$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6A0542A137B11EBAF12AC3DC4F9AE02.roa File: F6A0542A137B11EBAF12AC3DC4F9AE02.roa (raw, json) Hash identifier: awOCvdnmMOQ2/kgmxobYAFmabWXI9QfKVLWlGHAyEos= Subject key identifier: C3:6C:F4:74:D8:53:60:C7:F2:5D:F5:51:A3:E1:3B:D6:81:D0:44:F2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8CFC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6A0542A137B11EBAF12AC3DC4F9AE02.roa Signing time: Thu 30 May 2024 16:13:43 +0000 ROA not before: Thu 30 May 2024 16:13:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141241 IP address blocks: 103.157.133.0/24 maxlen: 24 2001:df1:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36092 (0x8cfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:13:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a5b7-6f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:9d:4b:6b:78:a4:c6:26:a1:37:6f:de:d6: 76:ca:66:4c:82:89:0c:a1:09:b8:32:03:d2:19:aa: 09:e7:23:72:8c:bc:ea:50:f8:8a:2f:df:d1:75:5a: d4:c0:0c:5e:82:42:ef:14:f2:fd:61:f2:0e:81:89: bc:dd:47:0d:45:3f:0d:9c:9b:b8:1f:2c:f5:f9:83: 5b:70:aa:df:76:78:fd:c5:8a:de:c4:51:39:5e:a3: 7c:d1:a1:02:8d:85:ff:71:d8:41:00:a9:e4:e5:75: d8:ba:9a:d1:ed:6c:60:26:d0:66:1c:a3:e7:30:bf: 06:60:0e:16:17:5e:77:d4:8f:88:84:b5:bf:a2:f3: e7:72:c4:db:f4:44:46:5c:dc:69:16:44:31:00:e8: fe:b3:93:76:c5:9c:2a:70:12:af:b8:ff:2d:16:39: 5e:30:55:e3:94:6b:23:87:2d:e3:5a:c1:09:1b:94: 59:82:94:86:4b:28:29:70:ef:cb:0a:44:76:99:9d: ed:fa:c4:db:c4:f8:a4:0a:b3:05:d4:5e:18:da:05: f8:15:8f:c4:f3:d1:20:20:4a:d0:5a:0c:bc:e6:7d: e7:ce:d9:69:80:a9:0b:e5:7c:09:3a:57:50:bd:60: 79:5b:5a:88:fa:c7:f4:09:0c:33:c3:10:87:fd:d9: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6C:F4:74:D8:53:60:C7:F2:5D:F5:51:A3:E1:3B:D6:81:D0:44:F2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6A0542A137B11EBAF12AC3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.133.0/24 IPv6: 2001:df1:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption a2:e0:7f:e0:aa:bf:d7:6f:d0:64:25:22:96:a0:13:44:1e:e6: 60:09:23:6f:b0:28:78:5d:e4:3c:21:ae:00:8d:19:d2:9f:0c: 3f:40:7a:51:7f:94:bb:7c:6f:21:db:f3:17:30:01:ff:f6:5f: c3:76:a7:6b:8f:ee:25:cc:ac:05:5f:9c:3f:99:64:b9:e0:84: 65:b4:3f:97:df:d2:c2:70:7e:94:e8:01:61:0f:f5:ee:5b:ea: 1e:50:fb:ab:30:fb:03:f5:7b:59:af:fd:80:fd:8b:db:e4:14: ee:68:b7:a0:f6:c1:ee:92:68:98:b6:b6:06:16:f9:18:9b:3f: 92:04:21:2f:91:c0:f4:52:bf:80:4e:62:a7:fa:91:4c:25:85: e6:37:90:7a:3d:8e:1f:ce:7d:72:e6:94:46:53:d2:ca:17:38: 6e:36:98:4c:84:1a:07:7d:9e:09:e8:95:c8:b4:99:fd:2b:77: 25:f1:f9:78:6f:88:da:62:9e:c8:99:b0:0d:3f:89:31:23:dd: c6:28:27:94:a4:bf:fc:16:76:ef:2c:9b:25:ec:97:01:2a:fc: 7c:26:b5:fa:92:82:ba:0d:86:db:2f:ab:f1:7e:3d:7f:c9:c6: 89:59:2d:d5:d1:aa:8f:6f:6d:3d:90:d0:7b:80:c5:8f:47:06: de:a3:a2:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIz8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTM0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE1YjctNmYyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+unUtreKTGJqE3b97WdspmTIKJDKEJuDID0hmqCecjcoy86lD4ii/f0XVa 1MAMXoJC7xTy/WHyDoGJvN1HDUU/DZybuB8s9fmDW3Cq33Z4/cWK3sRROV6jfNGh Ao2F/3HYQQCp5OV12Lqa0e1sYCbQZhyj5zC/BmAOFhded9SPiIS1v6Lz53LE2/RE RlzcaRZEMQDo/rOTdsWcKnASr7j/LRY5XjBV45RrI4ct41rBCRuUWYKUhksoKXDv ywpEdpmd7frE28T4pAqzBdReGNoF+BWPxPPRICBK0FoMvOZ9587ZaYCpC+V8CTpX UL1geVtaiPrH9AkMM8MQh/3ZDqECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTDbPR0 2FNgx/Jd9VGj4TvWgdBE8jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y2QTA1NDJB MTM3QjExRUJBRjEyQUMzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ52FMA8EAgACMAkDBwAgAQ3x9sAwDQYJKoZIhvcNAQEL BQADggEBAKLgf+Cqv9dv0GQlIpagE0Qe5mAJI2+wKHhd5DwhrgCNGdKfDD9AelF/ lLt8byHb8xcwAf/2X8N2p2uP7iXMrAVfnD+ZZLnghGW0P5ff0sJwfpToAWEP9e5b 6h5Q+6sw+wP1e1mv/YD9i9vkFO5ot6D2we6SaJi2tgYW+RibP5IEIS+RwPRSv4BO Yqf6kUwlheY3kHo9jh/OfXLmlEZT0soXOG42mEyEGgd9ngnolci0mf0rdyXx+Xhv iNpinsiZsA0/iTEj3cYoJ5Skv/wWdu8smyXslwEq/HwmtfqSgroNhtsvq/F+PX/J xolZLdXRqo9vbT2Q0HuAxY9HBt6jomI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:48:06 2024 by rpki-client on console-ams.rpki-client.org