$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE7E96CCD59311EB9BEA3C18C4F9AE02.roa File: FE7E96CCD59311EB9BEA3C18C4F9AE02.roa (raw, json) Hash identifier: G/NjNB/BLThIcQGDvEllSaUNQvla0JwI5EkKti/JYPA= Subject key identifier: 50:5F:8F:47:DC:D1:3A:B2:29:B4:A7:D1:E8:E8:92:4C:CF:C4:E9:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E16 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE7E96CCD59311EB9BEA3C18C4F9AE02.roa Signing time: Thu 30 May 2024 16:18:16 +0000 ROA not before: Thu 30 May 2024 16:18:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142499 IP address blocks: 103.168.228.0/23 maxlen: 24 2001:df1:e640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36374 (0x8e16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:18:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6c8-7d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:10:c1:71:31:0c:4c:df:e9:aa:da:35:3a: 7b:76:88:19:51:81:5c:72:9a:a5:95:e7:c7:cf:5c: fc:86:53:4c:91:be:f3:11:e0:09:fb:17:fb:87:4a: bf:a3:de:5d:f0:07:90:6c:7e:54:2f:25:61:89:30: 75:78:6f:6d:ec:b8:33:29:cd:1b:0a:6e:97:b8:f4: 66:ef:42:a2:7b:4e:8c:4d:52:c4:e9:7d:36:1c:ac: e8:9d:9b:b8:1c:a8:37:16:f8:7e:1c:dc:50:cd:bb: 13:d9:13:4c:e4:b7:3c:09:07:6d:75:3c:2a:57:b6: b0:5d:a8:7a:2c:65:e4:52:c5:8c:6e:da:70:ff:3b: 2e:5d:2b:c2:75:45:40:99:70:04:5d:f5:e3:2c:a3: ae:30:16:d6:0c:47:42:5d:75:28:47:0f:c6:3e:c7: e8:38:3b:88:2f:5c:84:fc:64:7e:e3:ef:f6:90:d7: 90:9d:4a:70:45:05:df:11:27:78:c6:83:74:c0:d7: 3c:1e:c6:32:1e:36:6d:bb:4b:d8:52:99:0b:eb:8d: 54:02:c1:f8:02:13:0b:36:a8:6f:f6:5d:73:de:14: 6c:13:f3:f8:59:02:39:ed:da:8d:4d:81:7e:6f:78: 33:13:b4:41:fd:03:3b:86:7f:e6:32:bc:9c:0e:dd: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:8F:47:DC:D1:3A:B2:29:B4:A7:D1:E8:E8:92:4C:CF:C4:E9:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE7E96CCD59311EB9BEA3C18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.228.0/23 IPv6: 2001:df1:e640::/48 Signature Algorithm: sha256WithRSAEncryption 68:02:da:34:93:eb:c5:f3:c2:50:23:ed:c0:eb:03:ef:c8:b1: f6:52:e8:29:ef:a0:ab:56:7a:88:9e:4e:90:35:b7:1f:c3:e7: f8:ca:2e:f9:9c:1b:e6:13:53:b8:4e:e1:e1:19:6a:ce:78:b1: ad:62:1f:20:ae:b4:cc:56:f9:86:89:3e:6f:23:91:fe:0e:65: ba:72:64:a7:8b:06:48:db:af:30:f2:55:0e:75:5b:10:17:b1: c7:b0:78:ac:03:f0:61:16:3a:b3:28:4d:02:bb:be:2e:92:e5: 4d:fe:20:b4:0d:28:dc:8a:a7:d9:d3:a9:e6:51:06:6e:5d:ef: d5:c6:d8:9a:28:62:6a:63:39:8d:7a:bc:33:a2:d4:1e:40:0d: 80:21:a4:43:aa:b2:05:f8:fd:c2:af:5c:de:b5:d3:5c:0d:61: 33:56:78:e0:1b:22:f5:9b:0d:be:d4:78:fc:ff:ab:ee:86:51: b2:1e:22:11:10:cc:c1:8a:a4:ec:c6:51:e8:a1:f4:38:51:b1: 3f:64:fb:93:9d:2f:f2:10:61:cb:09:f1:1d:e3:40:9b:ca:8f: 24:58:73:a3:83:77:b9:a3:2e:72:a6:07:85:4b:08:7e:10:ce: a0:8b:88:54:c2:ef:ca:5f:48:30:92:29:94:dc:27:42:02:a9: bb:dc:ca:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAI4WMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTgxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2YzgtN2Q3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCwEMFxMQxM3+mq2jU6e3aIGVGBXHKapZXnx89c/IZTTJG+8xHgCfsX+4dK v6PeXfAHkGx+VC8lYYkwdXhvbey4MynNGwpul7j0Zu9ContOjE1SxOl9Nhys6J2b uByoNxb4fhzcUM27E9kTTOS3PAkHbXU8Kle2sF2oeixl5FLFjG7acP87Ll0rwnVF QJlwBF314yyjrjAW1gxHQl11KEcPxj7H6Dg7iC9chPxkfuPv9pDXkJ1KcEUF3xEn eMaDdMDXPB7GMh42bbtL2FKZC+uNVALB+AITCzaob/Zdc94UbBPz+FkCOe3ajU2B fm94MxO0Qf0DO4Z/5jK8nA7dC10CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRQX49H 3NE6sim0p9Ho6JJMz8TpzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZFN0U5NkND RDU5MzExRUI5QkVBM0MxOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6jkMA8EAgACMAkDBwAgAQ3x5kAwDQYJKoZIhvcNAQEL BQADggEBAGgC2jST68XzwlAj7cDrA+/IsfZS6CnvoKtWeoieTpA1tx/D5/jKLvmc G+YTU7hO4eEZas54sa1iHyCutMxW+YaJPm8jkf4OZbpyZKeLBkjbrzDyVQ51WxAX sceweKwD8GEWOrMoTQK7vi6S5U3+ILQNKNyKp9nTqeZRBm5d79XG2JooYmpjOY16 vDOi1B5ADYAhpEOqsgX4/cKvXN6101wNYTNWeOAbIvWbDb7UePz/q+6GUbIeIhEQ zMGKpOzGUeih9DhRsT9k+5OdL/IQYcsJ8R3jQJvKjyRYc6ODd7mjLnKmB4VLCH4Q zqCLiFTC78pfSDCSKZTcJ0ICqbvcyrg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:14 2024 by rpki-client on console-fra.rpki-client.org