$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa File: 4F25872CE53C11EB9E429C44C4F9AE02.roa (raw, json) Hash identifier: so0/oIMSCvu9tcPEIMI14EC7olFxU08EjyfAmwAkKdA= Subject key identifier: FB:42:34:87:7A:5C:CB:FE:54:14:D0:DF:5A:34:E3:F5:50:F0:3C:2F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EB4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:17 +0000 ROA not before: Wed 10 May 2023 16:35:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141494 IP address blocks: 103.161.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28340 (0x6eb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7c5-5bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:8c:ca:25:b6:a1:e0:69:f3:86:95:49:d3: 9d:68:12:12:2d:f3:00:45:8d:04:ed:86:33:a5:73: a4:c5:fb:08:93:85:b0:a8:29:96:33:26:ee:5d:49: c3:46:11:67:b8:6c:8c:d4:65:bf:2a:5d:9a:68:7e: 4f:eb:11:c9:5e:dc:08:a3:60:92:39:58:45:92:a7: 19:ae:24:c9:e0:f8:ce:c0:ae:13:f8:8c:cd:a4:0a: 00:66:bd:81:73:87:cd:4e:b1:ed:8e:da:cb:bd:2d: 4f:14:3a:6f:4c:3c:e9:4c:3d:8e:92:75:44:da:72: 2d:42:88:81:0f:0f:10:3c:f1:44:26:63:b2:77:d7: d8:00:37:a6:17:0e:b4:79:77:67:af:31:e5:bd:5b: 7d:8c:04:f8:b2:3a:87:1a:be:e5:79:76:8c:4d:24: 54:d9:d7:23:a9:73:eb:ed:f6:15:5e:6e:49:83:be: 70:9d:3b:a7:5a:2b:fa:ca:ba:82:fc:e3:e1:ec:bd: 4a:f9:93:9d:98:f1:cb:11:5a:e9:9c:3a:fb:71:d1: c7:af:09:f0:63:57:53:0e:26:0f:5f:58:95:37:12: 65:85:8f:d1:10:e9:d5:54:da:21:00:40:9d:36:4c: 4b:e1:12:86:87:da:23:6b:f4:e2:b1:71:32:39:d8: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:34:87:7A:5C:CB:FE:54:14:D0:DF:5A:34:E3:F5:50:F0:3C:2F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.186.0/23 Signature Algorithm: sha256WithRSAEncryption a7:f5:df:53:40:48:f5:cb:5b:0b:8b:af:46:f8:55:aa:da:eb: 19:c3:b6:45:a5:0f:b3:06:fa:ec:9a:e0:75:b7:b8:41:08:8e: 06:91:67:4d:90:c2:b0:98:af:82:1c:4a:8b:30:5f:07:bb:42: 9e:e4:e5:a2:b0:2a:c2:a1:ff:69:61:a5:ed:3b:d2:22:f3:e6: 61:0b:aa:5e:b9:70:20:f2:a9:08:49:db:34:b4:70:08:4d:dc: d5:87:4e:9a:45:25:78:ad:26:7d:2f:bf:e5:8b:e6:bd:1d:8d: 46:25:16:33:2a:82:03:ac:5d:72:47:fb:e3:80:95:5a:30:78: 64:e8:72:86:36:6d:e1:96:c6:19:80:8a:02:78:cc:ee:4c:34: ad:b2:b7:8e:76:69:e8:9e:90:b9:1f:3e:0e:98:d3:04:89:22: 77:8a:01:cb:75:09:a6:2c:c7:81:bd:e9:e9:fa:14:39:c4:b3: 53:20:6c:cf:5c:83:c0:4e:3b:e7:b7:28:76:38:55:31:cc:3e: 98:9a:8b:a4:6c:8a:e3:86:27:4e:7f:cb:da:9d:42:a2:7f:03: 90:fd:44:7b:ad:5c:34:a5:71:b3:a1:62:41:3f:9d:e5:73:bb: c2:88:99:32:e0:de:fd:96:87:7a:39:07:f8:13:df:40:9d:85: 94:8c:e2:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdjNS01YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eCMyiW2oeBp84aVSdOdaBISLfMARY0E7YYzpXOkxfsIk4WwqCmWMybuXUnD RhFnuGyM1GW/Kl2aaH5P6xHJXtwIo2CSOVhFkqcZriTJ4PjOwK4T+IzNpAoAZr2B c4fNTrHtjtrLvS1PFDpvTDzpTD2OknVE2nItQoiBDw8QPPFEJmOyd9fYADemFw60 eXdnrzHlvVt9jAT4sjqHGr7leXaMTSRU2dcjqXPr7fYVXm5Jg75wnTunWiv6yrqC /OPh7L1K+ZOdmPHLEVrpnDr7cdHHrwnwY1dTDiYPX1iVNxJlhY/REOnVVNohAECd NkxL4RKGh9oja/TisXEyOdgrIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPtCNId6 XMv+VBTQ31o04/VQ8DwvMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEYyNTg3MkNF NTNDMTFFQjlFNDI5QzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnobowDQYJKoZIhvcNAQELBQADggEBAKf131NASPXLWwuL r0b4Vara6xnDtkWlD7MG+uya4HW3uEEIjgaRZ02QwrCYr4IcSoswXwe7Qp7k5aKw KsKh/2lhpe070iLz5mELql65cCDyqQhJ2zS0cAhN3NWHTppFJXitJn0vv+WL5r0d jUYlFjMqggOsXXJH++OAlVoweGTocoY2beGWxhmAigJ4zO5MNK2yt452aeiekLkf Pg6Y0wSJIneKAct1CaYsx4G96en6FDnEs1MgbM9cg8BOO+e3KHY4VTHMPpiai6Rs iuOGJ05/y9qdQqJ/A5D9RHutXDSlcbOhYkE/neVzu8KImTLg3v2Wh3o5B/gT30Cd hZSM4mw= -----END CERTIFICATE-----Generated at Thu May 16 17:51:32 2024 by rpki-client on console-ams.rpki-client.org