$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa File: EE18C4EEAE1511EEB9D55E46C4F9AE02.roa (raw, json) Hash identifier: VBsFRzP/XDNUyzgXCU5RaXheNKFZ5cv6oHBU/khH968= Subject key identifier: 95:B0:1A:DA:AE:4D:39:99:F1:22:F6:10:E2:D7:C8:72:B8:44:DE:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BF4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa Signing time: Thu 30 May 2024 16:09:20 +0000 ROA not before: Thu 30 May 2024 16:09:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138238 IP address blocks: 103.126.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35828 (0x8bf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:09:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a4b0-ac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:27:ec:0e:7c:32:96:47:66:d8:35:3a:c0: 91:29:ca:51:fa:c1:f4:7b:62:4d:5d:02:03:4d:4e: 78:55:d8:54:b7:01:44:66:31:69:48:a4:3f:cc:11: 09:89:da:39:57:55:fe:e9:a5:76:2c:5e:f6:02:28: 99:e9:a5:35:42:57:78:9e:65:74:24:79:54:e8:73: 6f:0a:5e:10:63:b3:3a:80:11:10:4e:fc:a5:02:cf: 26:2d:5f:89:f7:e0:3c:07:4b:c0:fc:a0:00:ff:28: 0e:43:f6:8e:3e:a5:dc:ef:54:54:d0:c8:e6:47:41: 8c:23:cd:2c:0d:04:f8:4c:04:54:f2:9e:6b:79:2a: 21:ba:12:04:72:9c:71:4b:8e:c8:3e:1b:1f:c0:49: a1:8c:92:8b:9f:57:b6:9d:2e:e3:5a:e5:dc:02:2b: 7c:e3:2d:4d:53:e2:04:47:76:2b:94:6c:e4:bc:a7: 3b:fb:d2:9b:74:67:6f:38:03:39:08:98:05:49:16: 03:32:d6:2d:a5:0b:72:cd:3c:bf:84:55:4d:15:77: eb:d5:cf:08:07:7c:52:4e:f9:cc:58:60:41:33:3a: 1c:d7:cd:06:d7:1c:b6:12:49:cd:34:25:27:ad:78: 3a:22:6c:01:1c:58:80:a4:3f:b0:20:12:48:b8:65: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:1A:DA:AE:4D:39:99:F1:22:F6:10:E2:D7:C8:72:B8:44:DE:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.196.0/22 Signature Algorithm: sha256WithRSAEncryption 00:f8:95:9d:5e:f5:e8:99:dd:35:cc:e8:4d:50:76:09:fe:98: 07:a4:eb:ab:b9:04:64:64:54:02:4d:cd:cb:8f:fe:2c:2a:24: ed:c1:ae:fe:02:8c:c4:6d:94:5e:3a:10:53:a0:88:ed:8f:f4: 4d:6f:c3:2f:30:81:67:66:6c:9f:91:42:57:15:e6:f4:1f:73: de:8c:22:11:01:65:ca:6f:e0:84:8c:a6:ed:b8:bd:0a:28:27: 13:33:a0:6e:65:5c:56:1e:86:5f:fa:9e:f3:d3:4c:c8:96:65: 4d:20:2a:48:7f:60:a8:77:91:7e:a5:00:9b:15:06:66:d4:ec: b2:5e:65:3a:49:0d:51:7e:cf:bd:60:35:4c:da:fb:25:af:43: cb:2d:20:01:f6:65:fe:cd:a4:0d:03:78:2b:fd:fa:5f:cf:9f: d1:7b:98:71:49:98:05:60:fe:68:7f:85:0d:a4:fa:0b:72:6e: 51:97:cd:7c:07:f4:19:6d:38:0f:c2:53:0e:1b:06:12:50:48: 9c:00:ec:26:81:ef:3a:19:aa:53:9b:fb:a0:e6:ac:f8:c8:e4: eb:1d:8a:bb:26:0a:28:e1:37:c9:e8:03:ed:41:5b:a9:9b:04: cb:bd:4a:4e:e3:7a:6d:9b:e8:75:bf:b7:e8:7e:78:5d:a4:30: ea:29:64:37 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIv0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDkyMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0YjAtYWM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM86J+wOfDKWR2bYNTrAkSnKUfrB9HtiTV0CA01OeFXYVLcBRGYxaUikP8wR CYnaOVdV/umldixe9gIomemlNUJXeJ5ldCR5VOhzbwpeEGOzOoAREE78pQLPJi1f iffgPAdLwPygAP8oDkP2jj6l3O9UVNDI5kdBjCPNLA0E+EwEVPKea3kqIboSBHKc cUuOyD4bH8BJoYySi59Xtp0u41rl3AIrfOMtTVPiBEd2K5Rs5LynO/vSm3RnbzgD OQiYBUkWAzLWLaULcs08v4RVTRV369XPCAd8Uk75zFhgQTM6HNfNBtccthJJzTQl J614OiJsARxYgKQ/sCASSLhlHQ8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSVsBra rk05mfEi9hDi18hyuETeejAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VFMThDNEVF QUUxNTExRUVCOUQ1NUU0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ37EMA0GCSqGSIb3DQEBCwUAA4IBAQAA+JWdXvXomd01 zOhNUHYJ/pgHpOuruQRkZFQCTc3Lj/4sKiTtwa7+AozEbZReOhBToIjtj/RNb8Mv MIFnZmyfkUJXFeb0H3PejCIRAWXKb+CEjKbtuL0KKCcTM6BuZVxWHoZf+p7z00zI lmVNICpIf2Cod5F+pQCbFQZm1OyyXmU6SQ1Rfs+9YDVM2vslr0PLLSAB9mX+zaQN A3gr/fpfz5/Re5hxSZgFYP5of4UNpPoLcm5Rl818B/QZbTgPwlMOGwYSUEicAOwm ge86GapTm/ug5qz4yOTrHYq7Jgoo4TfJ6APtQVupmwTLvUpO43ptm+h1v7fofnhd pDDqKWQ3 -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:24 2025 by rpki-client