$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa File: 970ED090476E11EC8A31B762C4F9AE02.roa (raw, json) Hash identifier: Iygb04Q/NzbSUUIrTU29egwh91aKR5t7KNqpMptNk5c= Subject key identifier: CA:E5:70:9E:4D:C2:51:74:50:ED:AD:99:BF:BD:ED:E1:98:D9:6A:E4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 90AE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa Signing time: Thu 30 May 2024 16:28:58 +0000 ROA not before: Thu 30 May 2024 16:28:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 198949 IP address blocks: 103.55.74.0/24 maxlen: 24 103.153.57.0/24 maxlen: 24 103.153.251.0/24 maxlen: 24 103.183.72.0/24 maxlen: 24 103.183.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37038 (0x90ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:28:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a94a-abe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bb:93:03:19:75:cc:41:67:71:2e:a5:0f:ab: a6:8d:44:3a:ec:0d:4e:e3:92:ab:46:22:2d:a2:ac: 33:18:3a:d0:3d:bf:cf:00:b8:dc:e7:ba:d8:c7:f2: 8c:dc:b2:ec:cd:e7:1e:77:81:d0:2e:f5:a0:2c:ee: 0f:78:4a:35:cf:f3:cf:56:ff:41:b9:72:4a:41:c5: 7d:27:eb:02:db:26:5d:2d:1e:23:dd:54:5e:16:72: dd:70:71:a6:31:43:d2:e5:f4:9c:d6:47:5c:b1:46: 53:67:87:01:42:e9:e2:b6:ae:4c:8d:86:1c:fb:dd: a5:ec:a9:43:b9:51:06:56:71:65:f7:3d:e7:ba:6a: 6d:3e:a6:a2:22:1f:ac:9c:e1:7b:03:6d:86:20:d2: 28:fa:b4:43:6e:8e:d2:11:7d:89:35:d0:fb:31:70: 09:0c:37:cf:4d:bc:ad:df:8b:62:17:2b:d8:b7:aa: b5:f2:f0:97:c2:2d:d8:e1:ca:83:cd:8a:4d:00:61: b1:7a:14:94:5b:16:56:20:28:bd:49:dc:c8:d6:d9: 07:d5:85:b9:c7:30:9c:86:47:30:a4:95:c2:ff:30: 46:6a:3d:59:5a:c8:a0:d0:df:c0:73:08:92:96:de: 2e:85:fa:64:c1:ab:70:da:fe:55:c1:a7:de:e2:27: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E5:70:9E:4D:C2:51:74:50:ED:AD:99:BF:BD:ED:E1:98:D9:6A:E4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.55.74.0/24 103.153.57.0/24 103.153.251.0/24 103.183.72.0/23 Signature Algorithm: sha256WithRSAEncryption 45:0f:95:71:46:a0:b8:8f:35:85:47:65:2e:4a:fa:41:08:76: b2:8d:88:31:a7:8a:26:bb:4d:78:3b:90:9b:08:50:26:9e:94: 6a:fb:11:05:33:ae:7d:59:f4:4f:17:fe:ca:12:54:c5:da:23: f2:e7:0b:9a:4c:79:a5:5a:6a:5a:77:4e:5d:b6:cc:a4:9b:26: e5:ea:49:ff:c0:d5:4b:b0:44:a8:de:7b:85:24:8c:c3:4c:50: f9:e8:b7:d3:88:36:9a:c9:bc:e2:c6:e4:dd:3d:50:38:62:61: d7:77:bb:00:d8:eb:72:d2:a6:dd:92:72:48:70:06:4c:ff:93: c7:66:a7:3d:eb:44:6f:bf:83:33:e0:96:ea:3e:19:03:c3:91: 34:e8:17:66:15:d9:47:99:12:a4:57:39:0f:5e:45:f3:8c:1e: 3d:b8:bf:77:fa:1f:b2:59:41:8d:b1:ea:4d:fe:8f:8a:4c:90: 31:9c:b7:d3:95:8a:8e:ef:c8:d4:4d:c0:d3:dc:38:cd:b9:ed: 38:1a:ab:9f:96:f9:f6:55:ce:79:da:69:c1:44:f7:9b:ae:e6: ce:6d:a9:64:2b:ac:94:f2:2d:f6:d7:0d:54:43:cd:e2:ba:7f: d7:c2:89:61:3d:07:ef:04:5d:1b:8f:e3:5e:cb:b7:0b:a3:3e: 85:f8:8c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAJCuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2Mjg1OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5NGEtYWJlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+7kwMZdcxBZ3EupQ+rpo1EOuwNTuOSq0YiLaKsMxg60D2/zwC43Oe62Mfy jNyy7M3nHneB0C71oCzuD3hKNc/zz1b/QblySkHFfSfrAtsmXS0eI91UXhZy3XBx pjFD0uX0nNZHXLFGU2eHAULp4rauTI2GHPvdpeypQ7lRBlZxZfc957pqbT6moiIf rJzhewNthiDSKPq0Q26O0hF9iTXQ+zFwCQw3z028rd+LYhcr2LeqtfLwl8It2OHK g82KTQBhsXoUlFsWViAovUncyNbZB9WFuccwnIZHMKSVwv8wRmo9WVrIoNDfwHMI kpbeLoX6ZMGrcNr+VcGn3uInTxcCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTK5XCe TcJRdFDtrZm/ve3hmNlq5DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3MEVEMDkw NDc2RTExRUM4QTMxQjc2MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAZzdKAwQAZ5k5AwQAZ5n7AwQBZ7dIMA0GCSqGSIb3DQEB CwUAA4IBAQBFD5VxRqC4jzWFR2UuSvpBCHayjYgxp4omu014O5CbCFAmnpRq+xEF M659WfRPF/7KElTF2iPy5wuaTHmlWmpad05dtsykmybl6kn/wNVLsESo3nuFJIzD TFD56LfTiDaaybzixuTdPVA4YmHXd7sA2Oty0qbdknJIcAZM/5PHZqc960Rvv4Mz 4JbqPhkDw5E06BdmFdlHmRKkVzkPXkXzjB49uL93+h+yWUGNsepN/o+KTJAxnLfT lYqO78jUTcDT3DjNue04Gquflvn2Vc552mnBRPebrubObalkK6yU8i321w1UQ83i un/XwolhPQfvBF0bj+Ney7cLoz6F+IwC -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:40 2024 by rpki-client on console-ams.rpki-client.org