$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa File: D8B53FA8252F11EDA2A99B4FC4F9AE02.roa (raw, json) Hash identifier: /yBu/zwfcX+oKi6BnzAOnYTOF3Zaw9CZ4h/a7BhBGDk= Subject key identifier: 8E:2F:73:13:82:A3:1D:52:B9:5A:A0:79:B7:81:A0:76:55:B7:A4:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F93 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa Signing time: Thu 30 May 2024 16:24:25 +0000 ROA not before: Thu 30 May 2024 16:24:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150074 IP address blocks: 103.91.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36755 (0x8f93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:24:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a839-a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:62:1f:e8:88:dd:0f:7b:d7:55:23:21:19: 13:dc:7c:96:ed:e4:9f:01:ca:be:cc:0b:e5:53:da: c2:55:22:98:07:21:de:a9:9c:a4:a7:a2:43:7a:67: 03:87:9f:6c:48:8d:38:48:fe:f1:fa:a3:94:85:98: f6:0f:3f:78:71:f5:73:6f:25:20:3a:b3:3b:8c:3d: 1e:fd:5a:5d:c2:66:e2:40:e8:3b:ff:27:04:73:52: 86:39:4f:bb:51:99:d1:61:81:3a:c0:de:ae:ef:8f: 52:6b:1e:9e:f8:aa:11:fa:8a:92:e8:59:77:cc:da: fa:2e:2b:5f:32:c2:9c:14:5f:67:d0:e5:56:94:d0: ff:64:f0:21:5f:0a:56:76:e7:1a:07:39:7b:21:e1: 7f:c5:38:d7:d6:0e:43:70:ff:1d:af:7a:60:bf:3b: 74:24:39:c9:e8:4a:28:ac:f2:d8:7b:74:b8:87:a0: 4d:ef:88:ed:33:b4:6f:1d:2b:40:88:75:a4:c3:50: 25:56:da:9f:60:c6:22:eb:6e:f8:26:ba:10:ec:9f: 84:6e:f7:af:dd:4f:fe:24:8a:ba:83:a8:f9:0f:b0: ec:88:29:ed:75:91:06:33:61:aa:ef:07:86:14:f8: 45:8b:55:fc:55:88:64:98:4b:d3:1f:67:23:6a:6d: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:73:13:82:A3:1D:52:B9:5A:A0:79:B7:81:A0:76:55:B7:A4:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B53FA8252F11EDA2A99B4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.60.0/23 Signature Algorithm: sha256WithRSAEncryption a3:ad:82:6a:37:b0:f4:23:f1:6e:33:5f:a8:0d:48:c8:07:c4: 2e:94:71:90:63:97:c3:a0:2f:ff:a8:64:38:9d:9d:30:b7:4e: 99:d5:9c:c7:60:ce:29:63:45:e4:b1:1a:03:03:9a:ae:32:70: 46:4a:8e:6f:c7:1a:50:04:6d:8d:16:d1:41:8e:a0:b8:ea:75: ce:52:d2:7d:10:88:66:76:42:b6:19:d7:61:f6:f2:2c:ee:c9: 48:b9:37:3d:c5:05:1d:36:08:f7:fe:39:2b:db:a8:5b:d4:4c: 7d:ec:03:5f:9d:97:b2:32:0e:32:2e:95:d0:4c:d0:9f:16:1a: a6:6f:c6:81:0f:21:c3:90:33:45:3c:a6:a3:06:64:70:f4:05: be:29:6e:cf:aa:cf:9f:be:b9:5a:09:4d:59:42:d6:3c:c1:90: ae:25:cd:a6:e0:0a:0f:ec:0f:7c:d0:3b:5e:ad:19:b4:f4:78: 49:cc:da:9b:68:37:8f:3a:7c:f7:71:ce:5e:ec:78:35:4f:e9: 13:09:91:05:82:58:2f:6c:26:1c:cb:78:76:94:ea:05:3a:a7: 47:a7:a7:f2:92:fa:b0:9a:0b:85:a6:a4:bf:30:3d:be:7f:01: 24:a9:b1:6a:8e:e7:39:2d:24:6c:e5:4c:e3:03:df:0b:f0:98: 07:07:61:1b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI+TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjQyNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4MzktYTFhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLvYh/oiN0Pe9dVIyEZE9x8lu3knwHKvswL5VPawlUimAch3qmcpKeiQ3pn A4efbEiNOEj+8fqjlIWY9g8/eHH1c28lIDqzO4w9Hv1aXcJm4kDoO/8nBHNShjlP u1GZ0WGBOsDeru+PUmsenviqEfqKkuhZd8za+i4rXzLCnBRfZ9DlVpTQ/2TwIV8K VnbnGgc5eyHhf8U419YOQ3D/Ha96YL87dCQ5yehKKKzy2Ht0uIegTe+I7TO0bx0r QIh1pMNQJVban2DGIutu+Ca6EOyfhG73r91P/iSKuoOo+Q+w7Igp7XWRBjNhqu8H hhT4RYtV/FWIZJhL0x9nI2ptFPUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSOL3MT gqMdUrlaoHm3gaB2VbekRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4QjUzRkE4 MjUyRjExRURBMkE5OUI0RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ1s8MA0GCSqGSIb3DQEBCwUAA4IBAQCjrYJqN7D0I/Fu M1+oDUjIB8QulHGQY5fDoC//qGQ4nZ0wt06Z1ZzHYM4pY0XksRoDA5quMnBGSo5v xxpQBG2NFtFBjqC46nXOUtJ9EIhmdkK2Gddh9vIs7slIuTc9xQUdNgj3/jkr26hb 1Ex97ANfnZeyMg4yLpXQTNCfFhqmb8aBDyHDkDNFPKajBmRw9AW+KW7Pqs+fvrla CU1ZQtY8wZCuJc2m4AoP7A980DterRm09HhJzNqbaDePOnz3cc5e7Hg1T+kTCZEF glgvbCYcy3h2lOoFOqdHp6fykvqwmguFpqS/MD2+fwEkqbFqjuc5LSRs5UzjA98L 8JgHB2Eb -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:25 2025 by rpki-client