$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa File: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (raw, json) Hash identifier: LydTto/QF734TxXbjD+YOeOmtAZVNFAjvOAnRG1pnYY= Subject key identifier: F6:54:1B:18:B6:68:8A:4C:44:04:8D:90:76:30:B5:A1:8E:9C:1D:9E Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: 03 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa Signing time: Fri 24 May 2024 09:18:16 +0000 ROA not before: Fri 24 May 2024 09:18:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 64006 IP address blocks: 43.225.12.0/22 maxlen: 22 43.225.13.0/24 maxlen: 24 43.225.14.0/24 maxlen: 24 103.19.216.0/24 maxlen: 24 103.43.253.0/24 maxlen: 24 103.43.254.0/23 maxlen: 23 103.43.255.0/24 maxlen: 24 2401:e980::/32 maxlen: 32 2401:e980:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: May 24 09:18:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66505b58-be1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:81:70:1e:b8:f5:bb:78:c5:2a:93:4b:76: 1c:7e:be:2d:7f:e8:44:e8:ea:c2:3d:8b:a1:9b:f4: 90:46:cd:d2:e7:b8:b7:62:8b:16:72:32:2e:d4:fc: 94:82:a6:8c:49:7e:88:c6:ec:23:dc:2b:02:92:57: f6:84:37:c7:a9:7d:27:32:6e:a1:9e:20:fb:53:b9: 82:32:6b:a7:48:d3:b3:92:bc:82:b5:64:b1:9a:80: 03:f5:ef:dc:74:a5:9c:d2:8a:b4:d4:aa:13:5e:0c: 0f:7c:52:95:9d:38:52:03:49:9e:70:e7:7a:d7:f2: 9c:93:f4:a3:a9:69:4e:74:01:83:b7:98:4f:cb:0b: c0:fc:a3:a9:1a:8f:22:b2:58:fc:50:01:fd:c0:2c: a5:da:04:8f:b8:14:36:6a:04:36:96:1e:d9:fd:12: 0e:7d:4e:c3:9e:a4:b6:14:33:4c:08:fe:76:da:fd: 9b:8f:9b:05:2c:74:22:d7:9d:e3:64:cd:a5:51:4a: 91:f4:46:3d:48:a7:1f:64:55:5d:62:77:6a:39:19: 8f:b8:05:49:0d:43:86:0d:3c:59:44:f1:dd:c5:40: 66:00:04:6a:42:a6:a9:7b:7c:f2:d7:a1:cc:2e:1d: e7:85:b4:98:85:37:f1:8f:db:ed:01:cd:35:4b:79: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:54:1B:18:B6:68:8A:4C:44:04:8D:90:76:30:B5:A1:8E:9C:1D:9E X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.12.0/22 103.19.216.0/24 103.43.253.0-103.43.255.255 IPv6: 2401:e980::/32 Signature Algorithm: sha256WithRSAEncryption 08:21:b2:ad:b5:76:42:0a:d0:d2:4c:d0:25:b0:49:24:be:0f: bf:8b:99:f5:34:2b:e9:75:c9:35:da:11:7e:6d:46:b0:e1:6f: 53:c7:3d:25:b8:72:7e:18:88:32:3e:fb:60:93:df:17:dc:b8: 73:1e:56:cb:86:ab:33:18:8d:47:70:d8:ec:09:45:74:2f:aa: df:30:64:7a:f7:e7:9f:fe:14:aa:c1:84:b5:e4:a2:b6:93:6c: d9:d4:c1:39:da:cd:fd:a8:fe:8e:4d:fb:6f:1c:ac:09:64:df: aa:88:d8:64:df:7c:8e:fb:5f:50:e2:f1:9d:dd:cb:8a:03:ac: fc:4b:ae:b9:fa:4e:95:60:30:3c:2e:71:81:bd:14:0a:89:87: 9e:f3:fa:7b:3d:00:bf:c8:73:7a:82:c9:59:7f:b5:e4:81:e6: c4:65:2e:3c:51:6c:92:9d:30:4a:ae:b0:99:2a:ee:66:a0:9b: 24:3c:8d:1e:ac:ec:df:78:72:77:c6:9c:ea:da:19:ef:78:4e: 3c:b7:56:f0:4c:09:42:c3:09:30:37:f6:d4:fd:e5:7d:84:56: 33:5c:4c:16:24:0b:7a:74:d8:8a:3b:3a:26:6a:f6:e9:5d:03: 1a:ed:b9:e4:d1:40:fb:90:bc:52:09:4a:89:3c:e7:67:65:33: 96:8f:be:fe -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDdBNDExMC8GA1UEBRMoQTM5NENBQ0JEQkQ4QzRDREY1NEFGMTY3RTI2RDU2MjRB NTI0RTJFRTAeFw0yNDA1MjQwOTE4MTZaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTA1YjU4LWJlMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF8oFwHrj1u3jFKpNLdhx+vi1/6ETo6sI9i6Gb9JBGzdLnuLdiixZyMi7U/JSC poxJfojG7CPcKwKSV/aEN8epfScybqGeIPtTuYIya6dI07OSvIK1ZLGagAP179x0 pZzSirTUqhNeDA98UpWdOFIDSZ5w53rX8pyT9KOpaU50AYO3mE/LC8D8o6kajyKy WPxQAf3ALKXaBI+4FDZqBDaWHtn9Eg59TsOepLYUM0wI/nba/ZuPmwUsdCLXneNk zaVRSpH0Rj1Ipx9kVV1id2o5GY+4BUkNQ4YNPFlE8d3FQGYABGpCpql7fPLXocwu HeeFtJiFN/GP2+0BzTVLeVRvAgMBAAGjggK3MIICszAdBgNVHQ4EFgQU9lQbGLZo ikxEBI2QdjC1oY6cHZ4wHwYDVR0jBBgwFoAUo5TKy9vYxM31SvFn4m1WJKUk4u4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEN0E0LzYzRUQ0MDEwMTk4 NjExRUY4OTA4N0UzMEM0RjlBRTAyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVUS3k5dll4TTMxU3ZGbjRtMVdKS1VrNHU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi84RDYxQjA1MjE5 QUUxMUVGQjQxRUFDMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBBBggrBgEFBQcBBwEB/wQy MDAwHwQCAAEwGQMEAivhDAMEAGcT2DALAwQAZyv9AwMCZygwDQQCAAIwBwMFACQB 6YAwDQYJKoZIhvcNAQELBQADggEBAAghsq21dkIK0NJM0CWwSSS+D7+LmfU0K+l1 yTXaEX5tRrDhb1PHPSW4cn4YiDI++2CT3xfcuHMeVsuGqzMYjUdw2OwJRXQvqt8w ZHr355/+FKrBhLXkoraTbNnUwTnazf2o/o5N+28crAlk36qI2GTffI77X1Di8Z3d y4oDrPxLrrn6TpVgMDwucYG9FAqJh57z+ns9AL/Ic3qCyVl/teSB5sRlLjxRbJKd MEqusJkq7magmyQ8jR6s7N94cnfGnOraGe94Tjy3VvBMCULDCTA39tT95X2EVjNc TBYkC3p02Io7OiZq9uldAxrtueTRQPuQvFIJSok852dlM5aPvv4= -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:56 2024 by rpki-client on console-ams.rpki-client.org