$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa File: FC7C4036C76011EBA286D16EC4F9AE02.roa (raw, json) Hash identifier: KSJtN3U1wgubAYaUJhTil8joUxC3spDilp40oQ2SqK4= Subject key identifier: C9:0E:0C:8E:48:72:61:DE:8A:0C:81:5A:9D:5D:09:40:68:C8:1B:BE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B71 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa Signing time: Thu 30 May 2024 16:07:14 +0000 ROA not before: Thu 30 May 2024 16:07:14 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137110 IP address blocks: 103.102.28.0/22 maxlen: 24 103.148.63.0/24 maxlen: 24 103.157.130.0/23 maxlen: 24 103.167.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35697 (0x8b71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:07:14 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a432-712a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:1e:42:6f:2d:a6:fa:8b:e5:b8:5d:59:05: 67:9c:ee:a8:d1:ff:65:e0:2e:06:34:fb:c3:4f:08: 0d:ff:97:c8:b6:61:96:92:ed:a7:8e:44:2f:99:c8: 8a:a8:15:82:f9:64:93:3f:f0:e2:6a:9c:95:c2:e7: f3:10:47:e2:c5:0f:86:ec:7d:c2:f0:51:8a:f2:b4: 1c:6d:73:c7:f9:8d:ca:93:db:d4:57:12:8b:b9:df: 6f:e1:71:07:a6:b5:db:f5:d4:7e:1d:5a:d3:f3:37: 9c:06:99:f5:88:32:4f:5d:c0:d3:77:8a:96:ff:89: 1c:0e:d5:af:87:a2:ee:5d:5d:b3:6b:44:74:a4:95: cd:ed:34:d6:92:89:73:2d:b6:83:de:59:13:b1:a1: 50:21:f7:48:5d:46:fe:f6:73:85:46:5a:b2:c5:88: f0:79:33:cb:66:bc:94:94:7a:05:fc:7b:47:e9:93: 91:00:90:4e:30:f3:08:c4:8a:c4:e3:e2:7d:08:83: a8:30:66:92:f2:1b:6f:41:e9:02:6e:25:9e:79:fa: b3:ae:be:e4:ad:ff:6d:96:4d:e7:d3:87:83:fd:dd: e6:9b:00:ae:8e:c0:48:a1:40:84:55:5c:2b:7b:99: 36:43:63:cd:38:27:ad:3b:42:71:2f:a3:9d:c8:8f: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:0C:8E:48:72:61:DE:8A:0C:81:5A:9D:5D:09:40:68:C8:1B:BE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC7C4036C76011EBA286D16EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.28.0/22 103.148.63.0/24 103.157.130.0/23 103.167.130.0/23 Signature Algorithm: sha256WithRSAEncryption 22:77:e4:7f:de:cc:1e:9d:fa:30:3a:5a:e2:72:96:df:fc:bb: c6:1e:77:62:27:27:9c:94:3a:9d:5a:cf:c4:1c:e5:24:96:32: 9e:ef:4a:b5:e7:11:e2:ee:51:9e:59:c8:7c:fc:41:d8:df:1c: dd:1b:93:65:63:2e:53:d6:c4:ee:40:38:e0:27:42:68:fe:36: 5e:2c:d0:56:11:16:34:2a:8e:d7:ae:03:d1:b1:23:31:ce:66: c8:fd:ff:ab:c3:ac:ce:f9:b0:db:e8:bf:0d:f4:e4:4c:25:2e: 2a:dc:e2:f0:07:34:dd:f2:10:0b:42:b1:69:35:9c:33:c7:68: 7e:d7:b7:a9:bd:03:62:7d:e1:5c:27:86:93:5e:71:09:a1:30: 51:4e:b6:b0:12:e2:3a:56:1e:8d:ae:f1:10:c1:52:33:55:02: f4:9a:4b:e8:3c:4b:69:98:77:a5:f1:71:b8:0a:0a:f4:1b:b8: ba:78:82:79:fb:54:ee:f2:d7:ca:0e:3b:58:3f:a5:bb:9c:3b: b6:ab:da:23:4e:a3:46:c3:60:82:09:fb:88:b5:25:2a:ed:11: dd:e0:8c:d8:ad:a5:cc:73:fb:3e:e5:96:d4:ec:2a:84:23:ac: b1:76:c5:37:32:a0:9d:e5:de:d3:78:ab:2b:d7:b7:44:56:4a: 07:36:5f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAItxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDcxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0MzItNzEyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX8HkJvLab6i+W4XVkFZ5zuqNH/ZeAuBjT7w08IDf+XyLZhlpLtp45EL5nI iqgVgvlkkz/w4mqclcLn8xBH4sUPhux9wvBRivK0HG1zx/mNypPb1FcSi7nfb+Fx B6a12/XUfh1a0/M3nAaZ9YgyT13A03eKlv+JHA7Vr4ei7l1ds2tEdKSVze001pKJ cy22g95ZE7GhUCH3SF1G/vZzhUZassWI8Hkzy2a8lJR6Bfx7R+mTkQCQTjDzCMSK xOPifQiDqDBmkvIbb0HpAm4lnnn6s66+5K3/bZZN59OHg/3d5psAro7ASKFAhFVc K3uZNkNjzTgnrTtCcS+jnciPzB0CAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTJDgyO SHJh3ooMgVqdXQlAaMgbvjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZDN0M0MDM2 Qzc2MDExRUJBMjg2RDE2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCZ2YcAwQAZ5Q/AwQBZ52CAwQBZ6eCMA0GCSqGSIb3DQEB CwUAA4IBAQAid+R/3swenfowOlricpbf/LvGHndiJyeclDqdWs/EHOUkljKe70q1 5xHi7lGeWch8/EHY3xzdG5NlYy5T1sTuQDjgJ0Jo/jZeLNBWERY0Ko7XrgPRsSMx zmbI/f+rw6zO+bDb6L8N9ORMJS4q3OLwBzTd8hALQrFpNZwzx2h+17epvQNifeFc J4aTXnEJoTBRTrawEuI6Vh6NrvEQwVIzVQL0mkvoPEtpmHel8XG4Cgr0G7i6eIJ5 +1Tu8tfKDjtYP6W7nDu2q9ojTqNGw2CCCfuItSUq7RHd4IzYraXMc/s+5ZbU7CqE I6yxdsU3MqCd5d7TeKsr17dEVkoHNl9j -----END CERTIFICATE-----Generated at Fri Nov 22 11:48:06 2024 by rpki-client on console-ams.rpki-client.org