$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa File: F8052DCC0E7811EEB9B42577C4F9AE02.roa (raw, json) Hash identifier: vqkeypdi/qxL9oEMplf/2I1UKspHMDJaatl6iQJnDoI= Subject key identifier: 87:14:C3:92:95:96:E2:04:3E:F6:1B:D8:28:DE:AE:80:1D:79:DD:27 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9017 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa Signing time: Thu 30 May 2024 16:26:31 +0000 ROA not before: Thu 30 May 2024 16:26:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151117 IP address blocks: 103.145.166.0/24 maxlen: 24 103.247.241.0/24 maxlen: 24 2001:df2:5340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36887 (0x9017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:26:31 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a8b6-177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:45:24:59:2c:46:48:7e:b5:10:ca:a5:47: 89:de:53:30:94:8a:05:8c:03:4a:5a:78:eb:34:4f: 8b:70:6c:a0:41:27:ad:0e:64:4a:31:4b:1a:69:7e: 86:98:e0:f4:58:34:92:ee:3c:f2:ae:60:5a:09:23: 9a:eb:c6:16:95:8a:c2:ab:e8:52:21:89:0f:d5:35: 33:4e:76:18:ce:81:ee:ef:09:3c:ac:1a:95:f8:ab: ea:e1:0f:c9:00:b6:ac:03:ea:71:99:a0:be:32:0c: 81:2e:d0:78:41:7f:6c:bb:88:82:b8:7c:43:45:86: bc:3c:75:0e:9b:d6:85:90:3f:f7:24:34:ff:51:85: 37:86:0e:83:b5:29:5d:41:78:e3:33:62:6b:26:1a: 5c:6a:bf:28:8c:f2:b4:d8:cf:a4:7b:9c:2f:4b:44: cd:77:e6:02:f2:84:f4:aa:0e:78:a4:62:6a:15:33: 65:57:f7:8e:50:e2:9c:8e:df:e7:53:cc:29:b8:53: 27:3a:6f:47:a1:83:30:15:f8:a2:5a:e8:90:e4:42: 2a:89:90:73:a1:e2:be:4f:bc:f4:bc:74:97:50:05: d6:cb:d8:ee:09:28:fc:13:74:e9:e5:f6:a5:99:93: 9d:93:b3:06:5a:79:74:13:8d:33:0f:2f:14:bd:5c: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:14:C3:92:95:96:E2:04:3E:F6:1B:D8:28:DE:AE:80:1D:79:DD:27 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.166.0/24 103.247.241.0/24 IPv6: 2001:df2:5340::/48 Signature Algorithm: sha256WithRSAEncryption 89:79:1d:a2:57:dc:92:79:30:d0:2d:a2:51:a4:d4:da:82:60: 5f:64:2a:13:df:4c:c1:22:5f:e5:eb:3d:46:3b:e4:c7:a7:59: f9:cd:4f:fa:98:e1:65:85:57:f3:7a:42:e1:52:b3:14:ff:86: df:70:a2:88:e0:5e:b3:f9:64:ab:62:5d:74:00:44:c2:b3:af: 8f:84:1c:39:17:4c:58:b7:6b:04:9c:e1:82:73:3b:e4:0c:dc: 9a:b7:e1:c6:af:9a:52:3d:7f:7f:74:fe:dd:ba:cb:d3:4c:98: 62:8f:a9:38:25:e1:cb:f8:d8:07:77:51:63:ec:63:02:c3:4e: 78:e3:6b:82:53:26:4a:d0:ab:89:c9:de:e4:6f:26:05:d1:8c: c9:41:99:17:3d:bb:35:8d:59:f5:47:3f:47:a7:ca:5d:a9:32: 58:6f:d3:96:4e:de:b8:1b:9a:46:d9:c3:8f:f4:37:77:46:83: 27:db:1c:35:7e:7e:3e:f2:85:48:a5:92:10:85:8e:5e:5a:95: db:d6:67:7d:3e:b3:44:93:78:cb:b6:e2:5e:51:2a:97:c5:e9: 00:d1:99:16:21:c3:ee:16:0d:84:48:f9:bf:60:32:00:8f:19: 99:a4:6f:b4:53:38:22:d0:da:c4:b4:f3:f2:6d:f3:97:6e:e1: fb:8e:f9:d6 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAJAXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjYzMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4YjYtMTc3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALACRSRZLEZIfrUQyqVHid5TMJSKBYwDSlp46zRPi3BsoEEnrQ5kSjFLGml+ hpjg9Fg0ku488q5gWgkjmuvGFpWKwqvoUiGJD9U1M052GM6B7u8JPKwalfir6uEP yQC2rAPqcZmgvjIMgS7QeEF/bLuIgrh8Q0WGvDx1DpvWhZA/9yQ0/1GFN4YOg7Up XUF44zNiayYaXGq/KIzytNjPpHucL0tEzXfmAvKE9KoOeKRiahUzZVf3jlDinI7f 51PMKbhTJzpvR6GDMBX4olrokORCKomQc6Hivk+89Lx0l1AF1svY7gko/BN06eX2 pZmTnZOzBlp5dBONMw8vFL1cdpECAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSHFMOS lZbiBD72G9go3q6AHXndJzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y4MDUyREND MEU3ODExRUVCOUI0MjU3N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ5GmAwQAZ/fxMA8EAgACMAkDBwAgAQ3yU0AwDQYJKoZI hvcNAQELBQADggEBAIl5HaJX3JJ5MNAtolGk1NqCYF9kKhPfTMEiX+XrPUY75Men WfnNT/qY4WWFV/N6QuFSsxT/ht9woojgXrP5ZKtiXXQARMKzr4+EHDkXTFi3awSc 4YJzO+QM3Jq34cavmlI9f390/t26y9NMmGKPqTgl4cv42Ad3UWPsYwLDTnjja4JT JkrQq4nJ3uRvJgXRjMlBmRc9uzWNWfVHP0enyl2pMlhv05ZO3rgbmkbZw4/0N3dG gyfbHDV+fj7yhUilkhCFjl5aldvWZ30+s0STeMu24l5RKpfF6QDRmRYhw+4WDYRI +b9gMgCPGZmkb7RTOCLQ2sS08/Jt85du4fuO+dY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:51 2025 by rpki-client