$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa File: 20529FC4D59811EB9F992569C4F9AE02.roa (raw, json) Hash identifier: E4/Had6tWZFLJ5L5NMVJC38aKbTcKYRP7oJkcSve1ww= Subject key identifier: F2:C5:0C:57:8D:15:19:CB:55:82:21:32:DD:4A:37:51:3A:43:15:79 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 84E8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa Signing time: Mon 18 Mar 2024 05:07:20 +0000 ROA not before: Mon 18 Mar 2024 05:07:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135188 IP address blocks: 45.249.48.0/24 maxlen: 24 45.249.49.0/24 maxlen: 24 45.249.51.0/24 maxlen: 24 103.117.46.0/23 maxlen: 24 103.165.14.0/23 maxlen: 24 103.168.80.0/23 maxlen: 24 103.174.110.0/23 maxlen: 24 2400:1220::/32 maxlen: 32 2407:42c0::/32 maxlen: 32 2407:8b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34024 (0x84e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 18 05:07:20 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65f7cc08-2056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:cc:39:20:1c:93:2e:02:7b:c6:72:fa:5e: 79:67:62:fc:be:45:5d:c6:06:ea:c6:27:91:27:ad: ef:4f:53:3e:2a:3d:72:4c:1c:c8:82:d0:1c:21:d4: 66:c0:77:47:4b:be:34:ba:1d:be:3c:51:28:fd:f6: 43:18:69:ab:f2:17:d0:50:ff:16:8e:e8:86:08:94: 06:4f:0d:db:80:92:f3:71:cf:43:94:40:ef:4a:63: 9a:19:51:06:e3:03:7f:c4:46:80:aa:a5:82:a3:39: 40:44:15:7a:90:1d:9a:3b:df:45:cb:99:d4:a9:ff: 3d:7b:c7:ba:53:43:10:14:e9:cd:34:c9:dc:be:0b: 4a:cc:70:7c:76:44:51:ce:ac:b8:9a:2c:54:0e:8a: f0:ad:4a:1c:c4:24:eb:9b:99:12:96:0e:1e:82:65: ca:fb:0e:39:63:1f:fb:c0:70:e2:81:eb:b8:c1:1c: 7a:09:75:fe:0b:a1:a0:bb:c3:e2:a3:d6:b7:5a:05: bb:b0:cb:c2:4d:7a:60:8d:36:de:77:6d:50:af:e6: 91:50:e6:fe:99:6b:20:3c:46:a4:a2:58:d3:73:69: 19:0f:bf:09:de:e5:73:81:81:a6:38:7f:d7:b8:48: 11:cf:23:5d:b5:72:66:6c:9f:73:f9:19:6b:67:51: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:0C:57:8D:15:19:CB:55:82:21:32:DD:4A:37:51:3A:43:15:79 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.48.0/23 45.249.51.0/24 103.117.46.0/23 103.165.14.0/23 103.168.80.0/23 103.174.110.0/23 IPv6: 2400:1220::/32 2407:42c0::/32 2407:8b40::/32 Signature Algorithm: sha256WithRSAEncryption 8c:99:de:8d:2a:43:0d:f4:8d:63:06:66:ec:33:86:8d:74:70: a7:e4:f5:97:23:87:4d:25:eb:52:76:3f:ef:be:60:f4:98:e2: 0d:a1:09:a1:bd:5f:7b:e1:13:d2:c9:f2:bb:b4:88:b5:2d:7a: e5:e8:e5:d1:97:19:3b:ce:d5:49:21:19:ca:3f:ef:49:b8:c2: 5c:4b:d0:d5:3f:33:1b:e6:20:02:f0:b7:c7:55:05:f7:c3:fe: 2e:28:a8:90:83:92:4b:e5:2b:80:56:72:c3:59:70:8e:ff:49: af:a2:b4:f2:20:32:84:ab:69:c9:eb:21:2c:9d:a8:a6:b7:49: 29:c7:cc:e1:b6:4b:d9:1e:a9:08:39:b3:7c:8d:bc:38:04:0b: 34:eb:11:14:22:29:86:a3:f0:42:ce:54:dc:b5:2e:d1:62:cc: 79:f3:ab:aa:ef:40:a4:d1:d7:d8:3f:95:8f:c5:ee:87:af:fb: 4e:cd:41:4b:15:90:57:4a:52:02:e9:94:c7:68:d1:f9:30:ee: 0a:7b:67:d3:17:31:f7:2b:6d:c2:71:db:3e:0c:25:b4:74:39: 33:df:75:53:95:1c:df:65:e6:33:1c:8d:ca:19:2e:ad:c2:a2: dd:2a:48:b1:7d:2c:c6:e0:59:47:a9:8f:06:0e:35:14:cd:48: 22:05:32:d4 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIDAIToMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMxODA1MDcyMFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVmN2NjMDgtMjA1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLDzDkgHJMuAnvGcvpeeWdi/L5FXcYG6sYnkSet709TPio9ckwcyILQHCHU ZsB3R0u+NLodvjxRKP32Qxhpq/IX0FD/Fo7ohgiUBk8N24CS83HPQ5RA70pjmhlR BuMDf8RGgKqlgqM5QEQVepAdmjvfRcuZ1Kn/PXvHulNDEBTpzTTJ3L4LSsxwfHZE Uc6suJosVA6K8K1KHMQk65uZEpYOHoJlyvsOOWMf+8Bw4oHruMEcegl1/guhoLvD 4qPWt1oFu7DLwk16YI023ndtUK/mkVDm/plrIDxGpKJY03NpGQ+/Cd7lc4GBpjh/ 17hIEc8jXbVyZmyfc/kZa2dRVNcCAwEAAaOCAtAwggLMMB0GA1UdDgQWBBTyxQxX jRUZy1WCITLdSjdROkMVeTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwNTI5RkM0 RDU5ODExRUI5Rjk5MjU2OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFoGCCsGAQUFBwEHAQH/ BEswSTAqBAIAATAkAwQBLfkwAwQALfkzAwQBZ3UuAwQBZ6UOAwQBZ6hQAwQBZ65u MBsEAgACMBUDBQAkABIgAwUAJAdCwAMFACQHi0AwDQYJKoZIhvcNAQELBQADggEB AIyZ3o0qQw30jWMGZuwzho10cKfk9Zcjh00l61J2P+++YPSY4g2hCaG9X3vhE9LJ 8ru0iLUteuXo5dGXGTvO1UkhGco/70m4wlxL0NU/MxvmIALwt8dVBffD/i4oqJCD kkvlK4BWcsNZcI7/Sa+itPIgMoSracnrISydqKa3SSnHzOG2S9keqQg5s3yNvDgE CzTrERQiKYaj8ELOVNy1LtFizHnzq6rvQKTR19g/lY/F7oev+07NQUsVkFdKUgLp lMdo0fkw7gp7Z9MXMfcrbcJx2z4MJbR0OTPfdVOVHN9l5jMcjcoZLq3Cot0qSLF9 LMbgWUepjwYONRTNSCIFMtQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org