$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04EAB6609B811ED997CAE3DC4F9AE02.roa File: D04EAB6609B811ED997CAE3DC4F9AE02.roa (raw, json) Hash identifier: uYrWdYexGKiyxgkK/QbpWjkWd2rs/feqnNtIosDChh0= Subject key identifier: 6E:F4:D0:E6:03:5C:D9:69:F1:B5:F2:8D:B5:1A:38:68:92:5D:86:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70B0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04EAB6609B811ED997CAE3DC4F9AE02.roa Signing time: Wed 10 May 2023 16:44:44 +0000 ROA not before: Wed 10 May 2023 16:44:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150018 IP address blocks: 103.191.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28848 (0x70b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9fc-4d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:a0:c4:c7:1d:37:21:46:9c:1b:3a:78:74: d2:6b:21:0b:13:dc:e0:ce:99:9f:37:8b:f6:c1:80: d9:3b:3a:bc:3e:0b:02:4d:bd:88:c0:e8:11:ef:48: 63:74:cf:93:45:c0:84:48:8a:44:ac:79:d4:ff:d0: 92:cd:be:14:39:08:d4:ec:c7:19:a8:2f:3d:d3:3d: e5:81:b2:88:4a:2b:c4:4f:6c:4d:8e:4a:11:58:46: d9:39:fc:39:04:32:d7:b9:52:34:b7:aa:54:1a:08: bc:e2:a5:87:6b:d7:2c:63:d6:7d:ae:a6:77:5b:7f: 00:05:87:9a:8d:ae:e7:a5:27:7d:b2:ab:d0:52:1d: 21:e1:cb:8d:5b:ec:27:68:c9:9e:df:7b:d9:31:7d: e5:e4:b8:43:c1:21:a8:ca:3a:b0:61:9e:bb:eb:13: 6c:d4:92:9c:3c:14:b4:9a:4a:42:a5:91:25:0f:1c: 02:70:4c:13:60:53:71:71:b3:66:e8:e4:9a:9c:84: fe:e9:c3:33:d7:10:dd:52:68:60:89:30:0c:ea:08: de:d8:6c:3b:36:42:eb:b8:c2:9c:18:5a:f8:0b:9d: 76:a5:8f:0b:d1:57:3e:c3:8d:b4:8a:52:13:f2:19: c9:53:35:5a:1e:53:84:44:5e:03:60:6a:b1:eb:d9: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:D0:E6:03:5C:D9:69:F1:B5:F2:8D:B5:1A:38:68:92:5D:86:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D04EAB6609B811ED997CAE3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.62.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:17:71:7b:29:ff:3b:15:32:d9:d7:3a:a2:d3:aa:b2:8f:ed: 78:58:c2:ae:81:85:97:09:11:05:4d:1a:d5:c5:c2:2c:b9:af: 3c:b8:02:b8:a4:0b:eb:1b:f1:ca:ca:2d:c3:1e:dc:3e:96:49: 6b:50:d2:71:eb:69:b8:9a:c9:a0:2e:47:25:cf:49:3f:9d:ce: ed:4b:a7:33:39:cc:43:86:71:30:6a:57:b1:58:aa:45:32:94: 5a:c1:a4:c7:25:9a:dc:5c:07:7e:5c:e6:bb:0e:7e:db:7f:c0: 1b:17:f4:37:34:51:3b:dc:05:c2:3e:fd:be:5f:cb:10:f3:bd: ca:a3:1f:b9:6d:7b:ca:c6:61:b7:31:53:1e:be:cd:3d:7f:34: e3:9e:23:57:c9:af:fd:ab:fb:9e:2a:68:4a:d6:03:ed:f8:bd: c8:6f:ee:98:bc:07:df:08:31:9f:6e:5e:1d:d3:14:d2:4e:3d: c3:87:32:70:70:42:22:93:53:ec:8b:2b:47:16:32:53:04:f0: 90:c6:8a:f1:9e:01:13:f0:7a:a8:27:a6:ce:39:3b:97:b0:21: 6a:8e:0c:a9:8b:ac:7e:36:4c:6e:da:07:e0:6b:57:bd:0e:b6: 68:d1:12:86:1f:f8:b7:94:5d:6b:9d:a1:e9:81:d5:d0:8e:ad: 3e:d1:84:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDQ0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlmYy00ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGCgxMcdNyFGnBs6eHTSayELE9zgzpmfN4v2wYDZOzq8PgsCTb2IwOgR70hj dM+TRcCESIpErHnU/9CSzb4UOQjU7McZqC890z3lgbKISivET2xNjkoRWEbZOfw5 BDLXuVI0t6pUGgi84qWHa9csY9Z9rqZ3W38ABYeaja7npSd9sqvQUh0h4cuNW+wn aMme33vZMX3l5LhDwSGoyjqwYZ676xNs1JKcPBS0mkpCpZElDxwCcEwTYFNxcbNm 6OSanIT+6cMz1xDdUmhgiTAM6gje2Gw7NkLruMKcGFr4C512pY8L0Vc+w420ilIT 8hnJUzVaHlOERF4DYGqx69ka8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFG700OYD XNlp8bXyjbUaOGiSXYarMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDA0RUFCNjYw OUI4MTFFRDk5N0NBRTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvz4wDQYJKoZIhvcNAQELBQADggEBAI4XcXsp/zsVMtnX OqLTqrKP7XhYwq6BhZcJEQVNGtXFwiy5rzy4ArikC+sb8crKLcMe3D6WSWtQ0nHr abiayaAuRyXPST+dzu1LpzM5zEOGcTBqV7FYqkUylFrBpMclmtxcB35c5rsOftt/ wBsX9Dc0UTvcBcI+/b5fyxDzvcqjH7lte8rGYbcxUx6+zT1/NOOeI1fJr/2r+54q aErWA+34vchv7pi8B98IMZ9uXh3TFNJOPcOHMnBwQiKTU+yLK0cWMlME8JDGivGe ARPweqgnps45O5ewIWqODKmLrH42TG7aB+BrV70OtmjREoYf+LeUXWudoemB1dCO rT7RhIo= -----END CERTIFICATE-----Generated at Sat May 18 16:20:12 2024 by rpki-client on console-fra.rpki-client.org