$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDF2055C6C1711EE85BF3A39C4F9AE02.roa File: DDF2055C6C1711EE85BF3A39C4F9AE02.roa (raw, json) Hash identifier: XYo6Z3gwoeBu/ZrfKg1JFOYx4L3nycr8pvepkkVWFu8= Subject key identifier: 45:B4:53:66:8E:1E:31:23:D0:40:15:03:C4:0D:67:8F:CF:B1:61:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7C12 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDF2055C6C1711EE85BF3A39C4F9AE02.roa Signing time: Mon 16 Oct 2023 11:33:46 +0000 ROA not before: Mon 16 Oct 2023 11:33:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135208 IP address blocks: 103.88.57.0/24 maxlen: 24 103.119.199.0/24 maxlen: 24 103.131.60.0/24 maxlen: 24 103.148.170.0/23 maxlen: 24 103.168.72.0/23 maxlen: 24 103.170.70.0/23 maxlen: 24 103.204.94.0/23 maxlen: 24 103.205.244.0/23 maxlen: 24 103.206.48.0/23 maxlen: 24 2400:a620::/32 maxlen: 32 2400:a620::/48 maxlen: 48 2400:a620:1::/48 maxlen: 48 2400:a620:2::/48 maxlen: 48 2400:a620:3::/48 maxlen: 48 2400:a620:4::/48 maxlen: 48 2400:a620:5::/48 maxlen: 48 2400:a620:6::/48 maxlen: 48 2400:a620:7::/48 maxlen: 48 2400:a620:8::/48 maxlen: 48 2400:a620:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31762 (0x7c12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 16 11:33:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=652d1f9a-b769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:f7:59:c6:ef:6f:89:99:83:6e:99:16:c6: 34:d3:1c:e0:1a:d3:4e:c7:d3:4a:21:fa:21:dd:eb: 2f:dc:5a:d2:07:7e:70:38:94:fb:e3:2b:1d:c0:4d: 21:d0:34:a5:65:0c:fa:a1:a2:ab:73:f6:ff:ab:d0: 23:0d:75:3b:2a:a7:69:50:9d:19:6a:62:72:fb:20: 95:b8:79:c9:a1:c6:c8:9c:25:62:dc:14:91:64:d6: 5b:a3:d1:c0:f5:9e:cd:57:18:a5:90:cb:08:9c:ee: 13:fc:e9:f5:82:ba:6c:e9:5f:7a:02:24:81:44:06: 94:ef:df:19:fe:5d:cf:51:91:82:4c:d5:9f:db:92: 19:a4:ff:03:85:df:56:f9:18:09:16:15:98:4a:bd: 3f:88:9b:e8:cf:cc:3f:f5:22:95:eb:24:1a:ad:6f: 79:cc:ba:45:ae:64:60:e7:db:1c:9e:8d:66:60:dd: 96:14:a2:e1:0c:f7:89:df:47:77:f1:bd:c6:f5:13: 41:b9:f7:4b:df:07:d3:bc:22:27:f5:40:3b:c2:59: 52:12:8d:a3:66:48:90:38:5b:79:96:50:e2:bf:a9: d4:82:1c:da:9d:5e:ff:39:cf:0a:1e:05:90:5a:24: 66:b2:ce:23:04:e4:57:e8:b1:c3:b8:e2:36:ef:60: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B4:53:66:8E:1E:31:23:D0:40:15:03:C4:0D:67:8F:CF:B1:61:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDF2055C6C1711EE85BF3A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.57.0/24 103.119.199.0/24 103.131.60.0/24 103.148.170.0/23 103.168.72.0/23 103.170.70.0/23 103.204.94.0/23 103.205.244.0/23 103.206.48.0/23 IPv6: 2400:a620::/32 Signature Algorithm: sha256WithRSAEncryption 26:90:a6:54:16:ed:d6:1e:6b:e1:a2:67:fa:ea:25:0f:76:5c: 34:d5:8a:0b:6c:26:73:1d:c8:54:b0:02:b1:cf:b7:fd:17:b5: 70:c3:48:45:61:f3:90:ef:2d:b0:b9:36:13:86:99:2c:fa:3e: d0:e9:81:28:ff:df:01:cf:5f:d6:9b:77:be:20:f5:2e:f8:fd: 5d:94:3b:27:fe:56:7a:cc:6b:a9:84:b2:d2:18:04:02:56:e1: c1:5a:6f:02:f1:09:2b:f8:fd:11:59:25:69:c3:74:6a:ec:4e: 06:14:f0:45:ae:49:12:fb:86:16:87:fe:e4:e9:9f:5f:20:18: 9f:01:2f:8a:01:07:9d:bb:79:73:5f:f5:d8:de:60:9d:bb:7e: c2:b9:10:6f:07:79:2c:d1:de:47:6d:29:40:a3:62:fd:14:b3: ac:64:e6:69:7f:00:77:7c:b5:b9:6b:9f:e5:65:34:41:16:b3: 8a:97:57:af:99:81:9c:0a:2e:6f:2b:cb:57:37:23:c9:34:25: 89:28:63:ac:e0:11:86:be:5e:6b:df:36:39:5b:3a:56:89:8f: 95:5c:45:88:b0:f2:f0:fe:e8:65:4b:2b:e2:b0:87:71:c2:98: 90:27:b1:26:bc:b7:74:2f:89:f7:d0:bc:56:09:f3:e5:26:b1: bb:79:4f:aa -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgICfBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDE2MTEzMzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJkMWY5YS1iNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEn3Wcbvb4mZg26ZFsY00xzgGtNOx9NKIfoh3esv3FrSB35wOJT74ysdwE0h 0DSlZQz6oaKrc/b/q9AjDXU7KqdpUJ0ZamJy+yCVuHnJocbInCVi3BSRZNZbo9HA 9Z7NVxilkMsInO4T/On1grps6V96AiSBRAaU798Z/l3PUZGCTNWf25IZpP8Dhd9W +RgJFhWYSr0/iJvoz8w/9SKV6yQarW95zLpFrmRg59scno1mYN2WFKLhDPeJ30d3 8b3G9RNBufdL3wfTvCIn9UA7wllSEo2jZkiQOFt5llDiv6nUghzanV7/Oc8KHgWQ WiRmss4jBORX6LHDuOI272BMcwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFEW0U2aO HjEj0EAVA8QNZ4/PsWG0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRERGMjA1NUM2 QzE3MTFFRTg1QkYzQTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E TzBNMDwEAgABMDYDBABnWDkDBABnd8cDBABngzwDBAFnlKoDBAFnqEgDBAFnqkYD BAFnzF4DBAFnzfQDBAFnzjAwDQQCAAIwBwMFACQApiAwDQYJKoZIhvcNAQELBQAD ggEBACaQplQW7dYea+GiZ/rqJQ92XDTVigtsJnMdyFSwArHPt/0XtXDDSEVh85Dv LbC5NhOGmSz6PtDpgSj/3wHPX9abd74g9S74/V2UOyf+VnrMa6mEstIYBAJW4cFa bwLxCSv4/RFZJWnDdGrsTgYU8EWuSRL7hhaH/uTpn18gGJ8BL4oBB527eXNf9dje YJ27fsK5EG8HeSzR3kdtKUCjYv0Us6xk5ml/AHd8tblrn+VlNEEWs4qXV6+ZgZwK Lm8ry1c3I8k0JYkoY6zgEYa+XmvfNjlbOlaJj5VcRYiw8vD+6GVLK+Kwh3HCmJAn sSa8t3QviffQvFYJ8+Umsbt5T6o= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org