:73:b3:94:f9:42:46:08:41:fb:d9:45:2d:60: f5:c5:57:b0:41:0f:95:dd:ad:d4:ae:f0:c8:26:bd:0a:ba:4c: b3:45:32:48:e6:b3:16:c1:c5:8e:4e:06:19:90:71:e0:c8:8e: b0:0f:9f:44:ac:f9:33:88:fc:5c:d2:d6:89:c4:44:ac:4a:bf: 62:f8:76:b7:f9:b9:50:69:b8:a2:7d:38:f5:d6:b6:3d:1b:d8: 51:f1:cc:c9:ce:5b:37:05:e9:f2:72:5c:a7:6e:cc:19:8b:34: da:2b:97:7a:16:53:8f:98:c3:dd:08:8a:18:2c:6b:2f:0c:e0: 3c:61:77:af:db:7e:fa:bf:83:74:d5:a7:80:a3:db:c0:b7:bc: ee:7c:80:e0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIDAInfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAzOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyYTYtNTliZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8kWUW7mfgxHLcxw+YviPuwJ4UR49saLakozX1kYraPDFeX+BQPzsVu3RiL qCjqBmvlmi5M8SuiGXrmhxz95XG92GAfeIU5TWH+DTcYPMKmvfP7cKo5uTadl9/Z U/e/gXkRW1jgJsPJWs30pxEUTs+hrDijV6qGgokskUXzwUkpwf1TV0HzwqTrgbKI K4MytBSFc2ZlbHKVILcFAJtQ4mI1b0ZlUOPk6C2CrSl7FUKz7U4VC/zeciwc5nrm X5XX/LS3C8eG1UpwTyJkiJ7C9CHRdyngH1MqDwi+mQkLnrO9q6aKiNYwsCHf9d2A hGyKDAmlp51UzJZGGws3PrsIdFUCAwEAAaOCAsIwggK+MB0GA1UdDgQWBBSs1Fno vD1Rf+Q0Z2aZNhSUOOaGLDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyQzIxQ0Iy MDNDRDExRUNBNDgwQjA3Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCJP/4AwQCLXbYAwQCZzsEAwQCZ0fAAwQBZ6/6AwQCZ9JA MA0EAgACMAcDBQAkBJ/AMA0GCSqGSIb3DQEBCwUAA4IBAQAzMKhpSD07oGEYMnM0 5Chf++zRdvnkFbdc0oyJbhZB0O25Ifq1DTIV4D0xEHU61t8/mR00wP+6tOO7adgp GkFkIhhJx41lU0IFiGFq1OHJ6CQjgpep3ODGylAi19PotQz93lHC1G8JShdvx0OX nifWZXOzlPlCRghB+9lFLWD1xVewQQ+V3a3UrvDIJr0KukyzRTJI5rMWwcWOTgYZ kHHgyI6wD59ErPkziPxc0taJxESsSr9i+Ha3+blQabiifTj11rY9G9hR8czJzls3 BenyclynbswZizTaK5d6FlOPmMPdCIoYLGsvDOA8YXev2376v4N01aeAo9vAt7zu fIDg -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:52 2024 by rpki-client on console-fra.rpki-client.org