$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa File: F5839A70BBE911ED9835332EC4F9AE02.roa (raw, json) Hash identifier: D/Q/wAPddBLQ0Zr6HMOIOR5msONneu7x2nk3tkrqALs= Subject key identifier: 51:B7:44:1C:84:C3:78:F2:4B:53:0C:CE:1B:35:BF:17:6D:F7:C6:AE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa Signing time: Thu 30 May 2024 16:08:02 +0000 ROA not before: Thu 30 May 2024 16:08:02 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137181 IP address blocks: 103.109.136.0/24 maxlen: 24 103.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35747 (0x8ba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:08:02 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a461-46af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:ad:80:61:cb:0e:e4:23:0a:d4:a6:95:71: d7:65:c8:7b:74:17:a5:fa:b4:70:f1:84:b5:54:53: b4:b3:ca:01:12:4f:c6:83:0b:2c:55:a3:2f:45:7a: ff:4c:9f:5f:51:ac:b8:ee:be:b1:55:41:13:88:6c: b0:11:00:62:c7:2d:c1:31:bb:f8:2d:2c:56:98:1d: 46:9a:35:73:ad:d1:50:40:16:7c:e9:68:93:17:47: ca:2a:34:8d:05:32:fc:06:9d:32:28:28:6b:38:e4: af:dc:fe:b8:b9:ef:8f:2a:be:b9:dc:a7:4f:7e:c4: 72:c3:fb:51:4b:91:b7:ef:88:ac:66:90:89:ad:4a: bd:60:53:94:2b:6d:99:9e:cc:2b:bd:d5:78:27:f3: 12:13:3e:d3:8c:f3:41:f8:4a:04:b7:7e:05:31:6e: 45:9e:ae:9f:23:03:90:d0:87:c7:01:b8:45:2d:61: e5:33:c3:78:4f:88:5f:8a:af:5e:2f:6c:d0:99:9a: 0d:20:7d:e7:69:2a:53:17:c2:b1:05:76:ea:4f:bf: 50:02:4c:9e:34:7f:0e:51:31:5b:4b:ea:79:c7:62: 84:b7:2f:47:49:08:97:d6:a0:86:0a:fa:a0:c1:18: 89:dc:14:c7:3e:be:fd:29:f9:95:85:50:48:95:cc: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B7:44:1C:84:C3:78:F2:4B:53:0C:CE:1B:35:BF:17:6D:F7:C6:AE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.136.0/24 103.109.139.0/24 Signature Algorithm: sha256WithRSAEncryption 16:b5:97:0e:54:5e:e4:78:6f:03:51:54:a2:7e:5f:17:c5:7a: 00:0c:62:5a:9f:21:02:34:ef:30:ca:eb:fd:23:70:e1:8e:95: 76:ea:58:c1:3f:63:f2:3d:52:15:da:6b:d3:d3:7e:14:6d:f0: ae:2e:3c:7f:fd:43:08:c8:a7:d8:19:33:fe:c5:68:e0:36:2a: 10:50:65:a4:81:4c:0f:e3:b2:40:3f:06:9c:57:01:f1:ac:e6: 26:07:8c:58:5a:61:d4:46:06:90:a6:c1:ec:b7:c9:f0:ca:37: 71:c3:fe:4c:77:84:59:a4:07:9e:d3:98:2e:4c:0a:8e:6f:11: 78:85:64:75:1c:99:51:39:18:31:29:f1:94:6b:ae:20:98:f9: d0:b2:7b:b1:21:c8:79:88:9f:c1:ac:49:27:7c:3d:5f:3d:e1: 46:e3:7d:46:5b:4a:a4:db:88:2e:84:d8:a6:ee:3e:e7:9f:60: 7e:fb:90:de:dd:f5:3e:7d:67:b9:59:32:cf:c1:48:0a:3e:fe: ef:19:48:e4:e3:a8:d1:b1:2f:72:fe:3d:07:ac:83:44:9c:97: 48:29:11:0e:88:34:cd:3a:4c:3d:60:02:47:ab:22:01:85:9e: 01:eb:23:26:14:ab:50:71:73:6b:ba:c8:61:ec:f5:66:eb:dc: d4:9b:ad:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIujMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDgwMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0NjEtNDZhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvOrYBhyw7kIwrUppVx12XIe3QXpfq0cPGEtVRTtLPKARJPxoMLLFWjL0V6 /0yfX1GsuO6+sVVBE4hssBEAYsctwTG7+C0sVpgdRpo1c63RUEAWfOlokxdHyio0 jQUy/AadMigoazjkr9z+uLnvjyq+udynT37EcsP7UUuRt++IrGaQia1KvWBTlCtt mZ7MK73VeCfzEhM+04zzQfhKBLd+BTFuRZ6unyMDkNCHxwG4RS1h5TPDeE+IX4qv Xi9s0JmaDSB952kqUxfCsQV26k+/UAJMnjR/DlExW0vqecdihLcvR0kIl9aghgr6 oMEYidwUxz6+/Sn5lYVQSJXM3pcCAwEAAaOCApswggKXMB0GA1UdDgQWBBRRt0Qc hMN48ktTDM4bNb8XbffGrjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1ODM5QTcw QkJFOTExRUQ5ODM1MzMyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ22IAwQAZ22LMA0GCSqGSIb3DQEBCwUAA4IBAQAWtZcO VF7keG8DUVSifl8XxXoADGJanyECNO8wyuv9I3DhjpV26ljBP2PyPVIV2mvT034U bfCuLjx//UMIyKfYGTP+xWjgNioQUGWkgUwP47JAPwacVwHxrOYmB4xYWmHURgaQ psHst8nwyjdxw/5Md4RZpAee05guTAqObxF4hWR1HJlRORgxKfGUa64gmPnQsnux Ich5iJ/BrEknfD1fPeFG431GW0qk24guhNim7j7nn2B++5De3fU+fWe5WTLPwUgK Pv7vGUjk46jRsS9y/j0HrINEnJdIKREOiDTNOkw9YAJHqyIBhZ4B6yMmFKtQcXNr ushh7PVm69zUm62w -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org