$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A5E19A823811EB9325E784C4F9AE02.roa File: F9A5E19A823811EB9325E784C4F9AE02.roa (raw, json) Hash identifier: TdhxCXWqIFgAUEQQ88yC7uOwb9xhYPHKmLUED4QBjPM= Subject key identifier: 94:54:69:B5:82:92:85:A1:F1:CE:C4:98:18:EB:CC:47:BF:D9:64:A8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A67 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A5E19A823811EB9325E784C4F9AE02.roa Signing time: Wed 10 May 2023 16:14:37 +0000 ROA not before: Wed 10 May 2023 16:14:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133268 IP address blocks: 103.81.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27239 (0x6a67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2ec-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:69:68:a5:b6:d3:8c:fe:43:77:90:1f:e8: 83:8f:9c:18:83:17:78:c5:ee:f9:7a:23:c4:91:a2: be:1a:6b:23:28:8c:ac:88:00:16:c1:b6:05:ad:18: 36:94:1b:b9:f1:8b:64:fd:31:ba:9c:35:2e:14:06: 54:22:4f:02:37:3c:52:8e:ca:b1:c0:17:57:6d:6b: 8e:00:a7:b7:29:8a:e7:e9:35:d2:34:51:06:35:67: 75:ef:49:69:44:2d:d5:8f:f7:ac:f3:1a:69:4e:2c: 01:c3:83:f0:13:eb:78:9e:e7:c7:eb:6a:e1:32:67: 5b:ff:f1:c6:12:82:7f:1d:83:a1:87:83:13:36:0d: 86:5d:1a:77:05:cb:01:da:4a:e2:43:ce:b3:2d:3a: c4:39:e3:c7:65:75:55:70:57:3b:14:e7:a1:24:f0: 70:d4:b4:f8:89:d8:df:a5:bc:1b:8d:e3:85:4f:83: b3:51:00:29:01:45:0d:56:2a:1c:a8:fd:cc:44:b1: 02:8b:5d:0e:e8:8a:e4:86:cb:60:96:15:e2:0f:a8: bd:84:34:b2:fd:75:d2:c6:9f:b4:44:3b:ac:01:e8: 2a:0f:0e:49:37:08:05:85:2f:6b:a2:a3:bd:33:a0: bc:b3:f3:cc:8f:a5:24:ed:b0:5a:d8:c6:d2:71:ba: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:54:69:B5:82:92:85:A1:F1:CE:C4:98:18:EB:CC:47:BF:D9:64:A8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9A5E19A823811EB9325E784C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.208.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:23:63:53:5c:5b:66:b0:50:a5:90:1a:77:f7:f3:9b:11:ee: 49:58:05:82:12:a0:1b:15:67:85:14:ae:19:86:5d:b2:91:5a: a7:e0:8b:04:59:e8:27:36:71:7e:71:c3:df:86:9a:5e:25:f9: fe:7e:17:03:5e:09:7e:aa:d2:79:f6:e5:55:52:04:9d:77:e3: e0:0f:c6:f2:9d:a4:68:d2:b1:1d:d9:d8:30:e6:99:16:13:39: 2d:10:8c:bb:31:0a:d9:6f:d0:b5:a8:fa:0d:80:50:83:af:86: 22:8b:2a:3f:3f:93:6d:ca:c3:28:91:37:58:47:18:18:e0:af: f6:29:26:19:0c:45:95:bc:12:94:33:cb:76:46:bf:dd:3d:cd: dd:89:d7:52:3a:81:62:b7:5d:27:2c:12:2d:e7:07:cc:41:90: c5:33:b2:59:30:4a:5a:a1:86:b1:a9:2f:c4:ea:e0:2c:56:3a: 0f:bd:f9:4c:91:83:8f:45:fc:17:c2:c6:e2:a5:5f:74:a9:36: 37:61:f4:b3:5b:1f:7c:5a:90:74:42:2b:4e:bf:e6:77:81:e0: 52:05:95:4c:e2:e9:b2:b5:b3:55:f9:00:31:33:34:a8:58:83: 03:fe:87:db:de:49:0a:c3:e6:f5:62:33:7c:15:1e:8c:48:19: 6f:c5:ab:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICamcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJlYy05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJJpaKW204z+Q3eQH+iDj5wYgxd4xe75eiPEkaK+GmsjKIysiAAWwbYFrRg2 lBu58Ytk/TG6nDUuFAZUIk8CNzxSjsqxwBdXbWuOAKe3KYrn6TXSNFEGNWd170lp RC3Vj/es8xppTiwBw4PwE+t4nufH62rhMmdb//HGEoJ/HYOhh4MTNg2GXRp3BcsB 2kriQ86zLTrEOePHZXVVcFc7FOehJPBw1LT4idjfpbwbjeOFT4OzUQApAUUNVioc qP3MRLECi10O6IrkhstglhXiD6i9hDSy/XXSxp+0RDusAegqDw5JNwgFhS9roqO9 M6C8s/PMj6Uk7bBa2MbScbqQ/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJRUabWC koWh8c7EmBjrzEe/2WSoMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjlBNUUxOUE4 MjM4MTFFQjkzMjVFNzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnUdAwDQYJKoZIhvcNAQELBQADggEBAC0jY1NcW2awUKWQ Gnf385sR7klYBYISoBsVZ4UUrhmGXbKRWqfgiwRZ6Cc2cX5xw9+Gml4l+f5+FwNe CX6q0nn25VVSBJ134+APxvKdpGjSsR3Z2DDmmRYTOS0QjLsxCtlv0LWo+g2AUIOv hiKLKj8/k23KwyiRN1hHGBjgr/YpJhkMRZW8EpQzy3ZGv909zd2J11I6gWK3XScs Ei3nB8xBkMUzslkwSlqhhrGpL8Tq4CxWOg+9+UyRg49F/BfCxuKlX3SpNjdh9LNb H3xakHRCK06/5neB4FIFlUzi6bK1s1X5ADEzNKhYgwP+h9veSQrD5vViM3wVHoxI GW/FqyA= -----END CERTIFICATE-----Generated at Thu May 16 16:14:56 2024 by rpki-client on console-fra.rpki-client.org