$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04B2B33ADD6311EB9A873075C4F9AE02.roa File: 04B2B33ADD6311EB9A873075C4F9AE02.roa (raw, json) Hash identifier: usnWnfvL0QnXzfxonGFZpAz4kKAyasW7YCVd6ATvUuw= Subject key identifier: AA:12:D5:FE:8E:AA:49:AA:B4:AB:3A:97:24:90:71:D4:25:C3:33:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D91 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04B2B33ADD6311EB9A873075C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:59 +0000 ROA not before: Wed 10 May 2023 16:29:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138719 IP address blocks: 103.137.219.0/24 maxlen: 24 2001:df6:7980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28049 (0x6d91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc687-2b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:d9:be:b6:0a:09:4a:f5:75:3a:b5:87:95: cf:a0:47:3b:5f:78:3d:ed:46:ea:35:24:55:c2:f2: ea:df:82:7d:b0:04:49:bc:7d:54:f5:1c:cf:73:50: eb:d2:9e:e9:a9:8e:50:e6:94:bb:37:fa:ff:48:ee: c4:87:3d:20:0c:a5:d3:13:fb:aa:18:db:a1:f8:ef: e8:93:cf:81:ac:a3:df:4b:19:6c:a7:99:bf:d1:b1: 8a:1f:36:5a:43:88:ca:50:a3:fd:66:9f:1e:20:6a: f0:86:12:d4:b2:50:f4:09:dd:99:91:10:7f:29:5c: f4:33:80:71:28:0f:51:7f:f2:b0:ad:e7:c8:b8:c8: da:09:24:58:96:8b:a9:22:55:fc:1a:a9:fb:8a:7c: 63:73:01:0c:0c:42:b5:97:13:f7:fe:7d:3e:89:f5: 9c:17:2f:db:c2:6b:b7:b3:5e:4c:bf:fc:8d:e7:58: 3e:7f:de:3a:4f:ea:97:f5:4b:c2:08:4a:d2:28:18: d6:56:0a:11:7c:43:25:9f:58:93:24:9b:9c:fd:ae: 5d:41:b3:a5:c6:e9:03:c5:1c:d3:0f:21:c2:bb:ee: 06:40:cb:13:36:15:1d:60:e9:70:c0:61:22:0a:38: 7e:51:b6:22:f4:06:9c:8c:fd:55:fe:39:f5:ca:70: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:D5:FE:8E:AA:49:AA:B4:AB:3A:97:24:90:71:D4:25:C3:33:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04B2B33ADD6311EB9A873075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.219.0/24 IPv6: 2001:df6:7980::/48 Signature Algorithm: sha256WithRSAEncryption 06:fc:1a:84:5d:90:17:f6:4c:36:51:8d:e6:7a:6b:f2:b2:5b: 44:51:ce:75:de:af:d5:5a:61:c9:da:69:0d:f7:ca:e6:84:69: c4:28:80:f9:9d:b9:31:ad:63:eb:de:ec:96:2b:39:fe:19:73: 45:77:65:70:10:38:a6:7f:1c:61:5f:22:d1:ee:a6:01:68:44: 8f:6e:24:56:f9:a1:f9:5d:66:a4:d9:12:71:8f:c5:e0:60:96: a3:6c:f9:48:54:5d:2c:e7:05:3a:d6:3d:f8:8c:ac:2c:e9:10: aa:48:ba:fd:fa:6a:7a:49:a7:bd:4a:69:e1:8d:3b:cd:d8:02: 84:4e:66:1e:ef:e0:df:57:08:52:52:4b:c0:77:31:75:48:6b: b5:d8:66:e8:14:5e:3e:9f:25:6e:25:18:a7:45:7d:c1:75:7d: 7f:e9:89:c7:be:10:5c:69:4b:6d:7d:ba:d8:3d:9e:bd:ae:10: 11:b1:f4:39:95:01:77:81:92:b3:79:b6:c2:35:ab:60:0b:c9: c7:e5:b6:ea:65:13:10:76:30:b3:cf:4c:61:11:4f:5c:44:4a: c9:6a:d2:76:0c:5f:e4:09:f6:5d:37:5a:20:7e:7c:89:84:21: d7:31:73:0c:cd:af:24:fb:23:a5:49:6e:9e:65:f8:51:5c:23: eb:b4:01:eb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY4Ny0yYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubnZvrYKCUr1dTq1h5XPoEc7X3g97UbqNSRVwvLq34J9sARJvH1U9RzPc1Dr 0p7pqY5Q5pS7N/r/SO7Ehz0gDKXTE/uqGNuh+O/ok8+BrKPfSxlsp5m/0bGKHzZa Q4jKUKP9Zp8eIGrwhhLUslD0Cd2ZkRB/KVz0M4BxKA9Rf/KwrefIuMjaCSRYloup IlX8Gqn7inxjcwEMDEK1lxP3/n0+ifWcFy/bwmu3s15Mv/yN51g+f946T+qX9UvC CErSKBjWVgoRfEMln1iTJJuc/a5dQbOlxukDxRzTDyHCu+4GQMsTNhUdYOlwwGEi Cjh+UbYi9AacjP1V/jn1ynBx7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKoS1f6O qkmqtKs6lySQcdQlwzNEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDRCMkIzM0FE RDYzMTFFQjlBODczMDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnidswDwQCAAIwCQMHACABDfZ5gDANBgkqhkiG9w0BAQsF AAOCAQEABvwahF2QF/ZMNlGN5npr8rJbRFHOdd6v1VphydppDffK5oRpxCiA+Z25 Ma1j697slis5/hlzRXdlcBA4pn8cYV8i0e6mAWhEj24kVvmh+V1mpNkScY/F4GCW o2z5SFRdLOcFOtY9+IysLOkQqki6/fpqekmnvUpp4Y07zdgChE5mHu/g31cIUlJL wHcxdUhrtdhm6BRePp8lbiUYp0V9wXV9f+mJx74QXGlLbX262D2eva4QEbH0OZUB d4GSs3m2wjWrYAvJx+W26mUTEHYws89MYRFPXERKyWrSdgxf5An2XTdaIH58iYQh 1zFzDM2vJPsjpUlunmX4UVwj67QB6w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org