$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa File: EF0F317E15FD11ECAF541012C4F9AE02.roa (raw, json) Hash identifier: 6BBr7wENCzTsyoHocB/OtC2cOGw3s6VPThi+ebsJ+zQ= Subject key identifier: 9A:15:D5:84:3B:AB:F9:0E:F2:DB:A2:15:25:46:EB:B9:73:B0:58:E3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E22 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa Signing time: Thu 30 May 2024 16:18:28 +0000 ROA not before: Thu 30 May 2024 16:18:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142513 IP address blocks: 103.170.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36386 (0x8e22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:18:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6d4-1eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:df:fb:04:1f:0d:09:77:63:fc:53:07:a0: be:c5:8b:26:69:ec:66:1d:81:52:1c:b8:5a:ec:46: b1:84:4c:dc:d9:95:ed:17:64:b2:c6:fe:b8:8f:18: 49:18:ec:e6:6b:f4:af:cf:1c:89:e9:57:b1:8a:a1: 6b:cf:de:8b:4b:5b:8f:76:5f:f9:70:b8:71:2f:18: 6c:c3:24:da:c2:e4:be:e7:9a:03:d8:f5:94:bb:38: 26:d8:b7:1c:53:c2:81:cc:6d:16:85:1e:9a:a1:8c: f2:88:a2:a1:f8:9e:7d:45:ca:31:15:7e:ed:7b:6c: 70:28:9e:9d:1b:03:a7:3e:fa:17:2c:27:49:e4:4f: 1d:02:ac:ac:d5:40:c5:5b:44:4b:2a:54:4f:6e:be: 8f:fb:29:71:05:4e:03:b0:e7:bd:5d:8a:5c:07:36: f1:f4:58:aa:08:4b:74:f1:7b:53:bd:c6:43:80:dd: 2f:c4:e3:a5:e9:9a:93:05:f3:7f:cf:71:48:1e:b0: 64:a8:20:fa:f2:c6:7a:69:55:e6:67:fe:0a:58:aa: 29:86:35:51:7b:a8:44:c8:4e:6a:56:8a:f3:0d:a3: bd:51:eb:d8:60:06:cb:02:55:4f:9c:b3:70:10:b0: c4:f9:3d:f5:bd:2b:2b:b7:f1:86:22:98:5c:8d:38: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:D5:84:3B:AB:F9:0E:F2:DB:A2:15:25:46:EB:B9:73:B0:58:E3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.244.0/23 Signature Algorithm: sha256WithRSAEncryption b0:e1:00:c5:77:ef:cf:a0:a2:83:d2:bf:65:7d:76:47:ac:b3: 4f:ef:18:8b:b6:a1:e9:a2:45:7f:f4:98:52:31:3a:9d:62:78: 0a:2c:05:47:77:9b:2f:01:8a:88:ef:a9:f2:d4:2a:b7:78:20: 6f:d6:ad:f1:80:ae:93:98:e5:af:7f:af:95:fc:59:8a:c4:a7: b9:c8:cd:52:2b:4e:0d:e6:69:49:78:cc:8a:20:7d:36:86:2e: c3:9f:b5:09:83:36:ed:22:e6:00:11:d2:4c:18:69:f5:27:3d: 57:7e:68:5d:4f:d2:56:a6:8f:cb:82:a1:83:e0:68:65:00:2f: 6c:6f:c1:44:3f:5d:b2:49:dc:91:56:bd:0a:54:0c:c3:4a:55: ca:74:a6:cc:56:2d:7c:72:fb:0a:34:ef:86:32:07:24:9f:25: 2e:62:63:63:ee:4f:85:2e:ae:dd:2e:68:f4:34:55:60:45:f9: 0f:9b:d3:7b:47:de:85:81:3c:41:67:d0:f7:d5:44:82:a4:8c: 56:1a:7c:19:d1:05:f6:47:13:ed:4e:91:bf:a6:34:72:69:62: 79:93:88:29:1f:57:9c:28:c0:c3:b1:4d:56:4e:d8:3b:94:30: 10:54:f5:01:70:80:78:16:21:98:be:a6:a9:9f:3e:c2:3c:94: df:a6:b9:ec -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI4iMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTgyOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2ZDQtMWViMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN203/sEHw0Jd2P8UwegvsWLJmnsZh2BUhy4WuxGsYRM3NmV7Rdkssb+uI8Y SRjs5mv0r88cielXsYqha8/ei0tbj3Zf+XC4cS8YbMMk2sLkvueaA9j1lLs4Jti3 HFPCgcxtFoUemqGM8oiiofiefUXKMRV+7XtscCienRsDpz76FywnSeRPHQKsrNVA xVtESypUT26+j/spcQVOA7DnvV2KXAc28fRYqghLdPF7U73GQ4DdL8TjpemakwXz f89xSB6wZKgg+vLGemlV5mf+CliqKYY1UXuoRMhOalaK8w2jvVHr2GAGywJVT5yz cBCwxPk99b0rK7fxhiKYXI04Jv0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSaFdWE O6v5DvLbohUlRuu5c7BY4zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGMEYzMTdF MTVGRDExRUNBRjU0MTAxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6r0MA0GCSqGSIb3DQEBCwUAA4IBAQCw4QDFd+/PoKKD 0r9lfXZHrLNP7xiLtqHpokV/9JhSMTqdYngKLAVHd5svAYqI76ny1Cq3eCBv1q3x gK6TmOWvf6+V/FmKxKe5yM1SK04N5mlJeMyKIH02hi7Dn7UJgzbtIuYAEdJMGGn1 Jz1XfmhdT9JWpo/LgqGD4GhlAC9sb8FEP12ySdyRVr0KVAzDSlXKdKbMVi18cvsK NO+GMgcknyUuYmNj7k+FLq7dLmj0NFVgRfkPm9N7R96FgTxBZ9D31USCpIxWGnwZ 0QX2RxPtTpG/pjRyaWJ5k4gpH1ecKMDDsU1WTtg7lDAQVPUBcIB4FiGYvqapnz7C PJTfprns -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:55 2024 by rpki-client on console-fra.rpki-client.org