$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa File: 8A177F7AFB6111EC9E830E28C4F9AE02.roa (raw, json) Hash identifier: fjygrfHO9vJnuYb0spDljUTmjbGhpKv+pRkeX5wUvJw= Subject key identifier: 29:D6:95:04:FC:8F:9E:C0:3D:38:91:6D:59:D6:10:1A:AC:10:F5:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8F3C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa Signing time: Thu 30 May 2024 16:22:58 +0000 ROA not before: Thu 30 May 2024 16:22:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149585 IP address blocks: 103.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36668 (0x8f3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:22:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a7e2-d000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:1f:b3:07:e7:a1:d0:c5:1c:bc:03:db:e5: c4:04:52:42:9b:38:bd:98:8f:64:ae:96:da:c1:79: 83:69:f5:cc:51:c6:15:27:c8:73:74:87:25:10:e7: f0:ad:a7:81:48:c6:32:78:dd:47:d3:14:17:15:22: 81:53:a2:ca:05:c9:96:3b:56:4b:e8:bc:2c:4a:ce: 08:01:8e:8f:f4:da:f3:ef:a6:96:54:30:33:40:26: 89:cd:66:df:a0:c3:e7:0c:14:90:4b:98:2c:4c:df: a8:83:e4:51:44:49:60:94:0e:64:ca:27:bb:8c:65: 96:38:a1:e7:7c:d0:1e:29:8d:7f:58:7f:f7:10:9f: 58:3e:12:25:c4:24:e0:f1:f0:67:10:8c:c4:37:eb: 49:66:97:c2:92:9b:ed:d8:b1:28:fe:35:99:49:5b: aa:30:42:21:e2:6e:d2:53:63:61:35:db:62:77:e0: e1:a5:2f:c9:0a:6d:98:2a:e3:e2:c9:3c:b4:72:c4: 97:db:98:e6:cb:85:29:47:2c:55:82:62:6e:6f:1f: f8:2f:bc:d3:0c:f5:e2:54:45:c6:36:3b:78:b4:4c: ae:5d:dc:a3:1e:0f:7b:55:01:bc:18:b0:01:95:a7: 7f:2c:5c:f5:11:b8:53:c7:0e:17:e7:e8:3b:f5:12: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D6:95:04:FC:8F:9E:C0:3D:38:91:6D:59:D6:10:1A:AC:10:F5:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption 40:bf:80:ab:7b:65:2c:f0:1d:f9:96:e0:3d:7a:00:fd:29:f1: 71:eb:2a:4c:ca:81:c9:e9:18:f2:4f:43:80:e2:6d:bb:96:e0: 3f:e4:45:0b:68:7b:26:5e:a0:2b:1c:f3:06:70:f1:a1:fa:24: e4:a9:44:d2:9f:4b:3b:d4:e7:f9:72:c4:16:28:1a:59:f8:7b: 07:67:c4:95:73:de:f5:90:42:6e:32:a5:9e:65:21:df:4f:ca: f3:b5:54:81:b4:2c:1b:f0:1e:49:94:ab:54:75:f7:cd:e2:b5: 37:af:6f:97:8a:a5:b2:d9:32:5e:63:2a:d8:13:f7:08:95:dc: 2b:d7:4a:c7:d4:1f:04:9d:7f:25:1b:03:8b:dc:38:bb:4c:e8: 91:27:cf:4a:d7:43:08:54:d4:1e:27:27:30:b0:0f:2a:f0:a3: 8e:fc:b1:60:e5:2b:53:37:1b:72:95:6c:b6:71:6b:e7:d3:56: b7:c9:e2:40:bc:97:31:5b:9a:7f:ce:0b:f3:94:31:7d:92:64: 17:44:3b:26:61:d4:07:4a:1a:a9:7a:f7:a7:37:92:0e:19:ca: 9c:bc:4c:41:34:08:ac:c3:43:d0:45:1a:2b:56:73:f1:eb:54: 33:d1:83:2c:00:c8:6d:db:c9:f6:96:25:d2:5e:b9:bc:57:0d: d5:a5:a9:87 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI88MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjI1OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE3ZTItZDAwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzHH7MH56HQxRy8A9vlxARSQps4vZiPZK6W2sF5g2n1zFHGFSfIc3SHJRDn 8K2ngUjGMnjdR9MUFxUigVOiygXJljtWS+i8LErOCAGOj/Ta8++mllQwM0Amic1m 36DD5wwUkEuYLEzfqIPkUURJYJQOZMonu4xlljih53zQHimNf1h/9xCfWD4SJcQk 4PHwZxCMxDfrSWaXwpKb7dixKP41mUlbqjBCIeJu0lNjYTXbYnfg4aUvyQptmCrj 4sk8tHLEl9uY5suFKUcsVYJibm8f+C+80wz14lRFxjY7eLRMrl3cox4Pe1UBvBiw AZWnfyxc9RG4U8cOF+foO/USy3ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQp1pUE /I+ewD04kW1Z1hAarBD1+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBMTc3RjdB RkI2MTExRUM5RTgzMEUyOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ73EMA0GCSqGSIb3DQEBCwUAA4IBAQBAv4Cre2Us8B35 luA9egD9KfFx6ypMyoHJ6RjyT0OA4m27luA/5EULaHsmXqArHPMGcPGh+iTkqUTS n0s71Of5csQWKBpZ+HsHZ8SVc971kEJuMqWeZSHfT8rztVSBtCwb8B5JlKtUdffN 4rU3r2+XiqWy2TJeYyrYE/cIldwr10rH1B8EnX8lGwOL3Di7TOiRJ89K10MIVNQe JycwsA8q8KOO/LFg5StTNxtylWy2cWvn01a3yeJAvJcxW5p/zgvzlDF9kmQXRDsm YdQHShqpevenN5IOGcqcvExBNAisw0PQRRorVnPx61Qz0YMsAMht28n2liXSXrm8 Vw3VpamH -----END CERTIFICATE-----Generated at Fri Sep 20 16:41:58 2024 by rpki-client on console-ams.rpki-client.org