$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa File: 14E95DB6008E11EF8A421558C4F9AE02.roa (raw, json) Hash identifier: k8izVYcxDe9Mt8752exGBPeDLCLv6AP3zyxRZqUSa/k= Subject key identifier: C2:08:E1:4A:4B:8C:FB:FB:78:AD:C3:F1:59:B2:A7:F0:D3:21:39:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8689 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa Signing time: Mon 22 Apr 2024 09:52:51 +0000 ROA not before: Mon 22 Apr 2024 09:52:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151126 IP address blocks: 103.133.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34441 (0x8689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 22 09:52:51 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66263373-4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:90:86:a0:90:cc:eb:ec:b7:12:8d:bf:fa: ac:49:12:ec:00:a6:ac:8a:81:12:ba:75:24:69:33: 79:7f:42:2f:26:70:e2:12:06:03:2c:3c:2f:2e:2d: 1b:d7:aa:a3:ca:7e:b1:c1:37:27:72:05:10:39:7e: d7:ea:b4:e9:c1:16:5b:1e:fb:16:7b:da:d2:ce:7f: dd:8a:96:4a:a4:c6:de:85:79:ee:e8:fa:80:95:53: 15:af:50:38:ea:93:98:60:54:71:e0:12:d6:de:e3: a8:f0:09:8e:4d:68:dd:a6:d0:5e:44:b7:1b:10:be: f9:bf:1a:b9:ba:5f:9c:b7:48:83:1f:75:c2:0f:2b: 34:70:45:b1:f2:b5:26:db:2a:1a:d5:b3:09:0d:64: 92:5e:ef:e7:a0:5f:31:b5:02:e8:af:f5:03:0c:ca: 9a:5d:f0:f0:c8:59:cb:97:f0:e1:5a:58:6a:2c:84: a6:4f:4f:50:42:8b:9a:87:c0:7a:42:fa:e7:6b:18: 69:8c:4c:f1:00:80:57:fe:fa:c6:24:86:e2:46:c0: 48:0a:00:d1:58:c1:a4:9c:20:0c:6a:eb:48:af:6e: 87:2f:87:12:07:78:98:94:64:d5:f8:04:45:8f:11: fc:9b:42:dd:7f:bc:66:db:db:e5:f6:4c:aa:2a:bf: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:E1:4A:4B:8C:FB:FB:78:AD:C3:F1:59:B2:A7:F0:D3:21:39:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.156.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:81:15:fc:98:72:57:2d:aa:a3:a7:21:4a:fb:70:d7:1a:c7: d4:50:df:83:83:28:bb:8b:6b:f8:b5:64:ad:6d:d9:92:75:06: 4c:21:7e:c8:a8:f3:0d:69:40:11:68:2f:2c:30:05:07:7d:9f: 69:b0:97:46:72:19:7a:b9:15:ba:93:eb:94:be:7e:b7:9d:82: 07:02:98:da:b5:cb:90:11:26:c1:b5:96:49:0a:23:93:08:67: 6a:2a:6f:f4:13:6a:62:c3:08:a7:8f:8b:66:b7:f2:6d:ae:39: 59:4d:18:1b:9d:f0:2e:0a:6b:6c:96:75:c0:0b:c3:eb:a3:16: be:56:97:a9:c9:37:ff:b0:13:b3:79:2f:6b:25:76:f1:9c:63: 03:19:1f:a8:be:4c:7b:27:fb:f3:2d:43:15:b9:1d:d8:a7:83: 4d:76:7b:4c:b7:8a:c0:b1:3a:bd:9c:c0:1e:6f:01:54:d0:41: d2:2b:12:65:9b:e8:e3:f9:13:e1:13:1a:5a:dd:69:f4:d3:18: 64:9e:f3:0d:9c:b1:80:18:26:4c:b6:94:54:8e:52:a3:04:ff: ab:da:2e:b3:13:a3:e6:47:d0:b3:f9:4d:d4:7b:fb:63:ed:9a: 65:6f:80:ed:a0:81:24:dd:36:c1:43:36:06:c4:f0:92:4c:b3: 5d:e8:53:44 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIaJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDQyMjA5NTI1MVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjYyNjMzNzMtNGE3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO43kIagkMzr7LcSjb/6rEkS7ACmrIqBErp1JGkzeX9CLyZw4hIGAyw8Ly4t G9eqo8p+scE3J3IFEDl+1+q06cEWWx77Fnva0s5/3YqWSqTG3oV57uj6gJVTFa9Q OOqTmGBUceAS1t7jqPAJjk1o3abQXkS3GxC++b8aubpfnLdIgx91wg8rNHBFsfK1 JtsqGtWzCQ1kkl7v56BfMbUC6K/1AwzKml3w8MhZy5fw4VpYaiyEpk9PUEKLmofA ekL652sYaYxM8QCAV/76xiSG4kbASAoA0VjBpJwgDGrrSK9uhy+HEgd4mJRk1fgE RY8R/JtC3X+8Ztvb5fZMqiq/ZvkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTCCOFK S4z7+3itw/FZsqfw0yE5AjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0RTk1REI2 MDA4RTExRUY4QTQyMTU1OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ4WcMA0GCSqGSIb3DQEBCwUAA4IBAQBagRX8mHJXLaqj pyFK+3DXGsfUUN+Dgyi7i2v4tWStbdmSdQZMIX7IqPMNaUARaC8sMAUHfZ9psJdG chl6uRW6k+uUvn63nYIHApjatcuQESbBtZZJCiOTCGdqKm/0E2piwwinj4tmt/Jt rjlZTRgbnfAuCmtslnXAC8Proxa+VpepyTf/sBOzeS9rJXbxnGMDGR+ovkx7J/vz LUMVuR3Yp4NNdntMt4rAsTq9nMAebwFU0EHSKxJlm+jj+RPhExpa3Wn00xhknvMN nLGAGCZMtpRUjlKjBP+r2i6zE6PmR9Cz+U3Ue/tj7Zplb4DtoIEk3TbBQzYGxPCS TLNd6FNE -----END CERTIFICATE-----Generated at Fri May 17 15:22:50 2024 by rpki-client on console-ams.rpki-client.org