$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04F5A67C902B11EEB9A0D96FC4F9AE02.roa File: 04F5A67C902B11EEB9A0D96FC4F9AE02.roa (raw, json) Hash identifier: +QMTgF6FLMwjjI2a7tF8jSHiHngk1YNJMRCSVJ3kqiU= Subject key identifier: F3:7A:E6:4A:11:AE:8F:20:B3:78:B3:CB:4A:9D:B2:68:FF:32:49:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F35 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04F5A67C902B11EEB9A0D96FC4F9AE02.roa Signing time: Fri 01 Dec 2023 09:21:34 +0000 ROA not before: Fri 01 Dec 2023 09:21:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151698 IP address blocks: 210.79.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32565 (0x7f35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 1 09:21:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6569a59d-88a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c6:7a:be:cd:3d:cc:87:21:5e:7a:55:c8:6d: 27:79:37:6d:37:43:a9:fd:80:ec:ce:9c:59:5e:89: 79:6f:a7:f3:48:f9:d3:6e:96:03:d2:5d:f4:50:e3: 8f:f4:c9:40:a3:de:02:c3:59:59:9c:00:99:ac:4a: 40:48:6b:5d:37:3d:3c:ad:5c:a1:c6:4c:aa:d9:49: a3:67:7c:51:b6:08:fd:6c:5e:2a:64:0f:64:da:90: 8b:e8:86:68:75:c7:9c:cd:54:c9:8d:74:56:7e:d0: 97:0e:1b:20:8e:e1:4c:93:b5:a6:88:5a:f5:07:02: 64:ca:1b:5b:e5:36:47:2b:60:c6:1e:28:4f:45:3f: dc:3e:c8:71:c9:d1:85:3c:b9:af:ca:bb:11:e9:4b: c1:a0:bf:f5:b1:9c:22:c3:4e:5e:29:8e:cf:b9:ac: 71:12:60:20:ea:d0:26:e8:69:32:63:32:5f:b8:1b: 96:67:91:f4:82:12:44:a2:82:4b:5c:e8:c0:73:31: 26:fd:ba:60:a4:09:c1:dc:22:ae:b0:6a:4a:a9:73: f0:bf:85:c3:f4:c1:2c:15:5d:a4:97:87:d1:97:d9: 1a:56:b5:cb:72:f4:d2:7d:b0:e7:76:fe:55:05:eb: df:1f:e7:43:44:b1:a8:ad:68:d6:34:c1:41:bc:f0: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7A:E6:4A:11:AE:8F:20:B3:78:B3:CB:4A:9D:B2:68:FF:32:49:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04F5A67C902B11EEB9A0D96FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.148.0/23 Signature Algorithm: sha256WithRSAEncryption 83:73:61:9e:38:46:5d:c2:a0:7b:d3:dd:da:a1:44:1d:d4:49: e3:60:bc:83:9d:8b:3f:cc:b6:a6:f8:71:9d:f5:5f:fe:45:1a: 30:3f:c3:31:2e:a0:d8:e0:5d:62:b0:d1:9a:81:8d:24:d4:8f: 13:16:d3:8b:7e:25:47:65:38:41:36:45:1d:de:c0:82:be:17: ba:a1:7e:36:cc:64:e5:58:34:b5:aa:c1:d2:12:f7:cb:a8:bb: c0:ac:a1:b0:99:6d:b4:3f:cc:ec:bc:e4:cc:c9:97:03:3c:e3: fa:d2:95:52:6f:37:f8:52:c3:f9:71:6a:f3:73:28:cd:b5:ff: a5:f6:26:cf:7f:77:15:b7:46:be:9f:54:42:6a:c0:fa:e7:c6: 7f:7d:d0:e4:34:36:b7:88:27:3e:83:ea:01:7d:a7:79:4b:52: 37:31:91:67:7f:d7:80:e5:58:cd:e4:ea:a1:ab:5d:1f:9c:15: c2:a7:32:fd:a5:b8:43:b8:a6:06:e8:39:77:d0:44:41:f0:9f: 6c:db:50:fa:09:42:10:62:09:86:fe:69:d5:f4:06:78:d3:d1: 9d:80:70:25:12:52:ff:fc:89:fc:fc:04:4e:d5:20:bf:e8:93: 88:e5:39:e4:e3:ec:fd:a3:a3:4c:5b:d2:5e:da:db:b0:b0:0d: be:7a:6f:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICfzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMjAxMDkyMTM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5YTU5ZC04OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cZ6vs09zIchXnpVyG0neTdtN0Op/YDszpxZXol5b6fzSPnTbpYD0l30UOOP 9MlAo94Cw1lZnACZrEpASGtdNz08rVyhxkyq2UmjZ3xRtgj9bF4qZA9k2pCL6IZo dceczVTJjXRWftCXDhsgjuFMk7WmiFr1BwJkyhtb5TZHK2DGHihPRT/cPshxydGF PLmvyrsR6UvBoL/1sZwiw05eKY7PuaxxEmAg6tAm6GkyYzJfuBuWZ5H0ghJEooJL XOjAczEm/bpgpAnB3CKusGpKqXPwv4XD9MEsFV2kl4fRl9kaVrXLcvTSfbDndv5V BevfH+dDRLGorWjWNMFBvPBPhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPN65koR ro8gs3izy0qdsmj/MkmAMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDRGNUE2N0M5 MDJCMTFFRUI5QTBEOTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHST5QwDQYJKoZIhvcNAQELBQADggEBAINzYZ44Rl3CoHvT 3dqhRB3USeNgvIOdiz/Mtqb4cZ31X/5FGjA/wzEuoNjgXWKw0ZqBjSTUjxMW04t+ JUdlOEE2RR3ewIK+F7qhfjbMZOVYNLWqwdIS98uou8CsobCZbbQ/zOy85MzJlwM8 4/rSlVJvN/hSw/lxavNzKM21/6X2Js9/dxW3Rr6fVEJqwPrnxn990OQ0NreIJz6D 6gF9p3lLUjcxkWd/14DlWM3k6qGrXR+cFcKnMv2luEO4pgboOXfQREHwn2zbUPoJ QhBiCYb+adX0BnjT0Z2AcCUSUv/8ifz8BE7VIL/ok4jlOeTj7P2jo0xb0l7a27Cw Db56b20= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org