$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa File: 688C6AC29D9D11EC958A216AC4F9AE02.roa (raw, json) Hash identifier: UVjSmdKortc7xXR2V1ZwcpHYtGMB4B0YpUSbuXMU18w= Subject key identifier: F6:40:4F:98:53:85:1D:60:73:0D:CA:02:BC:9B:B3:9E:58:F6:D6:E0 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 02C6 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa Signing time: Wed 03 Apr 2024 04:05:38 +0000 ROA not before: Wed 03 Apr 2024 04:05:38 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 148968 IP address blocks: 103.182.168.0/23 maxlen: 23 2001:df0:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Apr 3 04:05:38 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660cd592-cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:25:ef:a3:18:42:66:b9:a9:13:11:05:4c: fd:aa:80:f9:af:eb:89:64:56:ce:25:57:9d:81:47: 19:2f:3d:42:9f:ec:19:66:73:53:0e:32:88:ad:e1: 9f:81:54:ff:fc:ef:0d:2b:10:38:24:92:94:e7:f6: b3:37:e9:1b:48:b0:7e:9c:17:c5:64:5c:a7:94:8e: 01:3c:b5:97:7e:ba:be:47:6e:4b:7a:de:4d:80:de: f7:87:bc:87:4a:eb:b3:08:e2:62:da:5b:16:08:63: e2:df:d1:17:0b:c1:d4:71:b2:93:82:da:a3:2c:44: b9:03:0f:e5:ae:69:86:44:31:79:51:04:7e:f5:aa: 78:ac:dd:88:51:38:5a:ea:be:d3:26:7e:30:99:a3: 93:b5:1c:35:25:39:ae:e6:4f:37:f5:f9:41:4f:45: 48:66:03:d4:2f:48:d2:58:ee:ea:30:1b:e6:3a:0a: 25:63:69:29:9e:f6:58:a7:1e:8e:d9:e6:cf:85:69: 5c:47:8c:03:2d:8f:d8:d8:64:39:48:21:fc:5a:3c: 50:07:1d:41:26:88:a4:12:28:40:8c:4f:1f:af:ed: aa:98:47:85:96:f2:f1:f6:b4:cf:e2:1f:92:20:be: 89:60:98:d8:53:6b:a3:37:98:a8:bf:18:1d:c0:12: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:4F:98:53:85:1D:60:73:0D:CA:02:BC:9B:B3:9E:58:F6:D6:E0 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.168.0/23 IPv6: 2001:df0:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:06:af:c9:8e:c2:70:ac:0e:e8:86:8a:2f:ba:15:41:e2:d4: 78:db:91:d1:db:64:02:3c:03:69:01:aa:9b:56:5f:53:ad:2d: 00:96:13:41:61:ad:7c:8a:62:85:ea:1e:4e:60:67:48:a5:07: 01:1b:6c:be:ae:b0:18:fb:82:53:48:e7:79:71:e5:57:cc:a4: 2d:6a:53:6d:38:c9:f1:47:df:8f:19:5a:29:37:f0:80:a0:8a: bd:eb:57:f8:e3:84:99:bf:20:cd:36:8d:d8:41:17:c2:72:da: 55:61:b3:06:bd:c1:a1:c4:fd:0f:c2:36:ad:00:05:21:e1:94: 35:c8:34:f7:b4:95:41:0d:48:bf:f5:25:1d:42:35:34:6e:f4: a2:b1:90:50:56:80:89:0f:bc:7d:27:b0:78:19:0d:1b:64:35: 4a:44:6e:c3:22:5d:ea:12:bc:f7:b4:e9:b9:89:d2:1d:99:cf: b0:b4:b4:51:8f:58:85:29:82:4f:a4:a1:dd:0a:19:b1:b5:b9: 62:4b:99:26:d6:a7:41:01:35:5f:a9:18:84:ed:7c:9e:04:d7: e4:65:19:53:a2:5d:db:3d:82:f9:4d:21:1d:fe:72:6f:1a:c6: d2:cd:1d:33:6f:35:4f:1c:54:fb:8a:75:3c:2f:82:7e:af:a2: 83:5d:03:39 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjQwNDAzMDQwNTM4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjZDU5Mi1jYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1Ql76MYQma5qRMRBUz9qoD5r+uJZFbOJVedgUcZLz1Cn+wZZnNTDjKIreGf gVT//O8NKxA4JJKU5/azN+kbSLB+nBfFZFynlI4BPLWXfrq+R25Let5NgN73h7yH SuuzCOJi2lsWCGPi39EXC8HUcbKTgtqjLES5Aw/lrmmGRDF5UQR+9ap4rN2IUTha 6r7TJn4wmaOTtRw1JTmu5k839flBT0VIZgPUL0jSWO7qMBvmOgolY2kpnvZYpx6O 2ebPhWlcR4wDLY/Y2GQ5SCH8WjxQBx1BJoikEihAjE8fr+2qmEeFlvLx9rTP4h+S IL6JYJjYU2ujN5iovxgdwBKHKQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPZAT5hT hR1gcw3KArybs55Y9tbgMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvNjg4QzZBQzI5 RDlEMTFFQzk1OEEyMTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntqgwDwQCAAIwCQMHACABDfB+wDANBgkqhkiG9w0BAQsF AAOCAQEAGwavyY7CcKwO6IaKL7oVQeLUeNuR0dtkAjwDaQGqm1ZfU60tAJYTQWGt fIpiheoeTmBnSKUHARtsvq6wGPuCU0jneXHlV8ykLWpTbTjJ8UffjxlaKTfwgKCK vetX+OOEmb8gzTaN2EEXwnLaVWGzBr3BocT9D8I2rQAFIeGUNcg097SVQQ1Iv/Ul HUI1NG70orGQUFaAiQ+8fSeweBkNG2Q1SkRuwyJd6hK897TpuYnSHZnPsLS0UY9Y hSmCT6Sh3QoZsbW5YkuZJtanQQE1X6kYhO18ngTX5GUZU6Jd2z2C+U0hHf5ybxrG 0s0dM281TxxU+4p1PC+Cfq+ig10DOQ== -----END CERTIFICATE-----Generated at Fri May 17 04:44:30 2024 by rpki-client on console-ams.rpki-client.org