$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa File: E59FBE328DB211ED91240187C4F9AE02.roa (raw, json) Hash identifier: viEeV+FxR+ZixHe/LKkzED+pVgZ/pbDOIiPW61R+NWQ= Subject key identifier: EA:C3:7F:0C:97:15:73:54:43:74:A8:EF:1B:AD:98:39:48:C5:14:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F18 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa Signing time: Thu 30 May 2024 16:22:23 +0000 ROA not before: Thu 30 May 2024 16:22:23 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149541 IP address blocks: 103.181.148.0/23 maxlen: 24 2001:df1:d840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36632 (0x8f18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:22:23 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a7bf-b68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:22:4b:ff:5e:1d:2e:78:64:78:15:2b:6d: e0:da:31:e0:5c:11:69:95:a3:e3:cf:1e:5a:0d:d1: e5:64:0c:be:d0:e7:f3:f5:9d:a5:5c:c5:00:3e:9c: cc:c6:ea:12:d4:ba:53:18:92:96:84:82:55:c3:cc: a0:e1:53:1f:da:3e:65:3e:dc:3b:b3:70:83:b3:4c: 9a:d2:f5:19:60:51:c4:66:27:21:5d:b7:bd:a9:56: 60:d8:bc:5a:6c:f8:8e:81:ca:1c:d2:83:38:d0:aa: d0:f5:1f:26:2b:1f:09:e9:d2:f8:10:b7:99:81:2d: 9a:77:07:4f:cb:c7:53:aa:c9:6f:60:29:3d:78:9b: f8:48:6c:62:c6:22:21:b1:e5:83:35:5d:2f:4c:27: 8f:5e:cb:14:d8:d7:26:4a:26:e6:d8:09:5e:4d:71: 1c:95:b4:ed:83:36:4f:e6:a4:ac:26:ea:d8:86:aa: 92:b9:ef:9d:9d:64:fe:83:16:74:3a:0d:81:c5:ad: c1:1c:e0:af:15:39:52:2c:c9:48:fe:73:ba:95:16: 7e:d0:05:c1:85:63:64:75:1f:9d:07:e8:36:f9:f3: 13:4c:ea:ba:e9:cc:bb:bd:2b:88:7a:b0:b2:18:75: ab:2f:51:93:88:e4:17:d7:42:49:13:0b:c9:85:db: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:7F:0C:97:15:73:54:43:74:A8:EF:1B:AD:98:39:48:C5:14:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.148.0/23 IPv6: 2001:df1:d840::/48 Signature Algorithm: sha256WithRSAEncryption 1d:b8:f3:ed:39:39:a2:10:8d:46:2b:26:ec:00:36:53:59:53: 3b:28:59:77:5b:79:c9:0a:8b:1f:3b:ad:14:ed:02:0d:00:60: 99:ec:48:46:61:cf:19:76:01:d1:04:01:ce:46:85:10:49:f3: bd:9b:71:b7:cd:62:67:bf:34:92:21:f6:85:aa:35:05:5f:45: 19:b0:47:47:20:89:92:b2:07:ac:16:69:cd:6e:b7:21:23:69: b4:91:05:44:d5:5f:f1:c8:7c:b8:13:52:4a:5c:64:24:e8:fe: 56:9c:67:a1:25:6e:6c:3c:ae:73:77:8b:ea:75:87:1d:6e:f3: 03:67:f5:81:97:51:71:31:dd:59:ed:11:83:e4:cc:5a:9a:ad: e5:7e:67:4f:be:b3:ce:61:27:a4:58:68:e0:f5:eb:9b:9c:bc: a1:40:67:a7:db:1b:af:1f:04:0b:bc:72:16:2f:54:37:a4:ff: ed:7b:30:78:77:29:82:ba:b4:93:dd:e7:37:1d:73:53:0f:c0: 7c:bc:20:88:7e:25:4d:de:2a:3d:0c:c6:35:a2:50:cf:f3:56: 16:cf:62:6f:8d:ab:cf:4c:c5:36:d0:2f:33:33:40:65:c0:0d: 8c:3d:d6:20:3b:37:b0:ef:21:72:0c:61:d8:ab:53:e9:39:3b: 9a:a5:20:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI8YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjIyM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3YmYtYjY4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnpIkv/Xh0ueGR4FStt4Nox4FwRaZWj488eWg3R5WQMvtDn8/WdpVzFAD6c zMbqEtS6UxiSloSCVcPMoOFTH9o+ZT7cO7Nwg7NMmtL1GWBRxGYnIV23valWYNi8 Wmz4joHKHNKDONCq0PUfJisfCenS+BC3mYEtmncHT8vHU6rJb2ApPXib+EhsYsYi IbHlgzVdL0wnj17LFNjXJkom5tgJXk1xHJW07YM2T+akrCbq2IaqkrnvnZ1k/oMW dDoNgcWtwRzgrxU5UizJSP5zupUWftAFwYVjZHUfnQfoNvnzE0zquunMu70riHqw shh1qy9Rk4jkF9dCSRMLyYXbG/0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTqw38M lxVzVEN0qO8brZg5SMUUQTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U1OUZCRTMy OERCMjExRUQ5MTI0MDE4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7WUMA8EAgACMAkDBwAgAQ3x2EAwDQYJKoZIhvcNAQEL BQADggEBAB248+05OaIQjUYrJuwANlNZUzsoWXdbeckKix87rRTtAg0AYJnsSEZh zxl2AdEEAc5GhRBJ872bcbfNYme/NJIh9oWqNQVfRRmwR0cgiZKyB6wWac1utyEj abSRBUTVX/HIfLgTUkpcZCTo/lacZ6Elbmw8rnN3i+p1hx1u8wNn9YGXUXEx3Vnt EYPkzFqareV+Z0++s85hJ6RYaOD165ucvKFAZ6fbG68fBAu8chYvVDek/+17MHh3 KYK6tJPd5zcdc1MPwHy8IIh+JU3eKj0MxjWiUM/zVhbPYm+Nq89MxTbQLzMzQGXA DYw91iA7N7DvIXIMYdirU+k5O5qlIFw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:20:12 2025 by rpki-client