$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa File: EBBE8D88D56011EEA747C959C4F9AE02.roa (raw, json) Hash identifier: N4XT4bvlB7JmoTH2BuQZXQAcmgPP/kz42RHKsZUtrA8= Subject key identifier: BA:BF:6F:97:D4:EC:2D:B1:02:80:E3:88:63:7E:69:E7:C6:5E:33:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 88F4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa Signing time: Thu 30 May 2024 15:56:47 +0000 ROA not before: Thu 30 May 2024 15:56:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133589 IP address blocks: 103.43.80.0/22 maxlen: 24 2001:df0:9fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35060 (0x88f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 15:56:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a1bf-753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:db:3c:d1:1d:78:a2:18:11:72:5d:ba:99: 1d:ea:75:23:d8:7b:74:ab:f7:9a:92:64:85:65:fb: 55:ba:fa:60:10:d6:09:af:19:11:96:1a:68:e9:f4: cd:c3:55:dd:62:52:5f:f5:b7:eb:95:74:74:45:a1: b0:40:10:c2:fe:76:95:4d:72:25:26:de:f3:3d:f8: 50:9f:c5:9e:ec:02:84:79:29:c5:36:95:f8:02:7c: 1f:3a:ff:b7:ac:41:4c:de:5c:28:9f:0f:91:99:b4: 1d:82:ca:58:68:67:3c:34:9f:26:e3:88:e1:52:f1: 4b:be:a1:a4:64:4b:1e:e5:16:73:53:7a:7a:00:38: 74:a1:d4:5f:b3:21:ed:eb:8e:67:95:8d:8c:17:de: da:b4:d4:0c:ab:48:1f:63:02:16:35:cc:90:f3:a9: cf:da:b3:10:56:b9:77:41:ef:59:c1:d9:6f:5d:b6: f0:22:3c:d9:7a:9b:9a:0b:2c:a4:8d:59:dd:f6:31: e8:82:44:df:cc:c4:f8:3f:ba:e5:54:14:44:d5:58: 3a:58:c7:f6:65:4b:1d:98:f2:48:38:a3:5d:34:48: c3:1b:cc:8a:05:e7:61:b4:1a:e5:d1:31:a4:60:77: 99:e7:b1:a9:94:88:b5:83:b2:50:b1:b6:d8:69:4b: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BF:6F:97:D4:EC:2D:B1:02:80:E3:88:63:7E:69:E7:C6:5E:33:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBBE8D88D56011EEA747C959C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.80.0/22 IPv6: 2001:df0:9fc0::/48 Signature Algorithm: sha256WithRSAEncryption 92:e5:26:ff:12:17:ba:84:24:35:25:77:92:b8:2e:8f:1b:d6: 61:ed:46:e7:b8:58:cf:94:f3:78:65:62:c3:e9:c4:2a:b3:6b: 25:92:03:78:c7:df:41:84:cc:d6:d0:ba:71:fc:85:9b:72:1f: 8f:71:d8:2a:fc:0d:d8:b6:74:8e:7b:06:00:b1:82:94:72:a8: e7:85:ec:38:7f:b2:23:7b:6a:ce:f0:d8:a2:56:7a:d5:0a:4b: 5d:24:85:98:9b:ac:55:bd:1a:6f:43:15:8e:8c:00:35:53:a2: 13:c1:29:27:1a:7b:72:4e:eb:eb:cd:83:a9:33:e3:de:03:4a: 6c:76:2c:f9:9c:e5:7b:8a:9f:8f:c1:8b:c0:95:85:aa:b6:65: be:88:f2:54:ad:be:b9:b1:d0:2f:50:25:e7:a4:ea:7d:5b:81: ea:80:2a:4c:4d:da:05:b4:7c:68:d4:8b:b2:f6:7f:1f:93:59: 88:f0:09:8d:35:cd:e4:38:41:52:3a:27:45:e6:7b:f3:db:f6: 34:5e:9b:e6:e4:44:e2:11:b8:77:8d:dd:9e:cd:31:22:bc:56: 82:3f:6b:26:be:14:4d:12:94:75:39:04:e4:65:e8:79:f9:91: 9d:a5:40:30:55:38:39:21:db:8e:a8:f6:3d:66:ba:85:0a:53: 57:f2:e4:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIj0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTY0N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExYmYtNzUzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKb2zzRHXiiGBFyXbqZHep1I9h7dKv3mpJkhWX7Vbr6YBDWCa8ZEZYaaOn0 zcNV3WJSX/W365V0dEWhsEAQwv52lU1yJSbe8z34UJ/FnuwChHkpxTaV+AJ8Hzr/ t6xBTN5cKJ8PkZm0HYLKWGhnPDSfJuOI4VLxS76hpGRLHuUWc1N6egA4dKHUX7Mh 7euOZ5WNjBfe2rTUDKtIH2MCFjXMkPOpz9qzEFa5d0HvWcHZb1228CI82Xqbmgss pI1Z3fYx6IJE38zE+D+65VQURNVYOljH9mVLHZjySDijXTRIwxvMigXnYbQa5dEx pGB3meexqZSItYOyULG22GlLSgsCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBS6v2+X 1OwtsQKA44hjfmnnxl4zMjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCQkU4RDg4 RDU2MDExRUVBNzQ3Qzk1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQCZytQMA8EAgACMAkDBwAgAQ3wn8AwDQYJKoZIhvcNAQEL BQADggEBAJLlJv8SF7qEJDUld5K4Lo8b1mHtRue4WM+U83hlYsPpxCqzayWSA3jH 30GEzNbQunH8hZtyH49x2Cr8Ddi2dI57BgCxgpRyqOeF7Dh/siN7as7w2KJWetUK S10khZibrFW9Gm9DFY6MADVTohPBKScae3JO6+vNg6kz494DSmx2LPmc5XuKn4/B i8CVhaq2Zb6I8lStvrmx0C9QJeek6n1bgeqAKkxN2gW0fGjUi7L2fx+TWYjwCY01 zeQ4QVI6J0Xme/Pb9jRem+bkROIRuHeN3Z7NMSK8VoI/aya+FE0SlHU5BORl6Hn5 kZ2lQDBVODkh246o9j1muoUKU1fy5MA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:14:55 2025 by rpki-client