$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa File: 5434878CD88F11EA9D654539C4F9AE02.roa (raw, json) Hash identifier: j8FzhhpcfdoyAoWtXoiBuCa9MBf79fgIokdVOOg/pEw= Subject key identifier: 9D:E7:60:C5:0C:BC:C4:E2:65:DF:8C:07:9C:FA:C3:72:04:8A:64:CB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A3E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:49 +0000 ROA not before: Wed 10 May 2023 16:13:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132986 IP address blocks: 103.240.104.0/22 maxlen: 24 2001:df3:5000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27198 (0x6a3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2bd-6b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:44:ac:e2:1a:35:c7:5a:44:24:ba:8d:e3: b2:15:2a:7e:cc:5c:1e:ae:53:74:00:75:b6:c9:a0: ad:30:be:8f:fc:fd:c5:7f:14:06:ae:12:58:e9:33: e6:67:38:1a:66:13:61:f5:8d:2b:7e:a3:ee:03:91: 0f:7d:e7:79:2f:e8:7c:ac:94:5d:dc:e6:29:24:f0: 16:55:b4:6f:b0:2a:be:5b:45:b5:54:e3:2d:a2:b4: 8c:42:88:49:42:5a:c7:57:36:e0:68:44:ea:2c:c5: 7a:81:6c:bd:86:24:53:27:82:4d:e3:1e:21:95:fc: 98:c3:59:57:97:25:21:8b:75:4e:a9:52:ec:6e:62: 2c:57:a5:61:e9:7c:ac:72:3b:c1:50:9b:a8:3c:19: ef:98:18:94:7c:2b:13:10:e0:75:42:77:f7:17:e5: 2e:2b:54:56:27:d1:cd:a2:db:16:f1:5f:c6:17:1a: 3b:ee:a6:2d:f1:51:5f:2d:b4:a2:1f:79:ff:45:66: 2c:1f:76:17:e6:46:0d:b4:99:b5:f2:97:96:69:4a: 1b:04:29:92:0e:1c:ee:db:3f:7e:35:12:82:13:3c: 77:ae:6b:14:47:d7:f4:ad:52:07:ca:1a:6a:49:a3: e6:dd:d3:49:1d:a8:de:81:23:58:b6:ff:3d:d3:eb: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:60:C5:0C:BC:C4:E2:65:DF:8C:07:9C:FA:C3:72:04:8A:64:CB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5434878CD88F11EA9D654539C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.104.0/22 IPv6: 2001:df3:5000::/48 Signature Algorithm: sha256WithRSAEncryption 8d:e5:74:9a:e1:a4:6d:e8:a6:35:25:17:3c:53:6b:d3:4b:5d: ee:e7:20:3e:18:02:f0:d1:0b:37:15:a5:2a:06:a8:01:e0:ac: a1:2c:48:a1:dd:b1:c9:1e:fe:78:0f:23:ad:b4:37:f8:d6:c9: ca:9f:4c:e0:57:e7:20:93:18:ce:2e:2a:83:84:da:10:ee:4b: 77:6a:0c:4b:2e:08:1e:ba:33:86:19:ab:e7:c1:0b:18:a3:29: 03:f7:00:27:2b:fc:a0:dc:33:e1:db:4b:09:a9:86:7a:e7:95: 49:b4:3b:d4:22:e0:37:a9:63:46:62:af:cd:0d:62:ce:e3:e4: e2:2e:3a:22:0c:ce:34:46:13:6b:31:23:f7:ea:70:3d:88:69: 69:b4:fb:8c:5a:f5:8c:7b:34:7c:46:8a:d1:90:9d:d2:a2:82: bc:9f:db:a2:3f:9f:e6:87:58:0a:08:c7:a3:3e:e3:99:8b:e5: 2d:c4:90:ba:0f:ae:6a:13:a7:08:5c:c4:4c:1d:6d:30:6b:28: 9b:dd:41:26:9b:40:3f:cd:a5:0a:62:58:8c:fe:a5:5b:16:59: 68:53:19:e7:df:23:d1:68:f4:07:02:b1:e4:02:5c:91:a7:3b: 44:7c:08:72:8f:5f:be:9c:ac:c0:f1:6d:e4:b3:20:96:a8:d8: 4b:f7:b4:5e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICaj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJiZC02YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHNErOIaNcdaRCS6jeOyFSp+zFwerlN0AHW2yaCtML6P/P3FfxQGrhJY6TPm ZzgaZhNh9Y0rfqPuA5EPfed5L+h8rJRd3OYpJPAWVbRvsCq+W0W1VOMtorSMQohJ QlrHVzbgaETqLMV6gWy9hiRTJ4JN4x4hlfyYw1lXlyUhi3VOqVLsbmIsV6Vh6Xys cjvBUJuoPBnvmBiUfCsTEOB1Qnf3F+UuK1RWJ9HNotsW8V/GFxo77qYt8VFfLbSi H3n/RWYsH3YX5kYNtJm18peWaUobBCmSDhzu2z9+NRKCEzx3rmsUR9f0rVIHyhpq SaPm3dNJHajegSNYtv890+uHFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ3nYMUM vMTiZd+MB5z6w3IEimTLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTQzNDg3OENE ODhGMTFFQTlENjU0NTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn8GgwDwQCAAIwCQMHACABDfNQADANBgkqhkiG9w0BAQsF AAOCAQEAjeV0muGkbeimNSUXPFNr00td7ucgPhgC8NELNxWlKgaoAeCsoSxIod2x yR7+eA8jrbQ3+NbJyp9M4FfnIJMYzi4qg4TaEO5Ld2oMSy4IHrozhhmr58ELGKMp A/cAJyv8oNwz4dtLCamGeueVSbQ71CLgN6ljRmKvzQ1izuPk4i46IgzONEYTazEj 9+pwPYhpabT7jFr1jHs0fEaK0ZCd0qKCvJ/boj+f5odYCgjHoz7jmYvlLcSQug+u ahOnCFzETB1tMGsom91BJptAP82lCmJYjP6lWxZZaFMZ598j0Wj0BwKx5AJckac7 RHwIco9fvpyswPFt5LMglqjYS/e0Xg== -----END CERTIFICATE-----Generated at Thu May 16 17:51:32 2024 by rpki-client on console-ams.rpki-client.org