$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02ED9B82D7A611EAA0FD2C52C4F9AE02.roa File: 02ED9B82D7A611EAA0FD2C52C4F9AE02.roa (raw, json) Hash identifier: UoZTYVFLxzRAzWYSrgo1J0Rx155nrjJatJwtv6MF8Sw= Subject key identifier: 3E:78:A3:D1:29:E6:F5:6E:27:1F:65:80:A6:86:E1:AF:7C:4F:DF:C2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C2E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02ED9B82D7A611EAA0FD2C52C4F9AE02.roa Signing time: Wed 10 May 2023 16:23:17 +0000 ROA not before: Wed 10 May 2023 16:23:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135852 IP address blocks: 103.51.222.0/24 maxlen: 24 103.51.223.0/24 maxlen: 24 103.52.0.0/24 maxlen: 24 103.82.156.0/22 maxlen: 24 103.226.52.0/24 maxlen: 24 2404:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27694 (0x6c2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4f5-2619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:68:6e:b9:54:7e:ca:76:07:a0:ea:14:e8: 18:24:f8:95:ae:83:08:07:3c:d5:b3:15:4e:50:4d: b5:1a:2c:b0:7e:e3:a7:ee:3c:73:18:9c:3a:38:53: 2c:70:cc:36:a2:b9:60:02:25:96:7e:a4:ce:86:bd: 6b:0f:ef:0f:19:33:9d:e9:36:df:d8:56:01:03:50: 00:e3:cb:8c:86:c4:fe:f6:df:86:f0:78:02:6e:42: 34:c8:0e:53:9e:f5:63:db:4d:a3:03:cb:18:2a:3e: f4:79:48:77:44:fe:a6:a1:7b:80:bc:28:58:eb:b6: 71:fd:6d:fd:45:ce:09:67:4d:34:54:02:26:38:e8: 18:89:57:e5:63:64:c2:35:f3:0d:88:49:90:3a:70: 6a:a2:a2:92:29:dc:ac:ce:01:eb:e0:c0:15:a8:a8: 83:f0:53:87:c3:70:a1:83:e0:68:dd:64:fb:9c:ce: b8:c2:62:7c:a5:0b:6a:5f:b0:53:75:39:99:10:13: a9:7f:e8:41:8c:78:29:eb:fa:06:33:18:f6:31:bb: 82:d3:39:8b:b4:b8:89:23:f7:f5:d8:1e:0b:f4:37: aa:50:be:15:22:74:82:d7:e0:d7:25:2a:c2:06:b1: 9c:ca:62:ec:8c:c5:c0:ad:b9:1b:8e:4d:c5:c2:1e: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:78:A3:D1:29:E6:F5:6E:27:1F:65:80:A6:86:E1:AF:7C:4F:DF:C2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02ED9B82D7A611EAA0FD2C52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.222.0/23 103.52.0.0/24 103.82.156.0/22 103.226.52.0/24 IPv6: 2404:cb40::/32 Signature Algorithm: sha256WithRSAEncryption a8:98:29:f3:cc:e4:68:79:93:dd:a7:63:d1:a0:c2:02:bb:e9: 94:c9:5a:28:4c:2d:01:13:5c:3b:53:61:13:fd:43:59:6c:57: 11:53:45:da:dd:1e:f8:02:07:49:ef:64:fa:bc:05:0b:16:08: 52:42:c6:45:67:50:04:a8:70:f5:3f:23:8b:50:92:90:94:f7: 57:3c:24:e9:e8:1e:70:ec:46:d5:a0:e3:56:82:95:65:10:7b: fd:7b:5d:a2:8d:e9:ed:88:9c:90:a4:f3:ab:93:a0:d4:75:c4: b3:35:6f:0e:27:27:a5:3d:9d:19:26:40:ce:4b:0e:95:f5:ff: 3f:44:42:fb:3b:6c:b8:8b:d1:b1:bb:51:e2:dc:90:bf:21:f3: 3a:ea:b2:5e:5f:50:47:6a:0d:d1:d2:dd:c1:5a:87:ee:d5:dd: 82:a8:5b:af:cf:22:49:77:bc:5d:87:6f:43:50:6d:00:82:08: 29:78:a2:6d:0a:86:8c:6e:24:ba:20:7f:e5:b8:cf:64:1c:b7: 72:bd:da:50:da:e6:14:a7:28:ab:92:78:8a:60:8a:79:a9:59: 39:cf:be:b0:3b:98:e2:2a:36:8f:da:4d:66:a4:1d:91:2e:36: 6f:02:51:d4:53:aa:34:bf:65:24:9b:9b:45:24:45:f1:85:18: aa:5d:f0:fe -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICbC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRmNS0yNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskdobrlUfsp2B6DqFOgYJPiVroMIBzzVsxVOUE21GiywfuOn7jxzGJw6OFMs cMw2orlgAiWWfqTOhr1rD+8PGTOd6Tbf2FYBA1AA48uMhsT+9t+G8HgCbkI0yA5T nvVj202jA8sYKj70eUh3RP6moXuAvChY67Zx/W39Rc4JZ000VAImOOgYiVflY2TC NfMNiEmQOnBqoqKSKdyszgHr4MAVqKiD8FOHw3Chg+Bo3WT7nM64wmJ8pQtqX7BT dTmZEBOpf+hBjHgp6/oGMxj2MbuC0zmLtLiJI/f12B4L9DeqUL4VInSC1+DXJSrC BrGcymLsjMXArbkbjk3Fwh7PgQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFD54o9Ep 5vVuJx9lgKaG4a98T9/CMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDJFRDlCODJE N0E2MTFFQUEwRkQyQzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnM94DBABnNAADBAJnUpwDBABn4jQwDQQCAAIwBwMFACQE y0AwDQYJKoZIhvcNAQELBQADggEBAKiYKfPM5Gh5k92nY9GgwgK76ZTJWihMLQET XDtTYRP9Q1lsVxFTRdrdHvgCB0nvZPq8BQsWCFJCxkVnUASocPU/I4tQkpCU91c8 JOnoHnDsRtWg41aClWUQe/17XaKN6e2InJCk86uToNR1xLM1bw4nJ6U9nRkmQM5L DpX1/z9EQvs7bLiL0bG7UeLckL8h8zrqsl5fUEdqDdHS3cFah+7V3YKoW6/PIkl3 vF2Hb0NQbQCCCCl4om0KhoxuJLogf+W4z2Qct3K92lDa5hSnKKuSeIpginmpWTnP vrA7mOIqNo/aTWakHZEuNm8CUdRTqjS/ZSSbm0UkRfGFGKpd8P4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org