$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBD7CFF4854C11EBBA917284C4F9AE02.roa File: DBD7CFF4854C11EBBA917284C4F9AE02.roa (raw, json) Hash identifier: WKH9CgLhsjkUt8xoTlx8fn6LFRmixRRaeAZuoj55vw0= Subject key identifier: 4B:E5:DB:63:13:D3:FC:57:42:DD:31:87:83:44:4D:A7:E7:68:4E:BD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8D9F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBD7CFF4854C11EBBA917284C4F9AE02.roa Signing time: Thu 30 May 2024 16:16:21 +0000 ROA not before: Thu 30 May 2024 16:16:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141787 IP address blocks: 103.164.19.0/24 maxlen: 24 2001:df6:3a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36255 (0x8d9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:16:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a655-aec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:75:b0:48:7d:92:33:7c:fc:72:2f:34:d9: e3:7a:90:a2:ba:03:c5:d5:ae:bc:4e:42:f1:37:50: 45:0c:2b:34:b7:c3:11:52:f2:cb:ee:78:ed:f1:3f: a8:19:84:d3:d5:e8:3b:e4:18:39:6a:52:ed:f6:72: 65:fd:65:9a:e9:59:94:2d:b8:52:42:bc:f1:03:56: e6:7f:b1:60:a7:57:26:b7:5f:82:e6:9f:65:3c:68: f5:99:e2:a2:28:bd:2d:f7:0f:db:70:19:36:56:22: b4:cd:09:85:86:ac:7b:55:13:1e:c4:fb:f4:f6:98: 6b:4f:fe:b8:c0:4d:8d:70:d4:78:c0:3d:bb:92:c4: 63:d7:e5:2b:a2:5c:5d:bb:13:58:f6:c5:64:8a:3e: 6a:2e:01:1b:65:81:14:2f:ec:fd:5a:a6:9b:cb:db: bc:5d:b3:ba:a7:ba:25:83:bd:f8:54:47:4f:ca:bb: 05:48:d4:55:2b:7c:bf:83:4f:36:65:70:1a:40:28: c1:9d:5e:49:0e:f5:0d:bb:0c:02:b0:23:de:fa:64: dd:10:ce:bf:0b:fb:ee:4b:ad:b0:1c:33:40:bc:70: da:4f:72:4f:92:f6:08:0a:c2:68:be:e6:3b:73:07: 1c:e5:a4:23:a7:b9:47:80:c3:8e:83:b0:48:7e:76: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:DB:63:13:D3:FC:57:42:DD:31:87:83:44:4D:A7:E7:68:4E:BD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBD7CFF4854C11EBBA917284C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.19.0/24 IPv6: 2001:df6:3a80::/48 Signature Algorithm: sha256WithRSAEncryption ab:62:df:8a:5d:17:cc:c9:d6:02:cb:7f:42:12:00:e9:b1:48: a9:03:04:f2:56:72:73:a5:e4:0e:a4:c5:6a:bb:08:a6:e0:50: 9f:a8:a8:c4:e9:bb:4e:ba:62:fe:5b:81:0f:d3:8f:58:d4:a9: 39:28:f4:2f:8c:e5:a7:ab:99:e8:63:2a:6c:c6:90:ed:7c:ec: 3a:f0:ad:7b:78:83:9c:a8:3e:53:8b:5b:62:8d:47:22:56:dc: 02:d6:93:3c:d6:1c:0e:02:00:bc:76:c7:e6:ce:af:02:03:f7: df:09:20:45:e7:07:8c:d3:a0:f3:b9:b1:6d:cb:13:66:b2:aa: 64:47:bd:b8:1b:ce:ad:20:ac:b6:b0:b5:35:a9:75:44:2f:28: e5:19:cd:d5:c6:37:f4:be:96:42:f4:82:96:68:94:dd:f2:8a: 8c:24:ac:a6:b4:d7:5f:d6:e4:66:39:f3:f9:b4:fb:e2:65:c5: a6:36:29:ee:aa:c6:44:f8:fa:bc:20:87:cb:22:d6:71:4a:dd: 51:a6:1a:27:62:7c:38:ed:33:7e:8f:19:19:16:b4:7a:2b:ea: e1:3c:73:bd:58:1d:a4:d4:d7:9a:f8:d8:4f:02:01:de:f4:b9: e8:fb:f4:d4:83:5d:ea:6b:aa:93:33:05:27:6b:f8:bf:b0:fd: 92:be:eb:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI2fMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTYyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2NTUtYWVjNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4qdbBIfZIzfPxyLzTZ43qQoroDxdWuvE5C8TdQRQwrNLfDEVLyy+547fE/ qBmE09XoO+QYOWpS7fZyZf1lmulZlC24UkK88QNW5n+xYKdXJrdfguafZTxo9Zni oii9LfcP23AZNlYitM0JhYase1UTHsT79PaYa0/+uMBNjXDUeMA9u5LEY9flK6Jc XbsTWPbFZIo+ai4BG2WBFC/s/Vqmm8vbvF2zuqe6JYO9+FRHT8q7BUjUVSt8v4NP NmVwGkAowZ1eSQ71DbsMArAj3vpk3RDOvwv77kutsBwzQLxw2k9yT5L2CArCaL7m O3MHHOWkI6e5R4DDjoOwSH52ITsCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRL5dtj E9P8V0LdMYeDRE2n52hOvTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCRDdDRkY0 ODU0QzExRUJCQTkxNzI4NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ6QTMA8EAgACMAkDBwAgAQ32OoAwDQYJKoZIhvcNAQEL BQADggEBAKti34pdF8zJ1gLLf0ISAOmxSKkDBPJWcnOl5A6kxWq7CKbgUJ+oqMTp u066Yv5bgQ/Tj1jUqTko9C+M5aermehjKmzGkO187DrwrXt4g5yoPlOLW2KNRyJW 3ALWkzzWHA4CALx2x+bOrwID998JIEXnB4zToPO5sW3LE2ayqmRHvbgbzq0grLaw tTWpdUQvKOUZzdXGN/S+lkL0gpZolN3yiowkrKa011/W5GY58/m0++JlxaY2Ke6q xkT4+rwgh8si1nFK3VGmGidifDjtM36PGRkWtHor6uE8c71YHaTU15r42E8CAd70 uej79NSDXeprqpMzBSdr+L+w/ZK+604= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:10 2024 by rpki-client on console-fra.rpki-client.org