$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa File: F8A8459E839811EE9359CD1BC4F9AE02.roa (raw, json) Hash identifier: 2itfPiZOwo3j3KkagzM0lJ9g9RDpPLuezlUCh1GPQb8= Subject key identifier: 74:AD:74:32:90:0B:12:27:D5:B3:92:95:6E:76:A6:6A:C4:1B:DA:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BE7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa Signing time: Thu 30 May 2024 16:09:07 +0000 ROA not before: Thu 30 May 2024 16:09:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138035 IP address blocks: 103.187.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35815 (0x8be7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:09:07 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a4a3-4c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:66:5e:b2:cb:3e:20:92:10:90:27:9c:f0: 11:84:f5:8f:ac:28:f5:02:cd:8f:de:a1:92:90:79: 1a:2a:04:d0:23:72:90:73:e2:71:10:cc:6d:52:a1: 3f:b2:ba:c5:52:81:ad:f4:f1:dc:1c:b6:c2:fa:19: df:50:7e:d0:f4:09:29:51:dd:5c:44:c7:54:fa:31: 6b:27:ee:83:9e:aa:8d:57:19:79:5c:1f:4b:22:ae: 65:b1:3f:88:d6:3c:8e:98:f4:c2:13:22:40:5a:93: 9c:4c:f0:ef:9f:ec:57:0d:25:72:ea:10:64:40:d5: 6c:71:8d:e0:52:52:6b:a1:c0:39:30:54:f9:87:87: 6b:9a:57:ab:97:bf:e8:26:1c:ff:b5:6e:d0:fc:27: 3b:fa:21:db:2e:57:6f:4b:f1:5f:ee:b0:53:7b:37: 99:d0:7e:19:0e:08:d8:2e:8b:86:a9:f2:af:da:7e: 59:81:d0:d6:49:1e:72:e7:e4:8c:14:e9:69:4f:eb: 3a:d0:1d:8b:a9:23:2f:34:28:39:e9:d4:b5:28:6a: fa:fb:0a:cb:a5:e6:8f:d2:91:00:70:c2:fc:6d:9f: b4:77:0c:8d:a9:99:ac:8a:90:4d:09:70:4b:78:c7: 73:dc:31:6d:ce:2e:65:1e:24:98:73:23:5a:99:bf: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AD:74:32:90:0B:12:27:D5:B3:92:95:6E:76:A6:6A:C4:1B:DA:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:08:5c:02:26:83:93:31:2c:2d:df:9d:cd:e2:0b:91:b2:a7: a2:35:61:df:cd:53:e9:f1:20:8c:b2:1b:7c:c2:9b:ea:a6:12: 93:b1:74:48:7a:a7:fa:f9:42:41:81:31:bd:71:40:52:cc:b7: 2d:4a:9c:51:c5:8d:9c:ba:e9:ea:c5:af:26:11:50:42:05:91: d8:b3:4d:f6:69:7e:02:53:a9:ac:41:ec:5c:f1:32:75:f3:ec: 80:1b:fc:35:44:fa:2f:c8:b7:e6:5a:0b:db:a1:be:4b:79:89: b1:33:77:6c:f9:77:8b:de:57:6b:9c:d9:46:ba:86:22:26:ca: a5:41:dc:08:c4:84:f4:ce:86:51:58:77:43:d1:5d:27:fb:15: 5c:99:d6:48:6b:fa:1e:15:bf:ae:53:f6:87:90:71:1f:3c:24: ec:d1:ef:a5:04:f7:29:c7:61:eb:b6:f2:9b:c8:f9:c7:af:60: 12:4c:88:3c:fd:1f:f6:11:88:37:d2:dd:aa:9e:9c:6e:93:10: 4e:9d:f3:4a:8d:34:71:1f:3d:d6:d4:6b:03:97:58:cc:c2:71: 9b:54:23:91:e4:3a:6f:91:54:5c:61:02:ab:7b:2f:8c:c5:ac: 1d:b2:87:c4:11:45:a3:e6:83:88:0c:f1:d5:d4:33:40:4e:1b: 76:24:e5:f3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIvnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDkwN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0YTMtNGM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOoMZl6yyz4gkhCQJ5zwEYT1j6wo9QLNj96hkpB5GioE0CNykHPicRDMbVKh P7K6xVKBrfTx3By2wvoZ31B+0PQJKVHdXETHVPoxayfug56qjVcZeVwfSyKuZbE/ iNY8jpj0whMiQFqTnEzw75/sVw0lcuoQZEDVbHGN4FJSa6HAOTBU+YeHa5pXq5e/ 6CYc/7Vu0PwnO/oh2y5Xb0vxX+6wU3s3mdB+GQ4I2C6Lhqnyr9p+WYHQ1kkecufk jBTpaU/rOtAdi6kjLzQoOenUtShq+vsKy6Xmj9KRAHDC/G2ftHcMjamZrIqQTQlw S3jHc9wxbc4uZR4kmHMjWpm/E9sCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR0rXQy kAsSJ9WzkpVudqZqxBvaGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y4QTg0NTlF ODM5ODExRUU5MzU5Q0QxQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ7u3MA0GCSqGSIb3DQEBCwUAA4IBAQCPCFwCJoOTMSwt 353N4guRsqeiNWHfzVPp8SCMsht8wpvqphKTsXRIeqf6+UJBgTG9cUBSzLctSpxR xY2cuunqxa8mEVBCBZHYs032aX4CU6msQexc8TJ18+yAG/w1RPovyLfmWgvbob5L eYmxM3ds+XeL3ldrnNlGuoYiJsqlQdwIxIT0zoZRWHdD0V0n+xVcmdZIa/oeFb+u U/aHkHEfPCTs0e+lBPcpx2HrtvKbyPnHr2ASTIg8/R/2EYg30t2qnpxukxBOnfNK jTRxHz3W1GsDl1jMwnGbVCOR5DpvkVRcYQKrey+MxawdsofEEUWj5oOIDPHV1DNA Tht2JOXz -----END CERTIFICATE-----Generated at Fri Nov 22 11:48:06 2024 by rpki-client on console-ams.rpki-client.org