$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C73943F2FB2B11EBA1FCA145C4F9AE02.roa File: C73943F2FB2B11EBA1FCA145C4F9AE02.roa (raw, json) Hash identifier: z1pgwTsR9kmUJ5GqlYnIQXUebn2xwZ1Boq5LRnd26sk= Subject key identifier: 3D:AB:00:A3:ED:7C:A8:1F:B3:67:25:30:F2:4D:5A:42:F7:9E:52:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71A5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C73943F2FB2B11EBA1FCA145C4F9AE02.roa Signing time: Wed 10 May 2023 16:49:17 +0000 ROA not before: Wed 10 May 2023 16:49:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55507 IP address blocks: 45.114.144.0/22 maxlen: 24 45.119.88.0/22 maxlen: 24 103.23.118.0/23 maxlen: 24 103.87.168.0/22 maxlen: 24 103.226.20.0/23 maxlen: 24 103.228.184.0/22 maxlen: 24 103.229.78.0/23 maxlen: 24 103.243.88.0/23 maxlen: 24 180.200.240.0/22 maxlen: 24 182.237.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29093 (0x71a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb0d-0497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:f2:f2:63:59:f1:05:4d:a1:72:db:14:e5: 2d:9e:dc:d0:11:c0:0e:fb:ae:a4:a7:87:6e:0b:b5: db:25:99:37:47:79:4f:4e:91:da:42:b5:ba:1d:00: 49:19:b0:cb:ad:3d:24:8e:fb:6a:d0:37:9e:59:01: a5:eb:d9:4c:24:00:08:c0:90:48:23:a0:9a:c5:cf: 0e:ac:f7:12:3a:48:4a:ec:a4:a4:0a:75:b4:ec:08: bc:c5:31:08:1a:7e:9b:cd:8c:1e:c4:56:6b:0e:8b: 96:4c:89:24:07:48:c9:ca:e7:09:77:20:67:ed:49: 91:88:25:04:67:e0:20:5b:b2:b6:44:41:01:7d:52: 6c:e5:1d:a7:2b:d7:9b:df:41:c4:74:c5:b6:b8:05: cb:a6:03:4d:0e:6a:23:54:95:47:90:1b:91:c1:3b: 52:2c:9a:92:de:6d:11:c4:9e:35:73:26:09:00:79: 7c:3a:32:b8:df:09:d8:4f:21:a4:4c:96:13:53:22: 12:70:e3:d4:71:ad:05:db:86:16:a2:eb:62:65:ef: 4e:c6:74:8e:7c:0c:62:35:c0:01:b6:75:51:8c:1e: 37:25:5c:8f:fa:b7:e7:73:ba:52:63:3a:7b:a1:f7: 7a:f2:97:5b:c3:4e:6f:df:90:eb:4a:a5:66:c3:66: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:00:A3:ED:7C:A8:1F:B3:67:25:30:F2:4D:5A:42:F7:9E:52:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C73943F2FB2B11EBA1FCA145C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.144.0/22 45.119.88.0/22 103.23.118.0/23 103.87.168.0/22 103.226.20.0/23 103.228.184.0/22 103.229.78.0/23 103.243.88.0/23 180.200.240.0/22 182.237.16.0/22 Signature Algorithm: sha256WithRSAEncryption 56:12:8c:82:a8:79:64:66:15:ee:16:e2:e3:86:22:c1:b6:04: 34:f6:1c:d2:b1:05:01:5f:8d:21:7f:d0:06:08:8b:5f:99:ba: 64:77:79:2a:ab:c2:61:6d:65:7c:c1:fa:60:5f:32:0f:74:b0: 80:51:79:2e:dc:54:b3:c2:83:2a:b1:6a:97:1f:f8:b9:b4:2b: 02:d7:66:5f:80:dd:4d:d3:e9:37:24:52:b5:b7:c0:78:9f:67: cc:9b:f9:e2:08:05:0a:d9:3d:34:8f:dc:56:ea:f3:1c:2c:39: ab:20:2d:bd:e5:23:9b:9e:c2:d4:b6:53:42:67:6b:01:4a:ab: be:b3:75:b0:1a:eb:e2:0c:86:4a:15:85:b1:7b:a8:70:ba:46: fb:44:71:f1:64:1d:9b:37:bd:4d:1c:d5:bd:cf:be:5a:22:d2: 47:cd:22:48:e8:a7:54:88:9c:52:32:66:f1:cc:b6:35:3b:4c: d9:bf:ce:99:bb:92:8c:b2:21:87:3a:ab:d4:3d:9c:d2:92:e2: dd:73:c7:79:bd:be:8b:58:cf:8f:51:86:5d:e2:63:c0:07:c8: 48:c4:f0:ab:8c:3b:30:c0:4e:3a:d0:74:74:8f:d7:f9:af:27: 48:b3:54:b5:f7:a0:de:f2:aa:a1:7b:3b:b2:3a:1f:51:46:08: df:6d:58:0d -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICcaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IwZC0wNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDXy8mNZ8QVNoXLbFOUtntzQEcAO+66kp4duC7XbJZk3R3lPTpHaQrW6HQBJ GbDLrT0kjvtq0DeeWQGl69lMJAAIwJBII6Caxc8OrPcSOkhK7KSkCnW07Ai8xTEI Gn6bzYwexFZrDouWTIkkB0jJyucJdyBn7UmRiCUEZ+AgW7K2REEBfVJs5R2nK9eb 30HEdMW2uAXLpgNNDmojVJVHkBuRwTtSLJqS3m0RxJ41cyYJAHl8OjK43wnYTyGk TJYTUyIScOPUca0F24YWoutiZe9OxnSOfAxiNcABtnVRjB43JVyP+rfnc7pSYzp7 ofd68pdbw05v35DrSqVmw2ZiEwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFD2rAKPt fKgfs2clMPJNWkL3nlKRMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzczOTQzRjJG QjJCMTFFQkExRkNBMTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBAItcpADBAItd1gDBAFnF3YDBAJnV6gDBAFn4hQDBAJn5LgD BAFn5U4DBAFn81gDBAK0yPADBAK27RAwDQYJKoZIhvcNAQELBQADggEBAFYSjIKo eWRmFe4W4uOGIsG2BDT2HNKxBQFfjSF/0AYIi1+ZumR3eSqrwmFtZXzB+mBfMg90 sIBReS7cVLPCgyqxapcf+Lm0KwLXZl+A3U3T6TckUrW3wHifZ8yb+eIIBQrZPTSP 3Fbq8xwsOasgLb3lI5uewtS2U0JnawFKq76zdbAa6+IMhkoVhbF7qHC6RvtEcfFk HZs3vU0c1b3Pvloi0kfNIkjop1SInFIyZvHMtjU7TNm/zpm7koyyIYc6q9Q9nNKS 4t1zx3m9votYz49Rhl3iY8AHyEjE8KuMOzDATjrQdHSP1/mvJ0izVLX3oN7yqqF7 O7I6H1FGCN9tWA0= -----END CERTIFICATE-----Generated at Sat May 18 16:20:11 2024 by rpki-client on console-fra.rpki-client.org