$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa File: E8195170EE1E11EC8758DF47C4F9AE02.roa (raw, json) Hash identifier: AJtfDTXyPpjSuFJ3daPqlmqQZqzUerk8WZ0uTE+BBAs= Subject key identifier: 6A:F0:07:11:3F:AF:67:26:95:4A:99:0F:D5:D4:A0:7E:32:C2:CB:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa Signing time: Thu 30 May 2024 16:22:59 +0000 ROA not before: Thu 30 May 2024 16:22:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149586 IP address blocks: 103.186.236.0/23 maxlen: 24 2001:df1:27c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36669 (0x8f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:22:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a7e3-c3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:4a:81:48:7a:8e:94:8c:47:80:f4:a4:b2: 97:6d:a4:84:92:32:77:62:d2:bf:b4:35:5e:d3:24: 11:00:96:7e:c5:7a:cb:cf:e3:a7:dc:89:a0:f7:5a: e3:82:d4:95:6d:1f:40:b4:6f:64:cc:3a:28:c1:25: bd:3c:35:fa:a0:fa:3f:7b:e2:53:fd:61:19:d7:12: e8:8d:16:35:b3:1b:40:e7:26:c1:0b:88:93:d5:1e: f6:5f:e8:00:e3:c9:4e:9c:b9:fb:18:0d:45:13:cb: 5b:5e:e0:53:e9:bf:f1:96:81:6e:1b:d4:80:de:d1: 68:47:52:32:6b:ce:5b:78:d0:e6:27:d2:ca:38:b4: 95:5b:1e:47:2d:fd:b1:23:72:33:83:a3:64:3a:a1: 02:ef:36:f5:7f:2e:9c:81:40:b1:20:8d:27:51:2a: 49:64:46:79:73:f9:38:ba:a5:b4:06:92:9a:6e:9f: 50:1f:15:82:3f:10:05:b3:db:a5:c8:2d:0e:8f:5b: ab:de:47:16:ee:a7:34:fb:ac:42:c3:8d:5d:18:41: 3d:fa:9a:2c:e6:b7:0c:5c:3c:fb:94:df:5b:85:6a: b1:3d:0b:6c:21:57:8c:3c:54:3e:bb:18:d0:a3:d3: eb:96:c4:76:ea:78:1b:2d:a6:02:ba:76:6b:77:d0: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:07:11:3F:AF:67:26:95:4A:99:0F:D5:D4:A0:7E:32:C2:CB:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.236.0/23 IPv6: 2001:df1:27c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:af:3e:aa:39:41:86:04:27:c2:86:b5:4a:1a:3c:e2:3c:ee: 4e:45:33:dc:b4:06:da:72:a7:6f:0c:c7:50:8b:ff:89:db:76: 97:a2:14:f6:db:2d:c6:aa:f3:cb:6d:cb:2c:7c:16:89:a3:f5: f7:9b:f2:be:4f:59:16:55:e3:bf:13:14:08:dc:57:e5:6a:db: 72:36:87:7a:4b:77:b0:2d:e1:15:c2:be:8f:43:d7:e1:b4:3f: d4:7c:1b:76:d6:c1:97:d5:41:07:e8:50:9a:df:2d:16:e9:11: c9:87:c9:7a:fc:5a:b7:c8:7b:27:62:da:76:20:b3:fc:ec:63: 77:1b:21:67:01:7a:4f:9b:d0:ad:ed:e3:b1:d0:1e:44:c4:5a: 42:82:35:28:73:1e:a4:bc:88:86:5b:27:9d:8e:37:08:63:7a: e9:a6:e8:f6:0f:59:45:96:d2:f2:42:dd:ba:fc:8c:8d:a3:ac: 4d:6c:8d:9d:34:8d:1d:3b:ac:8e:99:08:27:5e:bb:33:c7:8c: 2f:37:4e:98:c3:62:de:9a:db:b1:32:7f:6b:84:1c:c4:36:a2: b1:81:e0:6d:0c:2f:50:ea:c3:bd:5a:71:d6:4e:e5:d9:1b:62: fe:35:25:5f:02:96:72:b5:00:6d:7d:1f:98:61:b0:58:7d:56: e8:81:94:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI89MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjI1OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3ZTMtYzNkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxcSoFIeo6UjEeA9KSyl22khJIyd2LSv7Q1XtMkEQCWfsV6y8/jp9yJoPda 44LUlW0fQLRvZMw6KMElvTw1+qD6P3viU/1hGdcS6I0WNbMbQOcmwQuIk9Ue9l/o AOPJTpy5+xgNRRPLW17gU+m/8ZaBbhvUgN7RaEdSMmvOW3jQ5ifSyji0lVseRy39 sSNyM4OjZDqhAu829X8unIFAsSCNJ1EqSWRGeXP5OLqltAaSmm6fUB8Vgj8QBbPb pcgtDo9bq95HFu6nNPusQsONXRhBPfqaLOa3DFw8+5TfW4VqsT0LbCFXjDxUPrsY 0KPT65bEdup4Gy2mArp2a3fQjaMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRq8AcR P69nJpVKmQ/V1KB+MsLLWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U4MTk1MTcw RUUxRTExRUM4NzU4REY0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7rsMA8EAgACMAkDBwAgAQ3xJ8AwDQYJKoZIhvcNAQEL BQADggEBABuvPqo5QYYEJ8KGtUoaPOI87k5FM9y0Btpyp28Mx1CL/4nbdpeiFPbb Lcaq88ttyyx8Fomj9feb8r5PWRZV478TFAjcV+Vq23I2h3pLd7At4RXCvo9D1+G0 P9R8G3bWwZfVQQfoUJrfLRbpEcmHyXr8WrfIeydi2nYgs/zsY3cbIWcBek+b0K3t 47HQHkTEWkKCNShzHqS8iIZbJ52ONwhjeumm6PYPWUWW0vJC3br8jI2jrE1sjZ00 jR07rI6ZCCdeuzPHjC83TpjDYt6a27Eyf2uEHMQ2orGB4G0ML1Dqw71acdZO5dkb Yv41JV8ClnK1AG19H5hhsFh9VuiBlG0= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:29 2024 by rpki-client on console-ams.rpki-client.org