$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0361EB0EB96811ECB1201B17C4F9AE02.roa File: 0361EB0EB96811ECB1201B17C4F9AE02.roa (raw, json) Hash identifier: JVMogKAhoEvDVPxlLelFRU4bOqwOIjpRNJqJPJmZG2c= Subject key identifier: 91:92:12:01:98:D7:71:C8:4D:31:64:8C:1C:EF:43:BC:E4:7B:63:38 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D97 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0361EB0EB96811ECB1201B17C4F9AE02.roa Signing time: Wed 10 May 2023 16:30:06 +0000 ROA not before: Wed 10 May 2023 16:30:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138731 IP address blocks: 103.139.34.0/24 maxlen: 24 103.139.35.0/24 maxlen: 24 103.185.238.0/24 maxlen: 24 103.185.239.0/24 maxlen: 24 2001:df0:6880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28055 (0x6d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc68e-1db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:ac:67:6b:fd:b0:fc:9e:f6:8a:3d:36:8e: 83:95:09:70:71:3a:71:c1:a9:d9:69:39:3d:2a:6a: da:5a:e8:3c:0e:f7:ea:43:af:32:ad:a1:09:71:85: eb:30:dd:22:87:55:29:98:63:b8:d1:c1:7c:22:1a: 7d:0d:46:15:36:83:19:eb:eb:4b:6b:f9:38:02:2e: 6f:35:6e:f9:d5:f6:c9:f8:24:ae:5b:f9:65:a2:fd: 72:5c:5c:19:ba:c7:fd:19:a8:b8:63:9a:2b:8e:4b: 5e:66:56:49:0d:fc:3c:15:76:44:ec:bc:fa:04:cd: 7c:a6:d1:f0:8c:d8:a4:4c:85:2b:50:79:37:21:8e: 9a:db:f2:5b:d2:42:7c:2d:6b:bd:08:75:b0:d5:02: 07:fa:49:3b:29:a7:1c:d0:e2:ce:38:2b:9d:ea:14: 8d:bf:25:60:fd:ef:5b:26:71:c6:dc:45:8a:e0:e8: 11:a6:ca:73:e8:f0:b1:04:57:fa:1c:bd:1b:bc:06: 7d:30:6b:2d:53:3d:83:c0:e6:7f:c6:b9:e4:5f:51: 93:e3:8b:47:8b:46:7c:3a:58:cf:36:42:56:89:78: 6f:76:5e:f5:e3:1f:18:26:b6:b2:3c:e9:a5:74:a4: 85:e2:54:1a:03:e2:b4:3a:a4:c0:d9:e1:bd:92:9e: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:92:12:01:98:D7:71:C8:4D:31:64:8C:1C:EF:43:BC:E4:7B:63:38 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0361EB0EB96811ECB1201B17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.34.0/23 103.185.238.0/23 IPv6: 2001:df0:6880::/48 Signature Algorithm: sha256WithRSAEncryption 55:72:37:bc:ad:f6:46:e2:6f:1e:a7:29:cd:05:85:0e:34:fe: 27:68:b8:25:81:68:7e:ff:87:19:ff:2b:6f:03:04:04:a1:85: bf:01:48:2e:b6:c0:01:52:c1:c0:4f:d1:91:5e:1e:94:a5:c1: c9:c3:ed:b0:99:e1:b0:24:51:ed:08:2e:11:e2:b1:86:b2:11: d4:b8:7c:07:1d:36:bc:45:cc:37:57:b4:9f:d4:39:e9:ab:08: 30:3c:a6:71:11:95:8d:9f:0f:f6:a2:65:ac:1f:57:86:35:b1: 31:6e:98:22:ed:25:cb:a3:96:e2:d2:5d:82:1c:6e:6a:79:df: 94:3c:72:ab:77:21:2b:7a:6a:95:a3:b4:c8:14:c3:0f:e2:00: dc:93:41:44:38:ec:0b:e1:75:c4:79:17:df:c3:5b:7b:ad:8d: 3b:47:2d:cb:ea:f5:46:66:a7:92:98:85:c0:47:f0:37:76:0b: 43:e9:d3:1d:a9:5e:0c:51:bc:df:3e:4c:17:fc:7e:8d:b8:d2: 99:6d:df:e1:aa:8e:d9:ed:ba:13:c4:e9:79:5f:33:13:f9:38: a8:81:a3:87:cd:3c:da:18:be:25:43:42:01:17:52:9d:d1:a1: 81:b0:0f:8d:9c:a8:4e:c5:24:64:59:26:61:dc:b1:eb:6c:25: 10:39:25:2d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY4ZS0xZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupysZ2v9sPye9oo9No6DlQlwcTpxwanZaTk9KmraWug8DvfqQ68yraEJcYXr MN0ih1UpmGO40cF8Ihp9DUYVNoMZ6+tLa/k4Ai5vNW751fbJ+CSuW/llov1yXFwZ usf9Gai4Y5orjkteZlZJDfw8FXZE7Lz6BM18ptHwjNikTIUrUHk3IY6a2/Jb0kJ8 LWu9CHWw1QIH+kk7Kacc0OLOOCud6hSNvyVg/e9bJnHG3EWK4OgRpspz6PCxBFf6 HL0bvAZ9MGstUz2DwOZ/xrnkX1GT44tHi0Z8OljPNkJWiXhvdl714x8YJrayPOml dKSF4lQaA+K0OqTA2eG9kp6BowIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJGSEgGY 13HITTFkjBzvQ7zke2M4MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDM2MUVCMEVC OTY4MTFFQ0IxMjAxQjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFniyIDBAFnue4wDwQCAAIwCQMHACABDfBogDANBgkqhkiG 9w0BAQsFAAOCAQEAVXI3vK32RuJvHqcpzQWFDjT+J2i4JYFofv+HGf8rbwMEBKGF vwFILrbAAVLBwE/RkV4elKXBycPtsJnhsCRR7QguEeKxhrIR1Lh8Bx02vEXMN1e0 n9Q56asIMDymcRGVjZ8P9qJlrB9XhjWxMW6YIu0ly6OW4tJdghxuannflDxyq3ch K3pqlaO0yBTDD+IA3JNBRDjsC+F1xHkX38Nbe62NO0cty+r1RmankpiFwEfwN3YL Q+nTHaleDFG83z5MF/x+jbjSmW3f4aqO2e26E8TpeV8zE/k4qIGjh8082hi+JUNC ARdSndGhgbAPjZyoTsUkZFkmYdyx62wlEDklLQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org