$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEB89D4C0D4111EBA83D855CC4F9AE02.roa File: FEB89D4C0D4111EBA83D855CC4F9AE02.roa (raw, json) Hash identifier: ScI4S3rS63Ko4LT7BpC7TpURvWvW27+mM9HiJ16fXwo= Subject key identifier: AB:02:68:C3:DB:D1:76:A5:A3:66:1A:08:2D:3B:BE:D4:05:58:48:1A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B51 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEB89D4C0D4111EBA83D855CC4F9AE02.roa Signing time: Thu 30 May 2024 16:06:40 +0000 ROA not before: Thu 30 May 2024 16:06:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136714 IP address blocks: 103.104.44.0/22 maxlen: 24 2403:d4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35665 (0x8b51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:06:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a410-5c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:a6:57:6e:ee:18:51:1a:71:6a:5d:f9:50: d6:25:1f:a2:f4:b8:3d:f0:e4:02:90:1c:c3:44:26: da:99:36:f4:21:29:7e:98:48:90:08:dd:c9:5e:03: 17:37:d3:85:d7:dc:e3:26:e6:44:b9:81:8c:03:f1: d8:4a:29:15:3b:3a:c4:69:8f:2b:a0:aa:61:45:22: 25:27:8d:54:58:3a:6b:63:16:d3:59:8f:91:58:13: db:f4:50:47:6f:66:2d:d3:e5:c3:25:f6:76:59:24: 72:5e:87:10:19:fc:f7:36:e2:58:dc:e6:f3:6d:3c: 8b:6a:e4:10:e3:9d:0a:4f:dc:3c:4d:06:c8:01:8e: 83:2c:6d:96:2b:73:32:8b:02:b1:ee:d5:dc:f9:0a: d2:a2:45:00:7a:bc:9d:8b:e0:c0:cf:88:bd:7d:aa: 6f:5c:f1:96:4b:40:8d:b9:d5:49:30:97:b2:52:d9: e4:0e:e7:83:30:db:a4:70:c9:36:31:d3:87:d2:1c: 4a:ed:01:7f:4a:ee:45:e6:47:d3:0a:53:af:31:26: 18:32:3c:75:46:87:a8:43:ba:ea:83:31:40:b8:b7: d8:5b:7b:40:1c:cb:e1:c6:fa:35:d9:0d:8b:63:e0: e9:8f:c9:66:23:c2:4a:0c:c2:b8:25:bc:45:1b:da: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:68:C3:DB:D1:76:A5:A3:66:1A:08:2D:3B:BE:D4:05:58:48:1A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEB89D4C0D4111EBA83D855CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.44.0/22 IPv6: 2403:d4c0::/32 Signature Algorithm: sha256WithRSAEncryption 03:cb:e8:a8:8e:ef:68:dd:b9:9a:c3:0f:65:35:14:7d:35:4f: eb:ae:c0:ed:0b:f4:7d:99:51:ce:36:72:15:17:21:b2:36:77: c3:97:09:b8:b6:e4:a1:67:23:cb:ae:33:1e:1f:aa:f4:f1:37: ca:c7:fc:f4:65:c4:97:82:7a:89:af:25:7e:3f:f6:39:b2:33: fe:ff:81:74:9c:c7:2a:c0:55:c1:d0:c8:88:d4:c1:07:9a:ee: 33:0e:d0:9c:af:2f:0c:33:ea:99:66:af:41:ab:31:f4:0f:93: ba:5e:68:04:2f:2a:9a:9d:ae:21:08:a6:c8:53:d3:16:d3:79: 97:31:ce:03:1a:dd:c0:86:1d:0c:64:6f:c0:56:53:f3:68:0b: cb:7d:42:2e:56:1e:13:4f:e3:a1:5f:75:8c:5b:41:87:d1:47: de:3a:99:cb:d5:4d:4a:a2:15:7c:97:a4:e3:af:d3:91:fb:43: ed:af:61:60:34:94:03:b0:56:2f:5d:16:8c:47:ff:d9:01:98: bf:31:d0:3d:b9:1e:55:6c:35:59:cc:9c:a6:dd:1a:63:b8:62: 12:43:c7:57:74:d5:9c:0e:e5:c6:45:57:dc:34:98:f2:09:fb: c0:b8:a7:95:32:87:aa:32:16:9b:77:35:b2:37:45:8d:7b:8f: d2:01:d1:c1 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAItRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDY0MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0MTAtNWM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMO5pldu7hhRGnFqXflQ1iUfovS4PfDkApAcw0Qm2pk29CEpfphIkAjdyV4D FzfThdfc4ybmRLmBjAPx2EopFTs6xGmPK6CqYUUiJSeNVFg6a2MW01mPkVgT2/RQ R29mLdPlwyX2dlkkcl6HEBn89zbiWNzm8208i2rkEOOdCk/cPE0GyAGOgyxtlitz MosCse7V3PkK0qJFAHq8nYvgwM+IvX2qb1zxlktAjbnVSTCXslLZ5A7ngzDbpHDJ NjHTh9IcSu0Bf0ruReZH0wpTrzEmGDI8dUaHqEO66oMxQLi32Ft7QBzL4cb6NdkN i2Pg6Y/JZiPCSgzCuCW8RRvaFh8CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSrAmjD 29F2paNmGggtO77UBVhIGjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZFQjg5RDRD MEQ0MTExRUJBODNEODU1Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ2gsMA0EAgACMAcDBQAkA9TAMA0GCSqGSIb3DQEBCwUA A4IBAQADy+ioju9o3bmaww9lNRR9NU/rrsDtC/R9mVHONnIVFyGyNnfDlwm4tuSh ZyPLrjMeH6r08TfKx/z0ZcSXgnqJryV+P/Y5sjP+/4F0nMcqwFXB0MiI1MEHmu4z DtCcry8MM+qZZq9BqzH0D5O6XmgELyqana4hCKbIU9MW03mXMc4DGt3Ahh0MZG/A VlPzaAvLfUIuVh4TT+OhX3WMW0GH0UfeOpnL1U1KohV8l6Tjr9OR+0Ptr2FgNJQD sFYvXRaMR//ZAZi/MdA9uR5VbDVZzJym3RpjuGISQ8dXdNWcDuXGRVfcNJjyCfvA uKeVMoeqMhabdzWyN0WNe4/SAdHB -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:23 2025 by rpki-client