$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F465027E764A11EF942D0070C4F9AE02.roa File: F465027E764A11EF942D0070C4F9AE02.roa (raw, json) Hash identifier: pBYByH9D/guYZeef8MThwn/mEe/fDht+xiai1xTPyHs= Subject key identifier: 75:AE:4A:7B:B9:96:69:19:3C:3D:82:98:6E:36:4C:7C:7B:22:C7:97 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9972 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F465027E764A11EF942D0070C4F9AE02.roa Signing time: Thu 19 Sep 2024 05:49:37 +0000 ROA not before: Thu 19 Sep 2024 05:49:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134026 IP address blocks: 45.115.104.0/22 maxlen: 24 103.55.88.0/22 maxlen: 24 103.70.200.0/22 maxlen: 24 103.92.112.0/24 maxlen: 24 103.160.72.0/23 maxlen: 24 103.169.156.0/24 maxlen: 24 103.171.222.0/23 maxlen: 24 103.177.174.0/24 maxlen: 24 103.179.222.0/23 maxlen: 24 103.184.70.0/23 maxlen: 24 2405:5c0::/32 maxlen: 32 2405:80c0::/32 maxlen: 32 2407:c8c0::/32 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39282 (0x9972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 19 05:49:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66ebbb71-0491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:b4:84:d2:6d:b8:58:d3:c0:e4:dd:f3:02: 50:73:cd:5a:cc:49:91:34:5b:01:c7:a2:23:fb:87: 5a:4b:e5:59:28:f4:a3:87:21:df:c3:a9:e1:09:3e: 16:72:b9:48:06:91:d9:fc:1e:04:01:f2:89:5a:c7: 12:70:a3:f9:e0:ff:76:df:a0:ba:2d:1a:41:7f:16: 45:f5:3b:ad:89:01:b0:79:f7:e9:e7:84:af:3f:d9: 15:f4:39:62:67:39:cc:f8:67:7b:87:39:13:88:a1: c1:81:d1:c5:70:30:89:52:0c:d0:9f:5f:33:d4:95: c5:1c:ee:6d:dd:4c:00:43:4f:a5:75:79:dd:f3:67: 9f:c2:12:fb:ae:ba:3e:5d:62:9e:e9:d2:3b:9c:47: 9a:8b:69:c5:91:91:9f:32:5a:b3:2e:0f:11:4b:42: 7e:92:78:16:bf:95:d3:02:49:a9:65:99:03:84:7a: 7d:bf:1a:eb:93:b4:28:c7:56:e9:0b:3b:67:ee:3e: c4:99:67:c9:4c:e5:70:1c:8a:0c:bd:49:62:3b:29: 70:00:00:fc:8d:e1:33:e3:e5:83:2f:49:ac:3d:45: ba:97:40:a3:d4:f8:04:42:21:2d:bc:72:3d:26:c4: ab:e4:ad:1a:8d:fb:5e:1f:fe:0d:7d:b3:78:5d:d3: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AE:4A:7B:B9:96:69:19:3C:3D:82:98:6E:36:4C:7C:7B:22:C7:97 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F465027E764A11EF942D0070C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.104.0/22 103.55.88.0/22 103.70.200.0/22 103.92.112.0/24 103.160.72.0/23 103.169.156.0/24 103.171.222.0/23 103.177.174.0/24 103.179.222.0/23 103.184.70.0/23 IPv6: 2405:5c0::/32 2405:80c0::/32 2407:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption a8:47:c2:2b:a2:d0:fe:3c:7c:b9:2b:74:1a:89:c9:0b:25:72: 74:32:73:b3:38:32:5c:0a:aa:cb:cc:e5:dd:59:de:42:dd:a3: 13:be:88:e8:39:b0:cc:14:11:dd:d7:22:55:f1:8e:6e:a3:4e: 0b:9a:f8:bf:9b:c9:c0:34:e4:ca:dd:bc:79:9d:e2:25:ef:72: 79:aa:e4:78:16:91:c4:71:04:f8:58:2e:20:d7:51:ba:f9:94: 11:16:17:ce:ab:9b:61:1f:42:17:f7:7a:fd:7f:e7:a2:d9:15: 51:71:e6:3e:7b:50:c2:57:f1:9c:b7:3e:d1:39:e2:31:25:27: 1b:22:58:e0:ed:1e:69:4a:97:e3:9b:09:ce:72:60:d9:4a:1f: 77:5e:13:4d:30:17:70:58:01:45:1b:6b:eb:0d:64:73:2d:c2: 3f:f3:29:fc:7d:b5:e2:d0:97:04:57:ca:3b:db:ac:ac:19:4f: 7b:f9:cb:9b:8e:4c:da:f3:a6:2f:5b:55:ef:6b:84:24:5a:6b: 30:be:3e:3b:5a:ba:f7:d2:58:c3:98:63:ca:6a:dc:da:1e:2d: c6:1c:59:44:5f:20:02:8c:2e:f8:45:1f:a5:eb:b0:be:b3:44: 1b:71:22:28:5e:dc:34:86:7c:77:e7:a0:1e:2e:17:1d:27:11: 1b:f2:ff:97 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIDAJlyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDkxOTA1NDkzN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZlYmJiNzEtMDQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBttITSbbhY08Dk3fMCUHPNWsxJkTRbAceiI/uHWkvlWSj0o4ch38Op4Qk+ FnK5SAaR2fweBAHyiVrHEnCj+eD/dt+gui0aQX8WRfU7rYkBsHn36eeErz/ZFfQ5 Ymc5zPhne4c5E4ihwYHRxXAwiVIM0J9fM9SVxRzubd1MAENPpXV53fNnn8IS+666 Pl1inunSO5xHmotpxZGRnzJasy4PEUtCfpJ4Fr+V0wJJqWWZA4R6fb8a65O0KMdW 6Qs7Z+4+xJlnyUzlcByKDL1JYjspcAAA/I3hM+Plgy9JrD1FupdAo9T4BEIhLbxy PSbEq+StGo37Xh/+DX2zeF3TYV8CAwEAAaOCAugwggLkMB0GA1UdDgQWBBR1rkp7 uZZpGTw9gphuNkx8eyLHlzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y0NjUwMjdF NzY0QTExRUY5NDJEMDA3MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHIGCCsGAQUFBwEHAQH/ BGMwYTBCBAIAATA8AwQCLXNoAwQCZzdYAwQCZ0bIAwQAZ1xwAwQBZ6BIAwQAZ6mc AwQBZ6veAwQAZ7GuAwQBZ7PeAwQBZ7hGMBsEAgACMBUDBQAkBQXAAwUAJAWAwAMF ACQHyMAwDQYJKoZIhvcNAQELBQADggEBAKhHwiui0P48fLkrdBqJyQslcnQyc7M4 MlwKqsvM5d1Z3kLdoxO+iOg5sMwUEd3XIlXxjm6jTgua+L+bycA05MrdvHmd4iXv cnmq5HgWkcRxBPhYLiDXUbr5lBEWF86rm2EfQhf3ev1/56LZFVFx5j57UMJX8Zy3 PtE54jElJxsiWODtHmlKl+ObCc5yYNlKH3deE00wF3BYAUUba+sNZHMtwj/zKfx9 teLQlwRXyjvbrKwZT3v5y5uOTNrzpi9bVe9rhCRaazC+PjtauvfSWMOYY8pq3Noe LcYcWURfIAKMLvhFH6XrsL6zRBtxIihe3DSGfHfnoB4uFx0nERvy/5c= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org