$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6FD6AF63DFD11ECAB24376CC4F9AE02.roa File: D6FD6AF63DFD11ECAB24376CC4F9AE02.roa (raw, json) Hash identifier: ZSqKFatblD4efH3C+Ug5hpnWJkAUHhHWcBpvDe+HiFY= Subject key identifier: 46:83:FE:35:98:F4:EB:4E:05:31:98:EA:F8:46:D6:A7:7F:F8:04:B0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E9C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6FD6AF63DFD11ECAB24376CC4F9AE02.roa Signing time: Thu 30 May 2024 16:20:25 +0000 ROA not before: Thu 30 May 2024 16:20:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147239 IP address blocks: 103.175.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36508 (0x8e9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:20:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a749-8cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:96:1a:dd:89:de:10:2b:11:7a:57:dd:cb: 97:e9:0b:24:ae:79:db:c9:5c:9c:c9:42:b8:17:ff: 74:51:e2:ef:cf:9d:77:c2:58:ea:f0:bc:3e:f9:5a: 5b:6e:ec:eb:fc:10:2f:db:b6:bb:6b:c2:25:9d:5a: 23:3c:00:c8:80:94:df:66:cc:17:7f:07:d5:a2:f8: 31:b0:a1:d1:76:e9:24:c7:64:71:fd:2b:84:e4:64: d3:09:2d:3f:dd:85:97:4b:38:af:11:2b:f3:72:6c: ce:fb:a5:0e:96:d6:56:09:6d:1d:be:37:ed:5b:a4: b3:44:41:88:0b:a4:48:04:83:e0:a2:92:0e:6e:b8: 93:c3:74:7a:4b:d8:3a:12:17:98:66:ab:01:6b:97: c7:84:2d:4f:37:2e:1b:97:36:69:5c:05:7d:44:84: 81:45:b5:49:5e:59:36:8b:9e:b1:a6:84:6e:00:c5: c4:7a:c1:32:eb:e9:0f:cc:b7:08:5d:75:fe:8b:8a: bf:4b:04:38:ab:71:d9:0f:1c:52:0f:37:d4:ed:14: 0a:de:83:80:a1:29:68:07:69:36:42:ae:4c:50:93: 79:2e:d0:09:0d:d3:0c:77:92:f4:56:3b:31:07:67: af:17:0c:63:7e:37:ca:75:41:50:17:5d:79:7f:66: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:83:FE:35:98:F4:EB:4E:05:31:98:EA:F8:46:D6:A7:7F:F8:04:B0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6FD6AF63DFD11ECAB24376CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.71.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:ac:c4:15:dc:8d:96:dd:05:6c:06:32:fd:6e:c9:53:ea:84: a7:a6:86:9f:d4:43:7b:f5:15:e7:ef:74:1e:c2:28:3d:0a:d6: 81:7f:69:4a:3d:a3:e2:48:aa:c7:8b:44:12:db:39:c7:71:75: 07:fb:35:0f:9c:43:b6:81:a0:d1:87:04:e9:18:b0:7b:c4:08: 16:f8:50:92:b1:19:ae:8c:f8:31:75:f7:a8:cb:e9:cb:6c:d1: 87:82:c7:7d:ce:ff:51:5a:32:dd:e4:43:b7:dd:e8:f0:e8:56: 77:ab:75:9d:e6:d8:92:15:7c:8d:55:3f:db:c9:13:07:6e:f6: ed:5d:74:96:30:69:28:05:2d:a8:05:a4:3d:04:ee:c0:b4:80: c1:b8:bb:3c:72:ff:f5:e5:c0:5f:d1:a0:be:fa:55:c8:bb:f2: ed:cc:d3:70:57:66:26:c9:d6:32:dc:7e:22:25:48:35:59:55: 5d:36:a5:0d:96:a5:a0:51:11:29:1c:90:77:80:90:e5:5b:2d: 69:21:a9:9c:48:2f:ce:dc:6b:09:66:76:a0:f3:63:c1:5f:f7: d4:4c:00:28:5b:4d:b1:10:8f:e3:a6:3d:6c:e8:63:13:f4:30: a7:b2:dc:78:c1:53:bb:2d:30:6f:6a:13:2f:94:e8:d2:fb:ae: e9:2d:a9:1f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI6cMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjAyNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3NDktOGNiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRGlhrdid4QKxF6V93Ll+kLJK5528lcnMlCuBf/dFHi78+dd8JY6vC8Pvla W27s6/wQL9u2u2vCJZ1aIzwAyICU32bMF38H1aL4MbCh0XbpJMdkcf0rhORk0wkt P92Fl0s4rxEr83JszvulDpbWVgltHb437Vuks0RBiAukSASD4KKSDm64k8N0ekvY OhIXmGarAWuXx4QtTzcuG5c2aVwFfUSEgUW1SV5ZNouesaaEbgDFxHrBMuvpD8y3 CF11/ouKv0sEOKtx2Q8cUg831O0UCt6DgKEpaAdpNkKuTFCTeS7QCQ3TDHeS9FY7 MQdnrxcMY343ynVBUBddeX9mHt0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRGg/41 mPTrTgUxmOr4Rtanf/gEsDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2RkQ2QUY2 M0RGRDExRUNBQjI0Mzc2Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ69HMA0GCSqGSIb3DQEBCwUAA4IBAQA9rMQV3I2W3QVs BjL9bslT6oSnpoaf1EN79RXn73Qewig9CtaBf2lKPaPiSKrHi0QS2znHcXUH+zUP nEO2gaDRhwTpGLB7xAgW+FCSsRmujPgxdfeoy+nLbNGHgsd9zv9RWjLd5EO33ejw 6FZ3q3Wd5tiSFXyNVT/byRMHbvbtXXSWMGkoBS2oBaQ9BO7AtIDBuLs8cv/15cBf 0aC++lXIu/LtzNNwV2YmydYy3H4iJUg1WVVdNqUNlqWgUREpHJB3gJDlWy1pIamc SC/O3GsJZnag82PBX/fUTAAoW02xEI/jpj1s6GMT9DCnstx4wVO7LTBvahMvlOjS +67pLakf -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:30 2025 by rpki-client