$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa File: 18F9209CB55411EEAD96E873C4F9AE02.roa (raw, json) Hash identifier: gHv97LbD597egHzs1DHhKJuGArhYuwuC/fceU19SEJE= Subject key identifier: 08:0E:F1:3A:08:AC:F7:3B:E3:75:43:82:9B:A2:96:37:50:E2:22:0D Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 11 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa Signing time: Tue 13 Feb 2024 07:39:36 +0000 ROA not before: Tue 13 Feb 2024 07:39:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 54113 IP address blocks: 43.249.73.0/24 maxlen: 24 43.249.74.0/24 maxlen: 24 103.245.222.0/24 maxlen: 24 103.245.224.0/24 maxlen: 24 2001:df0:45f::/48 maxlen: 48 2001:df0:461::/48 maxlen: 48 2001:df0:462::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Feb 13 07:39:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65cb1cb8-90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:ca:63:fd:d1:f7:76:a9:9c:0d:5d:c3:0e: 67:72:97:0f:e2:94:2d:c2:2e:53:31:1d:59:32:ec: 0c:9d:ec:c6:f2:ce:72:c6:fb:30:9e:f9:ed:8c:4d: 7f:a8:bd:3e:bf:1c:10:c0:ca:fe:d8:b6:32:36:63: 1f:9a:59:d8:12:a6:63:b3:68:8f:ff:6d:a9:d0:42: 54:c7:17:49:b4:66:ab:c1:ef:2e:2d:27:8f:59:73: 6a:53:4b:b1:4e:8b:61:d2:51:3d:ca:da:23:30:c4: aa:bf:fa:1c:35:b2:95:cd:b9:89:2c:80:db:83:bd: 43:9b:6c:f0:7b:65:a3:41:0d:97:a8:ac:6c:21:51: ca:9f:7a:fc:03:4f:1f:63:91:e3:63:1b:76:1d:8a: dd:27:a8:76:1b:64:cd:55:21:bd:60:28:3f:9a:32: ee:c1:e1:2d:53:5b:9c:70:ad:ca:ed:40:37:f9:14: fa:10:9e:c9:a3:19:38:4e:e0:ce:d4:71:c2:0e:0c: 27:68:4f:69:54:53:f7:7d:59:b1:d7:49:6a:79:e2: 29:12:1b:d4:ae:91:ec:c8:d8:1f:08:20:24:33:89: ce:60:35:e5:86:e1:19:81:f4:2e:d8:a2:ef:94:e3: 1a:7b:34:af:9d:bb:3e:7f:6c:46:ae:5c:37:41:e5: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:F1:3A:08:AC:F7:3B:E3:75:43:82:9B:A2:96:37:50:E2:22:0D X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.73.0-43.249.74.255 103.245.222.0/24 103.245.224.0/24 IPv6: 2001:df0:45f::/48 2001:df0:461::-2001:df0:462:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 01:b2:e7:5e:25:22:c0:f2:de:87:56:f8:98:9a:8e:19:ea:f8: 1b:d0:fa:3f:b5:f1:32:55:29:87:23:f2:1a:e3:c1:34:1e:1a: a3:e1:1c:c6:29:16:cd:74:ad:4e:c5:bd:18:23:09:81:32:94: 7b:f5:34:78:d5:27:bb:b4:1f:f9:8b:2f:c5:f1:db:a1:40:db: 6e:2f:56:dd:e7:30:4c:12:a5:ad:74:e9:11:69:97:3f:00:c3: 83:14:04:04:4b:5a:6e:ec:ee:d6:67:95:3b:4c:9a:95:75:23: 87:8b:d8:66:5e:4a:86:61:f3:87:2b:0b:03:9f:3c:e2:af:14: 15:84:af:1c:c4:33:7c:93:2d:2e:13:55:fe:07:35:bf:1b:11: 67:ce:31:c9:76:a4:68:4b:b6:56:a7:82:ff:00:1d:da:b6:79: 68:0d:1c:3f:38:0b:25:54:6b:bd:b2:0f:28:eb:51:0e:1a:46: 22:ac:0e:ff:6f:d3:e4:25:e8:89:51:95:dc:63:4f:b4:9b:fe: ac:6c:a8:cb:e8:8c:f7:97:01:03:3c:a7:85:5a:78:2e:30:bc: e0:ec:fb:19:4b:47:6e:11:08:e2:30:b6:8f:d4:7b:f3:f0:6b: 16:34:fe:85:5c:65:29:cf:bf:52:57:35:d8:73:65:2d:14:77: b8:36:e5:79 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODk3QTExMC8GA1UEBRMoQjdGQTUxMjE1QkI1QzFFRjg4RUFFMTVGMDM0MzEzRDFC NzFCOEQ0NDAeFw0yNDAyMTMwNzM5MzZaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Y2IxY2I4LTkwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDWspj/dH3dqmcDV3DDmdylw/ilC3CLlMxHVky7Ayd7MbyznLG+zCe+e2MTX+o vT6/HBDAyv7YtjI2Yx+aWdgSpmOzaI//banQQlTHF0m0ZqvB7y4tJ49Zc2pTS7FO i2HSUT3K2iMwxKq/+hw1spXNuYksgNuDvUObbPB7ZaNBDZeorGwhUcqfevwDTx9j keNjG3Ydit0nqHYbZM1VIb1gKD+aMu7B4S1TW5xwrcrtQDf5FPoQnsmjGThO4M7U ccIODCdoT2lUU/d9WbHXSWp54ikSG9SukezI2B8IICQzic5gNeWG4RmB9C7You+U 4xp7NK+duz5/bEauXDdB5Uk5AgMBAAGjggLOMIICyjAdBgNVHQ4EFgQUCA7xOgis 9zvjdUOCm6KWN1DiIg0wHwYDVR0jBBgwFoAUt/pRIVu1we+I6uFfA0MT0bcbjUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4OTdBLzUzM0UyNDYyQjU1 MTExRUVCQjRDNTczQkM0RjlBRTAyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdF9wUklWdTF3ZS1JNnVGZkEwTVQwYmNialVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi8xOEY5MjA5Q0I1 NTQxMUVFQUQ5NkU4NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBYBggrBgEFBQcBBwEB/wRJ MEcwIAQCAAEwGjAMAwQAK/lJAwQAK/lKAwQAZ/XeAwQAZ/XgMCMEAgACMB0DBwAg AQ3wBF8wEgMHACABDfAEYQMHACABDfAEYjANBgkqhkiG9w0BAQsFAAOCAQEAAbLn XiUiwPLeh1b4mJqOGer4G9D6P7XxMlUphyPyGuPBNB4ao+EcxikWzXStTsW9GCMJ gTKUe/U0eNUnu7Qf+YsvxfHboUDbbi9W3ecwTBKlrXTpEWmXPwDDgxQEBEtabuzu 1meVO0yalXUjh4vYZl5KhmHzhysLA5884q8UFYSvHMQzfJMtLhNV/gc1vxsRZ84x yXakaEu2VqeC/wAd2rZ5aA0cPzgLJVRrvbIPKOtRDhpGIqwO/2/T5CXoiVGV3GNP tJv+rGyoy+iM95cBAzynhVp4LjC84Oz7GUtHbhEI4jC2j9R78/BrFjT+hVxlKc+/ Ulc12HNlLRR3uDbleQ== -----END CERTIFICATE-----Generated at Fri Jun 7 09:40:22 2024 by rpki-client on console-ams.rpki-client.org