$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/29127678295611EB9ECAB865C4F9AE02.roa File: 29127678295611EB9ECAB865C4F9AE02.roa (raw, json) Hash identifier: qmzXltziG7ewuM6cN2cSP+Q/tlGJKiQaU+/L/25HLgU= Subject key identifier: 65:F1:EB:C5:72:70:A2:81:F5:32:70:D3:D7:83:18:E8:E9:DE:03:DB Certificate issuer: /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Certificate serial: 0676 Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/29127678295611EB9ECAB865C4F9AE02.roa Signing time: Thu 14 Mar 2024 23:13:02 +0000 ROA not before: Thu 14 Mar 2024 23:13:02 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 58507 IP address blocks: 103.49.4.0/22 maxlen: 24 103.246.4.0/22 maxlen: 24 163.47.96.0/22 maxlen: 24 2400:5d80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C Validity Not Before: Mar 14 23:13:02 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f3847d-0426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:58:b0:04:c2:66:a8:bb:5a:1f:d0:26:c7: 18:0d:fb:50:57:92:d3:30:43:8f:40:00:a6:b4:63: d5:87:4f:3c:63:12:1e:ec:76:74:2c:81:d3:e3:e1: 69:ce:af:2c:13:59:54:be:4f:4b:e7:17:00:03:f6: 91:c5:f7:52:e1:6f:1c:e3:f3:fd:b0:fb:ce:ab:f3: 53:05:63:14:81:5e:27:96:c9:4c:df:d1:84:b5:89: ca:7f:44:2e:5b:ab:f6:97:15:cf:dd:24:8b:c0:3e: 81:5a:56:cb:76:e3:75:20:f0:23:ea:a5:20:17:f0: 41:a3:81:0d:b5:08:76:e0:36:a7:ac:e2:97:16:17: 5f:85:63:9d:bf:f2:c9:50:e4:5d:a9:61:9d:3e:e5: 0c:ca:71:4e:52:ec:9d:37:f7:c4:ad:3c:6a:f3:5b: 99:09:92:f2:2e:6f:ce:6a:59:79:79:e1:bd:00:31: 83:46:cf:21:06:fd:3f:31:74:c8:e0:8c:3b:7b:9f: e2:b0:70:03:f8:df:f0:4c:e0:d7:fd:bc:4a:62:af: 62:3e:ed:1a:58:61:dc:b7:3b:7a:16:f0:b2:31:cd: 88:bd:a7:ea:5c:f9:51:50:35:d4:45:b0:07:5f:23: e2:2b:9c:19:21:da:6f:f1:a1:74:c1:76:3d:64:ab: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F1:EB:C5:72:70:A2:81:F5:32:70:D3:D7:83:18:E8:E9:DE:03:DB X509v3 Authority Key Identifier: keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/29127678295611EB9ECAB865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.4.0/22 103.246.4.0/22 163.47.96.0/22 IPv6: 2400:5d80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:67:fb:98:f7:dd:0c:e8:8c:23:f7:90:90:51:09:b1:0d:d6: 74:75:8f:55:4c:76:ec:0f:73:85:2f:cd:3b:2b:26:37:f7:97: 4a:93:a8:e5:89:d9:12:2d:98:9b:98:78:ce:ea:8b:61:6b:3a: f1:0b:39:fa:68:c8:7e:bc:0a:0f:88:57:08:d2:69:48:40:04: b4:fa:5a:d1:ff:51:31:1d:24:b2:99:e2:47:a3:86:83:f9:ee: b6:6d:36:94:59:16:5c:f5:0e:f6:f6:0c:fa:b8:74:e7:ce:da: c7:14:29:3d:6a:0e:28:d8:c4:15:6f:67:46:b5:2d:6e:9a:a2: b4:d2:74:11:ef:d0:63:24:5f:09:43:f3:41:0d:a1:6b:f7:00: 34:08:21:22:3e:a0:7c:90:71:8d:8d:00:11:93:0f:00:9a:5b: 5b:78:b2:7e:cb:b5:e4:76:9a:9c:b2:13:33:71:f3:87:72:6f: 2f:f5:24:ce:81:4c:8d:aa:a7:26:87:27:e0:64:d0:2b:8c:fb: 04:3a:cc:df:d9:da:56:ec:3a:c0:87:e3:06:bc:c8:6c:c4:cc: d9:52:45:d7:b5:75:2c:59:85:74:c4:ae:cd:78:25:8e:0d:23: 2a:61:f4:d4:5a:b6:2f:8b:1e:a9:34:85:55:7f:af:bd:dd:7a: 71:16:d4:a5 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF RUQ2MEQ3MEMwHhcNMjQwMzE0MjMxMzAyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzODQ3ZC0wNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMtYsATCZqi7Wh/QJscYDftQV5LTMEOPQACmtGPVh088YxIe7HZ0LIHT4+Fp zq8sE1lUvk9L5xcAA/aRxfdS4W8c4/P9sPvOq/NTBWMUgV4nlslM39GEtYnKf0Qu W6v2lxXP3SSLwD6BWlbLduN1IPAj6qUgF/BBo4ENtQh24DanrOKXFhdfhWOdv/LJ UORdqWGdPuUMynFOUuydN/fErTxq81uZCZLyLm/Oall5eeG9ADGDRs8hBv0/MXTI 4Iw7e5/isHAD+N/wTODX/bxKYq9iPu0aWGHctzt6FvCyMc2IvafqXPlRUDXURbAH XyPiK5wZIdpv8aF0wXY9ZKujJwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGXx68Vy cKKB9TJw09eDGOjp3gPbMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5 NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ3NzEvNTBDMDgwNEUyOTRCMTFFQkE3OEMxQjJGQzRGOUFFMDIvMjkxMjc2Nzgy OTU2MTFFQjlFQ0FCODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnMQQDBAJn9gQDBAKjL2AwDQQCAAIwBwMFACQAXYAwDQYJ KoZIhvcNAQELBQADggEBAA1n+5j33QzojCP3kJBRCbEN1nR1j1VMduwPc4UvzTsr Jjf3l0qTqOWJ2RItmJuYeM7qi2FrOvELOfpoyH68Cg+IVwjSaUhABLT6WtH/UTEd JLKZ4kejhoP57rZtNpRZFlz1Dvb2DPq4dOfO2scUKT1qDijYxBVvZ0a1LW6aorTS dBHv0GMkXwlD80ENoWv3ADQIISI+oHyQcY2NABGTDwCaW1t4sn7LteR2mpyyEzNx 84dyby/1JM6BTI2qpyaHJ+Bk0CuM+wQ6zN/Z2lbsOsCH4wa8yGzEzNlSRde1dSxZ hXTErs14JY4NIyph9NRati+LHqk0hVV/r73denEW1KU= -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:55 2024 by rpki-client on console-ams.rpki-client.org