$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa File: EA3F0538A87911EDA872717EC4F9AE02.roa (raw, json) Hash identifier: pp/YdYq98QwHfEMt8qs/PPzv/+snWvNlpGI5JT7nIb0= Subject key identifier: D1:EA:A1:A2:41:5F:CF:BA:C1:DA:64:BE:D2:6D:8D:41:B1:88:17:1D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8A9B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa Signing time: Thu 30 May 2024 16:03:42 +0000 ROA not before: Thu 30 May 2024 16:03:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135810 IP address blocks: 103.78.137.0/24 maxlen: 24 103.81.192.0/23 maxlen: 24 103.83.57.0/24 maxlen: 24 103.135.60.0/24 maxlen: 24 123.253.236.0/22 maxlen: 24 2001:df3:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35483 (0x8a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:03:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a35e-271c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:0e:a4:59:f7:4c:b3:b6:e6:34:e7:2b:59: ab:58:7f:f3:d3:90:80:d6:b8:90:80:76:49:02:21: e0:00:a8:d5:f5:e5:3e:61:30:d9:a4:da:35:ba:1a: a7:a0:80:eb:a0:e8:94:7b:53:31:d3:02:8c:a3:f1: 66:5e:0f:ff:58:8e:dd:d3:9d:93:41:91:7d:62:60: b1:b7:6b:10:09:29:3c:31:91:0c:76:bd:8c:2b:ba: 21:32:b7:5e:0b:df:41:6e:97:19:54:9e:9c:fa:d2: da:71:36:3b:8d:d1:6f:25:d0:28:95:48:94:05:24: 19:83:34:f7:58:52:56:96:a4:1b:90:9c:34:de:07: 04:b5:5d:0a:dc:f9:65:0f:ae:c1:ae:fc:99:d3:c3: bb:c8:de:8b:bb:ee:22:20:e0:1a:44:4d:e3:ba:ef: 70:92:bb:85:d8:f7:5d:54:0d:f9:fd:2e:19:b0:80: 3f:b4:67:1e:11:f4:7c:65:ef:37:3c:f0:50:fe:19: 1d:94:72:fa:5b:c3:47:5c:57:53:38:38:fc:ca:ba: 7a:35:24:fc:83:05:33:9c:21:2b:8c:a3:ac:0b:91: 76:0f:2c:f6:53:74:d4:35:2e:71:ec:3c:be:20:df: d7:40:af:e9:bd:50:ef:42:55:cc:af:63:a5:ee:79: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EA:A1:A2:41:5F:CF:BA:C1:DA:64:BE:D2:6D:8D:41:B1:88:17:1D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA3F0538A87911EDA872717EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.137.0/24 103.81.192.0/23 103.83.57.0/24 103.135.60.0/24 123.253.236.0/22 IPv6: 2001:df3:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 21:80:d7:a8:66:56:dd:67:2d:f4:59:e7:55:d0:ea:b3:29:3e: c1:c8:f1:f3:53:f8:88:16:bc:59:c8:2c:a8:10:c9:2f:ad:bb: 8a:fb:66:5d:10:01:3a:19:23:56:fd:6e:4e:58:42:7d:f4:e2: 6c:f8:69:e4:27:28:df:f4:ee:64:45:5e:8c:25:36:d3:fe:0d: 97:32:56:88:e2:26:92:f5:40:b7:8e:fc:72:0b:fd:38:1a:91: f0:16:c0:ff:31:8b:e2:cd:2d:45:b2:bb:47:86:4f:40:00:c3: ba:19:b7:3c:13:22:bb:47:81:8f:f0:ef:56:f2:91:6b:df:90: 25:07:02:11:3f:4f:b7:3f:da:6b:47:07:48:2e:72:d4:4a:ec: 30:cc:42:4b:ee:f7:02:2a:04:f4:50:0c:0f:21:68:d2:ba:d5: d9:9d:df:a9:05:7d:92:02:6c:c3:da:b9:1c:82:35:f6:75:af: c3:3c:32:93:a8:65:52:7e:21:76:f2:da:ca:6f:af:b9:30:be: 39:2b:6c:a8:29:60:8e:f3:e2:66:90:30:11:a6:94:6c:1f:8b: 35:79:c9:81:60:30:55:60:e5:bb:97:31:e8:1a:f7:d5:a5:7f: 2c:5a:e2:b9:3e:2d:59:7e:0a:c0:a2:2e:f2:d9:37:af:39:a1: af:8d:84:2d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDAIqbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDM0MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzNWUtMjcxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDODqRZ90yztuY05ytZq1h/89OQgNa4kIB2SQIh4ACo1fXlPmEw2aTaNboa p6CA66DolHtTMdMCjKPxZl4P/1iO3dOdk0GRfWJgsbdrEAkpPDGRDHa9jCu6ITK3 XgvfQW6XGVSenPrS2nE2O43RbyXQKJVIlAUkGYM091hSVpakG5CcNN4HBLVdCtz5 ZQ+uwa78mdPDu8jei7vuIiDgGkRN47rvcJK7hdj3XVQN+f0uGbCAP7RnHhH0fGXv NzzwUP4ZHZRy+lvDR1xXUzg4/Mq6ejUk/IMFM5whK4yjrAuRdg8s9lN01DUucew8 viDf10Cv6b1Q70JVzK9jpe55QLcCAwEAAaOCAr4wggK6MB0GA1UdDgQWBBTR6qGi QV/PusHaZL7SbY1BsYgXHTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VBM0YwNTM4 QTg3OTExRURBODcyNzE3RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/ BDkwNzAkBAIAATAeAwQAZ06JAwQBZ1HAAwQAZ1M5AwQAZ4c8AwQCe/3sMA8EAgAC MAkDBwAgAQ3zvwAwDQYJKoZIhvcNAQELBQADggEBACGA16hmVt1nLfRZ51XQ6rMp PsHI8fNT+IgWvFnILKgQyS+tu4r7Zl0QAToZI1b9bk5YQn304mz4aeQnKN/07mRF XowlNtP+DZcyVojiJpL1QLeO/HIL/TgakfAWwP8xi+LNLUWyu0eGT0AAw7oZtzwT IrtHgY/w71bykWvfkCUHAhE/T7c/2mtHB0guctRK7DDMQkvu9wIqBPRQDA8haNK6 1dmd36kFfZICbMPauRyCNfZ1r8M8MpOoZVJ+IXby2spvr7kwvjkrbKgpYI7z4maQ MBGmlGwfizV5yYFgMFVg5buXMega99Wlfyxa4rk+LVl+CsCiLvLZN685oa+NhC0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:19:31 2025 by rpki-client