$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa File: F71A706068F511EF9E747344C4F9AE02.roa (raw, json) Hash identifier: NGA/kb8NX8lQNJiwQ7NGGZGGLoPtiDpqyOAn7/NLP/k= Subject key identifier: 04:C7:75:8F:81:59:4E:11:9E:5D:E6:B0:3C:6D:2A:68:57:49:EB:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 97EB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa Signing time: Mon 02 Sep 2024 06:38:29 +0000 ROA not before: Mon 02 Sep 2024 06:38:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134013 IP address blocks: 103.94.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38891 (0x97eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 2 06:38:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66d55d65-7e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:e5:ae:66:4d:c6:80:d2:cf:08:47:b0:bb: 67:fe:73:e0:88:08:a0:a7:0c:cf:d7:7f:b5:1f:d2: 0c:54:0b:f3:f0:e5:96:8f:75:e8:83:ba:30:bc:75: 9c:c1:c2:45:2a:80:29:c6:61:06:4b:7b:d5:be:1b: b4:56:97:a7:13:67:7e:9e:53:09:4e:54:ba:6a:70: cc:74:96:85:6a:03:3e:0e:93:69:11:ac:d1:6e:a3: b8:6f:84:52:bc:ff:42:d7:81:4a:6c:7a:94:bb:49: 9d:84:d7:56:77:a8:4f:ea:df:a7:c1:96:ab:ea:0d: fc:f8:83:75:d0:47:06:8e:f7:00:53:e5:f6:b6:17: 20:87:1f:f8:35:40:50:62:03:61:1c:30:6d:86:7b: cb:40:3a:a1:33:10:51:9f:3f:6b:0d:95:06:1c:80: 2b:85:19:79:d3:79:2f:a6:93:6a:96:45:eb:2e:b8: 4f:5a:df:26:45:78:90:b1:d2:e6:b8:d2:11:36:1c: 1c:36:84:b7:af:63:3f:4e:ac:99:c8:32:f9:47:98: 25:02:9b:86:df:1c:7e:03:85:b9:a4:5d:1f:d4:e6: e0:2d:b2:8a:56:ae:ab:cc:aa:33:46:44:e0:75:8d: d7:23:a4:99:e2:b2:ba:ee:69:08:d0:08:b2:16:4e: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:75:8F:81:59:4E:11:9E:5D:E6:B0:3C:6D:2A:68:57:49:EB:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.64.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:50:35:68:71:ba:3b:4d:c7:18:01:bc:ba:2c:d7:61:03:ca: be:14:68:cd:4b:31:1c:97:e0:7f:8d:c4:ac:c0:09:87:6c:4e: 3b:d8:ab:76:97:0d:34:4f:af:f8:56:42:bb:94:cf:dd:5e:05: 3b:dd:64:2e:ca:4a:e2:c4:31:cc:fe:43:f6:bb:2e:c7:1b:13: d4:24:a3:81:81:29:76:84:a7:37:11:0d:fd:4b:01:67:1c:76: 95:43:fc:30:ff:00:3f:d0:c7:c5:e8:ae:55:1c:95:76:32:ce: 67:57:5c:99:0f:13:e7:e9:bd:7c:c3:02:1b:0b:75:2d:6d:41: 16:67:0b:21:f1:ac:38:60:f7:5e:3d:49:7a:82:2a:cf:da:a9: 65:1c:6e:d4:4c:fd:fa:01:e7:95:fd:a4:39:af:0f:8b:8e:c0: 73:6d:e4:e4:43:ce:2a:d7:9a:55:a0:64:ec:df:1c:3c:a9:16: 45:07:2f:6a:2c:af:de:42:7b:09:8b:2a:8b:95:a2:3b:40:be: 32:cc:cc:2c:00:d5:97:3c:e9:71:52:d7:ef:e9:31:83:1d:fa: 16:76:39:61:d3:f1:db:b9:eb:ce:9e:b9:c0:ad:77:75:d0:3e: 62:ef:60:2f:4e:b1:3b:c0:be:3f:d5:99:2b:81:d7:d5:f3:2e: a0:f8:b9:80 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJfrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDkwMjA2MzgyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZkNTVkNjUtN2U0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMop5a5mTcaA0s8IR7C7Z/5z4IgIoKcMz9d/tR/SDFQL8/Dllo916IO6MLx1 nMHCRSqAKcZhBkt71b4btFaXpxNnfp5TCU5UumpwzHSWhWoDPg6TaRGs0W6juG+E Urz/QteBSmx6lLtJnYTXVneoT+rfp8GWq+oN/PiDddBHBo73AFPl9rYXIIcf+DVA UGIDYRwwbYZ7y0A6oTMQUZ8/aw2VBhyAK4UZedN5L6aTapZF6y64T1rfJkV4kLHS 5rjSETYcHDaEt69jP06smcgy+UeYJQKbht8cfgOFuaRdH9Tm4C2yilauq8yqM0ZE 4HWN1yOkmeKyuu5pCNAIshZOVgECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQEx3WP gVlOEZ5d5rA8bSpoV0nrUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y3MUE3MDYw NjhGNTExRUY5RTc0NzM0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ15AMA0GCSqGSIb3DQEBCwUAA4IBAQBeUDVocbo7TccY Aby6LNdhA8q+FGjNSzEcl+B/jcSswAmHbE472Kt2lw00T6/4VkK7lM/dXgU73WQu ykrixDHM/kP2uy7HGxPUJKOBgSl2hKc3EQ39SwFnHHaVQ/ww/wA/0MfF6K5VHJV2 Ms5nV1yZDxPn6b18wwIbC3UtbUEWZwsh8aw4YPdePUl6girP2qllHG7UTP36AeeV /aQ5rw+LjsBzbeTkQ84q15pVoGTs3xw8qRZFBy9qLK/eQnsJiyqLlaI7QL4yzMws ANWXPOlxUtfv6TGDHfoWdjlh0/HbuevOnrnArXd10D5i72AvTrE7wL4/1ZkrgdfV 8y6g+LmA -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org