$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01DD074A40FC11EBA4A44F53C4F9AE02.roa File: 01DD074A40FC11EBA4A44F53C4F9AE02.roa (raw, json) Hash identifier: KlmK5P1QRc8EXe9g3/++bAm+U8hQWVAzp9ohXRhvjzk= Subject key identifier: BB:C2:B5:0B:42:11:5D:25:71:FF:49:D5:16:16:58:9C:63:7E:2E:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E7D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01DD074A40FC11EBA4A44F53C4F9AE02.roa Signing time: Wed 10 May 2023 16:34:17 +0000 ROA not before: Wed 10 May 2023 16:34:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141292 IP address blocks: 103.159.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28285 (0x6e7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc789-6e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:ed:a3:d1:d5:5c:ee:a3:e0:0f:5d:ab:f7: 6e:2d:8f:64:fd:ea:e7:0d:83:d2:84:51:a6:c1:ad: 8e:6b:8c:32:e1:7f:ad:03:6f:0c:10:08:6d:87:18: 52:ca:8e:85:7c:d1:5c:51:28:47:0f:b2:26:ec:9d: 51:1c:2c:2b:f1:af:69:29:c5:5c:0b:9c:08:53:70: 5b:63:03:13:72:8e:9d:a6:bc:bb:7f:5c:4b:52:bc: 5f:c2:e7:39:ed:63:bf:aa:44:30:8d:47:45:da:65: 35:86:05:70:b2:8c:ce:27:cc:44:80:e5:dc:c6:c7: 22:3c:7b:af:3a:93:9d:51:06:a5:71:a4:29:19:72: 55:c9:0a:84:df:b8:04:07:b0:02:1d:f3:1c:f9:ee: d2:ec:53:48:e6:f7:27:81:76:1f:04:5e:fb:b6:2f: fd:c5:b5:35:d7:97:e8:c9:7c:1e:e8:6f:e7:2d:92: 2b:9b:c7:aa:a9:1c:5e:40:ed:b2:31:63:7f:16:f7: fd:7a:d5:f9:a5:eb:42:a5:75:b4:4b:bd:23:1c:b9: 85:b9:af:d2:a5:59:41:90:79:58:c4:eb:97:96:91: 37:c5:28:8f:d6:06:e3:f5:75:4e:6b:4f:2f:3a:58: 93:c1:4a:54:85:a2:e0:d2:a6:f9:52:11:f6:c8:26: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:B5:0B:42:11:5D:25:71:FF:49:D5:16:16:58:9C:63:7E:2E:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01DD074A40FC11EBA4A44F53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.184.0/23 Signature Algorithm: sha256WithRSAEncryption 40:10:24:61:b1:9e:70:ad:49:1d:5c:69:5d:a3:e4:f6:2f:69: b9:69:49:5f:01:1e:3b:fd:67:eb:a2:7e:31:7f:da:da:50:fe: cc:ff:51:69:4b:fc:63:1e:5b:d9:1d:27:c9:7d:5f:20:67:4e: ab:8f:a6:a2:aa:ff:be:0c:77:32:2a:18:7f:43:5a:ed:e9:de: fe:a4:9a:4a:54:e7:b7:d7:4f:b5:a4:78:d9:a0:11:51:83:e3: b5:e7:bf:76:2d:d2:63:8c:79:d1:12:64:e7:23:c4:e7:ba:a0: 05:be:2e:0c:16:1b:a7:c9:83:c5:52:fa:64:d1:86:fa:9a:6b: 0e:af:94:40:93:a0:a2:4b:1d:15:4e:0e:93:95:c2:da:c7:68: 73:56:c2:bd:7d:7d:e0:7c:e2:16:38:36:6e:eb:02:3c:8c:2f: fc:fc:3e:55:f9:5c:c7:29:74:35:3f:9d:34:02:2e:9c:5e:5e: 17:73:ab:69:48:0c:cf:53:86:42:98:17:3b:09:de:cb:13:e4: d8:c5:a6:f2:8f:a9:1b:af:27:ad:e5:b0:60:8b:d5:f8:3b:3b: 0f:fd:af:72:c0:9f:6f:20:12:eb:f1:de:02:6d:dc:a3:c3:4e: 6c:64:81:e1:de:be:3d:33:2f:91:df:b6:21:04:5f:29:ff:7a: 10:a0:fb:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc4OS02ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljPto9HVXO6j4A9dq/duLY9k/ernDYPShFGmwa2Oa4wy4X+tA28MEAhthxhS yo6FfNFcUShHD7Im7J1RHCwr8a9pKcVcC5wIU3BbYwMTco6dpry7f1xLUrxfwuc5 7WO/qkQwjUdF2mU1hgVwsozOJ8xEgOXcxsciPHuvOpOdUQalcaQpGXJVyQqE37gE B7ACHfMc+e7S7FNI5vcngXYfBF77ti/9xbU115foyXwe6G/nLZIrm8eqqRxeQO2y MWN/Fvf9etX5petCpXW0S70jHLmFua/SpVlBkHlYxOuXlpE3xSiP1gbj9XVOa08v OliTwUpUhaLg0qb5UhH2yCZdSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLvCtQtC EV0lcf9J1RYWWJxjfi7hMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDFERDA3NEE0 MEZDMTFFQkE0QTQ0RjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnn7gwDQYJKoZIhvcNAQELBQADggEBAEAQJGGxnnCtSR1c aV2j5PYvablpSV8BHjv9Z+uifjF/2tpQ/sz/UWlL/GMeW9kdJ8l9XyBnTquPpqKq /74MdzIqGH9DWu3p3v6kmkpU57fXT7WkeNmgEVGD47Xnv3Yt0mOMedESZOcjxOe6 oAW+LgwWG6fJg8VS+mTRhvqaaw6vlECToKJLHRVODpOVwtrHaHNWwr19feB84hY4 Nm7rAjyML/z8PlX5XMcpdDU/nTQCLpxeXhdzq2lIDM9ThkKYFzsJ3ssT5NjFpvKP qRuvJ63lsGCL1fg7Ow/9r3LAn28gEuvx3gJt3KPDTmxkgeHevj0zL5HftiEEXyn/ ehCg+9Y= -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:47 2024 by rpki-client on console-fra.rpki-client.org