$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0722621871DA11EB97885D47C4F9AE02.roa File: 0722621871DA11EB97885D47C4F9AE02.roa (raw, json) Hash identifier: r7LviCN0Hkz2niK9ENVFha4LQIe+9tyk8gDnfpMgxIo= Subject key identifier: 99:D9:0E:4C:21:BE:6E:A2:E1:E4:73:47:7F:13:6A:1D:A2:6F:D4:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A02 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0722621871DA11EB97885D47C4F9AE02.roa Signing time: Tue 12 Sep 2023 06:25:44 +0000 ROA not before: Tue 12 Sep 2023 06:25:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135758 IP address blocks: 103.76.188.0/22 maxlen: 24 103.134.180.0/23 maxlen: 24 103.181.32.0/23 maxlen: 24 2407:1bc0::/32 maxlen: 32 2407:1bc0::/36 maxlen: 36 2407:1bc0:1000::/36 maxlen: 36 2407:1bc0:2000::/36 maxlen: 36 2407:1bc0:3000::/36 maxlen: 36 2407:1bc0:4000::/36 maxlen: 36 2407:1bc0:5000::/36 maxlen: 36 2407:1bc0:6000::/36 maxlen: 36 2407:1bc0:7000::/36 maxlen: 36 2407:1bc0:8000::/36 maxlen: 36 2407:1bc0:9000::/36 maxlen: 36 2407:1bc0:a000::/36 maxlen: 36 2407:1bc0:b000::/36 maxlen: 36 2407:1bc0:c000::/36 maxlen: 36 2407:1bc0:d000::/36 maxlen: 36 2407:1bc0:e000::/36 maxlen: 36 2407:1bc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31234 (0x7a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 12 06:25:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65000468-ffd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:11:b6:d1:6e:9d:a8:65:0f:cd:43:32:ae: 64:17:fc:8a:b6:19:06:8a:6f:7a:48:6f:31:df:4e: 38:a4:f7:ce:ac:1b:b3:12:a3:ab:61:6b:57:4b:c6: ec:9e:7d:d2:d9:b7:4a:7c:c0:f6:56:ae:b9:4d:f1: ee:bb:53:48:d8:88:be:2c:e2:94:f3:77:7c:1a:ac: 8f:d7:75:ab:a0:1d:f4:35:c1:69:ae:80:ac:2f:1d: 0b:46:06:da:4c:b2:01:58:1b:27:ab:6e:47:07:63: ff:8c:71:2b:ec:25:16:33:44:ed:82:37:54:5e:29: c4:6e:69:47:52:e8:19:a2:7c:30:e9:7a:e3:18:88: 05:fd:d2:15:2f:46:db:e8:2b:91:ce:23:45:17:c8: cb:f7:76:d9:74:1f:23:79:ea:57:aa:99:66:8c:02: f2:f2:14:8d:58:33:1b:44:a5:88:97:db:c3:9f:b1: 49:2a:11:d5:8c:c8:43:d8:dd:c1:35:a2:87:48:02: 16:62:ea:67:42:13:8d:ef:fd:cb:27:f1:97:3d:4f: 63:bd:cb:57:20:61:71:8a:60:20:92:73:ef:99:6b: 98:50:5f:3f:14:7b:41:bc:12:db:b8:5b:81:3d:5c: 97:f6:f0:90:e7:90:59:36:5d:50:34:58:9c:d4:20: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D9:0E:4C:21:BE:6E:A2:E1:E4:73:47:7F:13:6A:1D:A2:6F:D4:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0722621871DA11EB97885D47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.188.0/22 103.134.180.0/23 103.181.32.0/23 IPv6: 2407:1bc0::/32 Signature Algorithm: sha256WithRSAEncryption 74:89:f7:7f:4e:11:35:84:63:26:04:d4:3d:01:23:29:07:8f: b4:4c:4c:3a:7e:41:3e:47:25:95:23:ac:e0:41:0a:ac:6f:a9: d8:12:3b:62:fc:69:63:a1:e1:ac:c7:64:6a:a4:07:cf:67:9c: 6e:b9:3f:8b:2c:47:53:86:40:0e:c6:e8:93:57:d1:9f:b4:8c: 58:a0:92:a8:c0:ba:0f:d8:94:1d:74:31:da:46:07:88:a1:5e: 2f:c3:96:08:87:48:b6:2f:ad:bf:3d:fd:23:0f:6d:88:b0:95: 7b:37:4c:9c:b9:fb:8f:ac:38:9d:88:ae:b5:51:3c:df:07:63: 1e:ad:d4:f9:28:ec:69:33:68:9a:e8:a5:e5:de:09:b8:88:8e: 5b:74:ed:f4:ad:53:65:d7:2d:2c:f5:ba:a4:67:57:e6:08:2b: 24:4f:c5:66:a3:98:ff:4a:9e:3c:c8:cd:2a:e4:7e:b1:5e:8f: 39:77:64:cd:8a:d4:c3:7d:f1:5d:c6:68:ed:92:ff:61:91:19: df:77:8e:d7:f7:5d:b0:fd:17:96:b8:26:79:ae:ce:6b:c6:7d: 79:3c:28:c4:61:ce:68:d1:eb:27:97:8b:7c:83:1f:02:ad:cf: 24:08:87:b3:c3:41:c9:be:76:70:b3:a5:10:10:1c:b6:b9:f5: 1e:08:a8:6b -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICegIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTEyMDYyNTQ0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwMDQ2OC1mZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuykRttFunahlD81DMq5kF/yKthkGim96SG8x3044pPfOrBuzEqOrYWtXS8bs nn3S2bdKfMD2Vq65TfHuu1NI2Ii+LOKU83d8GqyP13WroB30NcFproCsLx0LRgba TLIBWBsnq25HB2P/jHEr7CUWM0TtgjdUXinEbmlHUugZonww6XrjGIgF/dIVL0bb 6CuRziNFF8jL93bZdB8jeepXqplmjALy8hSNWDMbRKWIl9vDn7FJKhHVjMhD2N3B NaKHSAIWYupnQhON7/3LJ/GXPU9jvctXIGFximAgknPvmWuYUF8/FHtBvBLbuFuB PVyX9vCQ55BZNl1QNFic1CAx2QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJnZDkwh vm6i4eRzR38Tah2ib9RGMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDcyMjYyMTg3 MURBMTFFQjk3ODg1RDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnTLwDBAFnhrQDBAFntSAwDQQCAAIwBwMFACQHG8AwDQYJ KoZIhvcNAQELBQADggEBAHSJ939OETWEYyYE1D0BIykHj7RMTDp+QT5HJZUjrOBB CqxvqdgSO2L8aWOh4azHZGqkB89nnG65P4ssR1OGQA7G6JNX0Z+0jFigkqjAug/Y lB10MdpGB4ihXi/DlgiHSLYvrb89/SMPbYiwlXs3TJy5+4+sOJ2IrrVRPN8HYx6t 1Pko7GkzaJropeXeCbiIjlt07fStU2XXLSz1uqRnV+YIKyRPxWajmP9KnjzIzSrk frFejzl3ZM2K1MN98V3GaO2S/2GRGd93jtf3XbD9F5a4JnmuzmvGfXk8KMRhzmjR 6yeXi3yDHwKtzyQIh7PDQcm+dnCzpRAQHLa59R4IqGs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org