$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa File: DA91C60CBDD011EA9702FC12C4F9AE02.roa (raw, json) Hash identifier: ouvMemXLok9YODcOqce4MSWL3X85AfNyzSvbbOb/1dc= Subject key identifier: F4:1A:55:1D:D1:EB:FE:D5:03:F8:CE:85:DF:80:20:EB:8F:01:09:3A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DDC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa Signing time: Wed 10 May 2023 16:31:23 +0000 ROA not before: Wed 10 May 2023 16:31:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139509 IP address blocks: 103.146.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28124 (0x6ddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:31:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6db-107c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:fe:ca:a6:db:95:2a:e6:af:1f:d3:9e:21: 1c:0e:b0:dd:98:7b:6d:03:11:20:1c:38:aa:de:72: 27:e9:c3:9f:e7:ea:42:be:ac:bb:ae:56:a1:1f:13: 22:47:9d:92:a7:96:37:97:df:d8:8d:dd:10:0e:76: 03:5e:2b:7a:59:0e:cf:1f:0f:31:c4:09:e7:75:37: ed:af:ff:22:55:2f:a1:48:78:b4:19:b4:c9:45:a8: 89:93:1f:3c:69:e0:ab:73:52:7f:12:10:25:d0:f0: 73:2a:26:b7:8e:28:ba:c5:98:cf:6e:f1:54:89:bd: e9:7a:39:15:b5:db:02:0f:0a:96:a2:04:12:6e:7d: 68:e3:9b:c9:72:c8:1f:e3:67:4c:e0:d1:37:02:5e: 2b:75:ad:20:e4:b3:a8:d1:51:a3:d3:30:88:2a:77: 12:cc:d1:75:69:e5:c7:83:c8:f6:80:29:2e:db:52: 68:93:cd:b4:7e:b5:48:ec:ce:04:02:34:77:86:dd: 9b:cf:69:8f:5a:bd:6e:e2:28:73:72:68:e0:93:3a: 59:c8:63:7a:63:f5:94:08:ce:63:79:16:3b:0f:c5: dd:67:36:9e:cd:b9:23:df:35:f9:3d:77:d3:c4:8c: 0a:b3:ec:dc:53:9f:85:ce:80:d9:8e:38:5a:ea:44: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1A:55:1D:D1:EB:FE:D5:03:F8:CE:85:DF:80:20:EB:8F:01:09:3A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.228.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:07:d2:09:c2:cd:95:fa:60:a4:61:a1:58:52:96:dd:02:35: 90:45:57:e0:7f:e2:1a:9e:72:de:72:e5:22:81:c9:c8:16:55: bb:80:cb:b8:71:2c:89:dd:5d:5e:12:18:bb:1d:b3:bd:ee:c5: f7:87:c5:e8:ac:c4:56:ae:d3:5e:08:ac:c3:cd:5a:c9:1b:99: 54:04:0e:9e:61:27:78:30:6d:3c:6f:ee:92:d7:aa:36:e5:2d: 58:32:20:79:d7:ac:15:e3:8e:3f:fa:02:92:24:d1:8d:22:ba: 5f:43:a9:0f:62:0a:f9:2a:66:3f:6d:f8:ed:88:d9:b3:59:eb: 02:cc:2c:eb:28:e6:40:56:c1:a2:0d:5c:2f:ef:60:3d:4b:c6: 19:a1:c8:a0:a0:32:1c:4c:8d:b8:de:47:29:50:58:23:29:05: c0:28:3c:18:ae:ec:9c:9d:e8:47:19:72:72:35:b2:d1:bd:90: c9:01:d8:d4:92:ff:27:dd:19:95:99:e7:4e:dc:cc:72:7b:4b: af:ae:aa:4a:93:d8:5d:54:07:64:6a:33:b9:97:68:e8:e3:90: be:02:31:8f:b6:cd:95:79:c7:fd:24:fa:56:64:57:70:5e:ce: af:60:39:df:20:f2:de:e2:d4:80:07:bd:73:38:04:85:84:03: 26:7b:f0:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMTIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZkYi0xMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC7+yqbblSrmrx/TniEcDrDdmHttAxEgHDiq3nIn6cOf5+pCvqy7rlahHxMi R52Sp5Y3l9/Yjd0QDnYDXit6WQ7PHw8xxAnndTftr/8iVS+hSHi0GbTJRaiJkx88 aeCrc1J/EhAl0PBzKia3jii6xZjPbvFUib3pejkVtdsCDwqWogQSbn1o45vJcsgf 42dM4NE3Al4rda0g5LOo0VGj0zCIKncSzNF1aeXHg8j2gCku21Jok820frVI7M4E AjR3ht2bz2mPWr1u4ihzcmjgkzpZyGN6Y/WUCM5jeRY7D8XdZzaezbkj3zX5PXfT xIwKs+zcU5+FzoDZjjha6kQJlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPQaVR3R 6/7VA/jOhd+AIOuPAQk6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREE5MUM2MENC REQwMTFFQTk3MDJGQzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkuQwDQYJKoZIhvcNAQELBQADggEBAB0H0gnCzZX6YKRh oVhSlt0CNZBFV+B/4hqect5y5SKBycgWVbuAy7hxLIndXV4SGLsds73uxfeHxeis xFau014IrMPNWskbmVQEDp5hJ3gwbTxv7pLXqjblLVgyIHnXrBXjjj/6ApIk0Y0i ul9DqQ9iCvkqZj9t+O2I2bNZ6wLMLOso5kBWwaINXC/vYD1LxhmhyKCgMhxMjbje RylQWCMpBcAoPBiu7Jyd6EcZcnI1stG9kMkB2NSS/yfdGZWZ507czHJ7S6+uqkqT 2F1UB2RqM7mXaOjjkL4CMY+2zZV5x/0k+lZkV3Bezq9gOd8g8t7i1IAHvXM4BIWE AyZ78Ms= -----END CERTIFICATE-----Generated at Fri May 17 14:08:17 2024 by rpki-client on console-fra.rpki-client.org