$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa File: D52A0C8AF42E11EA9B1EE087C4F9AE02.roa (raw, json) Hash identifier: 677XC7EXBl1Atsxhry5MrLUMtErQl/vrfky4co2Kphg= Subject key identifier: 33:98:73:9F:6A:A5:D3:25:29:C6:1B:EA:F2:0C:29:3F:E1:98:A3:F4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8CCB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa Signing time: Thu 30 May 2024 16:12:51 +0000 ROA not before: Thu 30 May 2024 16:12:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140148 IP address blocks: 103.155.54.0/24 maxlen: 24 103.159.90.0/24 maxlen: 24 2001:df2:3240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36043 (0x8ccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:12:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a582-1bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:ec:19:95:ca:3a:2f:23:06:dd:01:78:ab: 9d:8b:4e:41:10:03:c6:fc:73:25:2c:e1:6e:96:0e: 37:f2:d4:65:bf:a5:3e:83:5b:5a:07:29:95:7a:28: 4f:83:07:29:61:78:36:7a:88:0e:3a:18:f6:05:cb: b9:40:05:f6:07:92:25:74:ac:7c:2c:75:c0:f9:83: 86:52:a9:70:eb:16:06:9e:2a:33:af:b2:2e:2e:3c: 6c:a6:d6:48:6b:f8:52:ce:37:2c:e0:84:56:43:9d: 4d:66:ce:ad:10:cf:cc:9a:fe:49:61:fa:f8:9e:c7: e2:55:c5:15:88:69:b2:25:39:3a:c1:97:ba:78:2f: 4b:23:68:c1:48:23:26:a1:e3:ea:1a:07:18:15:a4: 9a:42:c1:c4:3a:73:12:71:9b:ad:4c:72:74:48:4f: 87:07:57:b6:4b:bc:62:75:01:67:47:87:48:dc:17: cf:ff:07:2a:ba:f4:27:f5:2d:22:37:15:7a:f6:3a: ce:eb:8f:cf:2d:fb:e5:df:1c:0d:4b:0a:0e:86:a0: 53:e5:6b:3c:00:32:1d:3e:fb:f1:32:83:77:ab:bd: eb:8b:f6:b3:af:3c:2f:d3:88:c6:78:9d:03:18:e6: 11:18:5d:21:84:1a:9a:37:2f:e5:5b:d6:a1:93:70: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:73:9F:6A:A5:D3:25:29:C6:1B:EA:F2:0C:29:3F:E1:98:A3:F4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.54.0/24 103.159.90.0/24 IPv6: 2001:df2:3240::/48 Signature Algorithm: sha256WithRSAEncryption 89:82:57:ff:c1:39:72:aa:1f:da:e7:19:db:fb:a4:0d:ff:3a: e5:db:d6:d0:8c:aa:7e:55:6a:d8:2c:37:b1:02:90:c4:9b:e4: 03:88:b3:d4:cc:cc:31:b4:18:04:95:39:34:1a:f3:00:33:d5: d8:1d:e3:d3:71:38:1b:77:29:d3:93:9c:5b:dd:59:6b:9f:ec: ee:72:4d:f7:d6:71:18:11:b4:94:0c:3b:dc:e0:f0:9f:77:d0: b6:e0:cc:a5:bb:4f:57:5d:97:bd:fd:27:3e:de:aa:32:30:72: 6f:54:f7:e7:1f:ff:88:35:04:9a:da:cd:1d:cd:b9:65:d5:04: 15:3d:50:0a:1a:60:81:65:9b:97:e7:00:03:da:89:94:6a:de: 23:52:2d:66:74:43:d9:e6:66:75:88:5e:35:df:ab:4e:eb:e0: 9d:a2:b2:df:f9:a4:3c:ef:8c:16:ef:7a:79:4a:ef:ff:48:d0: d8:86:f7:10:55:29:5f:50:19:c1:59:5f:65:52:2b:d4:9e:85: 37:db:2c:09:6f:6b:bf:39:af:a0:9d:36:cf:62:35:b9:9e:94: 53:70:b1:de:05:78:59:be:05:09:71:8a:f5:b4:4d:56:de:90: 70:e3:6c:b6:1b:ed:57:d3:ef:e9:8d:67:13:9b:be:85:0a:a8: f0:51:f5:de -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIzLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTI1MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE1ODItMWJmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKua7BmVyjovIwbdAXirnYtOQRADxvxzJSzhbpYON/LUZb+lPoNbWgcplXoo T4MHKWF4NnqIDjoY9gXLuUAF9geSJXSsfCx1wPmDhlKpcOsWBp4qM6+yLi48bKbW SGv4Us43LOCEVkOdTWbOrRDPzJr+SWH6+J7H4lXFFYhpsiU5OsGXungvSyNowUgj JqHj6hoHGBWkmkLBxDpzEnGbrUxydEhPhwdXtku8YnUBZ0eHSNwXz/8HKrr0J/Ut IjcVevY6zuuPzy375d8cDUsKDoagU+VrPAAyHT778TKDd6u964v2s688L9OIxnid AxjmERhdIYQamjcv5VvWoZNwRm8CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQzmHOf aqXTJSnGG+ryDCk/4Zij9DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q1MkEwQzhB RjQyRTExRUE5QjFFRTA4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ5s2AwQAZ59aMA8EAgACMAkDBwAgAQ3yMkAwDQYJKoZI hvcNAQELBQADggEBAImCV//BOXKqH9rnGdv7pA3/OuXb1tCMqn5VatgsN7ECkMSb 5AOIs9TMzDG0GASVOTQa8wAz1dgd49NxOBt3KdOTnFvdWWuf7O5yTffWcRgRtJQM O9zg8J930LbgzKW7T1ddl739Jz7eqjIwcm9U9+cf/4g1BJrazR3NuWXVBBU9UAoa YIFlm5fnAAPaiZRq3iNSLWZ0Q9nmZnWIXjXfq07r4J2ist/5pDzvjBbvenlK7/9I 0NiG9xBVKV9QGcFZX2VSK9SehTfbLAlva785r6CdNs9iNbmelFNwsd4FeFm+BQlx ivW0TVbekHDjbLYb7VfT7+mNZxObvoUKqPBR9d4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:29 2025 by rpki-client