$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF6A3C84B63A11ECA70FD111C4F9AE02.roa File: FF6A3C84B63A11ECA70FD111C4F9AE02.roa (raw, json) Hash identifier: HhN1f43HF9Y33vH3osEEfOjX5riTwE5jf/PYAM27BdI= Subject key identifier: 3B:B7:6F:FF:CD:93:13:82:54:41:6E:38:C6:8D:5A:09:0B:26:1E:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E93 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF6A3C84B63A11ECA70FD111C4F9AE02.roa Signing time: Thu 30 May 2024 16:20:16 +0000 ROA not before: Thu 30 May 2024 16:20:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147226 IP address blocks: 103.170.228.0/23 maxlen: 24 103.177.182.0/23 maxlen: 24 2400:3be0::/32 maxlen: 32 2407:b940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36499 (0x8e93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:20:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a73f-7f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:84:03:22:80:e1:31:58:62:93:de:b3:22: 51:e7:6a:23:ab:47:84:0f:33:be:cc:fd:a0:68:db: 8e:a1:ee:83:28:ce:93:96:dd:a8:0e:75:2f:21:6b: 30:a1:f2:09:50:7a:3b:03:79:22:ea:2a:ba:5d:cb: 66:2d:80:6d:a0:e3:b0:ac:28:1a:ad:a6:37:cd:05: 5f:a5:30:d8:e9:2b:de:5b:df:66:bd:58:b2:62:f2: a5:a1:81:42:30:b5:ee:4b:c4:74:64:f8:ff:90:3a: 40:99:23:b1:69:b6:de:4c:bb:b1:08:21:68:a3:df: 65:b8:8f:16:a6:45:99:90:27:27:66:3a:62:0c:22: f1:b8:91:18:73:63:76:4f:6e:3c:82:ea:b0:3d:85: 7d:ed:22:e1:f8:d6:1c:b5:b1:b1:8b:d0:43:83:70: 65:63:77:06:1b:6d:55:ec:da:31:f5:83:c7:c2:bb: 54:5c:c2:b4:1a:f4:ab:27:3a:73:db:87:17:ed:1a: d8:9d:b6:4b:ee:d4:4b:e1:05:51:0b:6c:d0:01:b0: b8:6a:df:c3:c7:18:20:94:f3:59:9b:2f:36:61:3a: 75:83:24:5e:4a:7e:60:c1:ff:94:a6:d0:43:91:1e: 38:40:7a:d1:52:56:10:a6:9e:8c:48:5e:26:8f:9e: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B7:6F:FF:CD:93:13:82:54:41:6E:38:C6:8D:5A:09:0B:26:1E:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF6A3C84B63A11ECA70FD111C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.228.0/23 103.177.182.0/23 IPv6: 2400:3be0::/32 2407:b940::/32 Signature Algorithm: sha256WithRSAEncryption a6:42:00:cb:c8:e5:79:c0:6d:33:ce:9d:a4:84:b3:ef:77:14: d3:7d:85:de:69:cf:7f:17:bb:b7:1c:49:f9:f6:37:32:82:da: 37:b3:99:5a:26:0a:74:be:52:df:12:5b:84:ce:77:78:6e:29: dc:b8:6d:05:14:3d:86:bf:08:6e:3b:4f:bd:3f:4f:d1:d7:72: b9:e5:d2:ee:a7:9b:de:e1:9e:0a:a5:c2:58:0c:0a:ac:7e:30: 11:ef:ee:76:8e:07:47:3a:3a:68:76:7d:d0:2d:8b:c1:05:bf: a5:b2:80:71:b9:c9:10:f0:e4:e7:e7:a5:d3:af:db:4d:a6:61: b3:23:b0:7e:b9:f1:7c:ba:38:67:d9:c0:9c:18:e0:40:f7:df: dc:c6:01:fe:5d:af:52:fb:89:af:aa:d9:08:9f:73:6e:1b:b4: 77:9c:91:98:31:d5:13:25:2a:3a:c9:9c:07:12:75:a5:42:0e: 4a:46:19:6d:95:bc:00:f9:3e:4f:5c:b8:5f:96:12:bf:9f:92: 92:54:4f:a4:39:45:58:7b:85:8a:38:d5:e0:6d:78:d6:61:f7: 89:25:21:d4:1d:c7:4f:5a:a7:5b:7c:2d:7b:69:95:90:8e:15: 88:0a:8a:2d:b7:5b:3a:51:f2:71:05:1e:b1:9f:99:85:20:4b: 49:4b:a7:71 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIDAI6TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjAxNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3M2YtN2Y3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG6hAMigOExWGKT3rMiUedqI6tHhA8zvsz9oGjbjqHugyjOk5bdqA51LyFr MKHyCVB6OwN5Iuoqul3LZi2AbaDjsKwoGq2mN80FX6Uw2Okr3lvfZr1YsmLypaGB QjC17kvEdGT4/5A6QJkjsWm23ky7sQghaKPfZbiPFqZFmZAnJ2Y6Ygwi8biRGHNj dk9uPILqsD2Ffe0i4fjWHLWxsYvQQ4NwZWN3BhttVezaMfWDx8K7VFzCtBr0qyc6 c9uHF+0a2J22S+7US+EFUQts0AGwuGrfw8cYIJTzWZsvNmE6dYMkXkp+YMH/lKbQ Q5EeOEB60VJWEKaejEheJo+e48sCAwEAAaOCArEwggKtMB0GA1UdDgQWBBQ7t2// zZMTglRBbjjGjVoJCyYezTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZGNkEzQzg0 QjYzQTExRUNBNzBGRDExMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDsGCCsGAQUFBwEHAQH/ BCwwKjASBAIAATAMAwQBZ6rkAwQBZ7G2MBQEAgACMA4DBQAkADvgAwUAJAe5QDAN BgkqhkiG9w0BAQsFAAOCAQEApkIAy8jlecBtM86dpISz73cU032F3mnPfxe7txxJ +fY3MoLaN7OZWiYKdL5S3xJbhM53eG4p3LhtBRQ9hr8IbjtPvT9P0ddyueXS7qeb 3uGeCqXCWAwKrH4wEe/udo4HRzo6aHZ90C2LwQW/pbKAcbnJEPDk5+el06/bTaZh syOwfrnxfLo4Z9nAnBjgQPff3MYB/l2vUvuJr6rZCJ9zbhu0d5yRmDHVEyUqOsmc BxJ1pUIOSkYZbZW8APk+T1y4X5YSv5+SklRPpDlFWHuFijjV4G141mH3iSUh1B3H T1qnW3wte2mVkI4ViAqKLbdbOlHycQUesZ+ZhSBLSUuncQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:12 2025 by rpki-client