$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa File: 07F0A538FB8F11EDA5230D60C4F9AE02.roa (raw, json) Hash identifier: sEaGMJYirhFhJ13u0kzyaSfsYvm3sTATLkGMBVmMCIA= Subject key identifier: 93:1D:B4:A7:F1:0E:0D:3E:31:43:1D:02:B2:B1:4C:08:34:08:42:D3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 72C3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa Signing time: Fri 26 May 2023 06:32:05 +0000 ROA not before: Fri 26 May 2023 06:32:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149271 IP address blocks: 103.123.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29379 (0x72c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 26 06:32:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64705265-aff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:38:57:a1:3d:c1:00:f7:d0:af:0c:08:3e: 94:b8:af:9b:27:b5:93:22:43:67:df:27:bf:7b:91: df:56:fb:45:eb:3e:5c:d8:38:a9:a7:38:4c:31:a8: 42:31:f9:e7:5d:59:91:13:d5:5d:2b:7d:48:5b:20: 3b:0d:e0:4e:ab:a1:b1:b8:62:e9:cd:79:8b:63:14: 38:3e:0b:cf:54:73:62:bd:31:49:ac:06:63:e0:7c: eb:46:9d:40:c1:f1:c9:0e:ad:e7:5a:97:32:5c:8f: dc:93:61:28:b4:57:49:2f:42:6f:fe:b0:55:e1:1d: d6:2a:94:69:ac:16:e2:4f:f3:00:7b:5c:09:95:b5: be:6c:8c:df:ab:c1:b8:ba:46:17:91:94:24:f3:11: c8:71:ab:2a:65:13:32:30:79:68:f9:ee:ac:61:e2: 86:a0:ba:38:a4:77:74:fa:6e:05:09:a3:87:d7:3e: b2:c1:33:90:b3:2d:31:a1:b1:87:29:04:ec:4f:3c: a0:66:dd:3d:8e:e2:db:c4:00:0a:f1:b0:db:34:48: 4b:1d:21:ea:e2:95:bd:cc:f2:55:6e:c7:cb:d7:a7: bc:3a:ba:44:47:ca:bc:bc:29:22:6c:7a:c0:95:54: 8f:5e:d7:8d:e9:f7:b7:73:5b:55:ae:53:92:50:58: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1D:B4:A7:F1:0E:0D:3E:31:43:1D:02:B2:B1:4C:08:34:08:42:D3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07F0A538FB8F11EDA5230D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.152.0/23 Signature Algorithm: sha256WithRSAEncryption 73:c6:c2:07:2f:f8:60:32:e3:70:0b:01:46:33:6f:9b:bb:66: 34:9a:65:20:a9:0e:e1:6f:df:b2:58:09:f2:21:06:c0:03:94: 84:ae:cb:d7:be:bc:9e:4a:79:b0:d2:27:e6:76:52:a8:1e:84: 13:9c:88:3f:34:dd:9e:f3:56:59:bf:0c:76:9a:71:67:20:0f: 12:1f:e0:ce:19:2d:3f:0b:24:be:f7:9f:7d:96:f4:8c:ba:f7: b0:37:da:e7:4b:58:32:e7:03:0b:91:50:b1:4d:9e:fb:f9:88: c0:4b:86:20:53:a9:97:79:b9:06:ff:02:f6:51:9e:7f:23:71: 57:29:8d:b7:aa:8f:37:b1:b0:6c:7b:e6:b9:74:e3:63:55:c2: 1d:56:12:54:61:b9:29:84:70:66:aa:16:5e:a4:63:76:9f:79: e9:86:19:f9:2e:a8:c0:da:e6:fe:c9:28:76:f2:2f:10:b2:f1: 9d:74:61:50:21:6b:56:db:fa:1e:14:c5:d6:c6:80:a9:2b:87: f1:ea:21:98:d6:75:96:d3:94:06:89:f1:8e:c2:fc:a4:9c:c1: 14:93:3e:dc:80:a8:31:e1:17:1a:91:03:7b:47:d5:65:b5:8b: 5b:95:ce:2c:18:8f:cd:9d:d5:3f:fc:32:a3:01:78:37:57:ab: 9a:51:60:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTI2MDYzMjA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcwNTI2NS1hZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Cg4V6E9wQD30K8MCD6UuK+bJ7WTIkNn3ye/e5HfVvtF6z5c2DippzhMMahC MfnnXVmRE9VdK31IWyA7DeBOq6GxuGLpzXmLYxQ4PgvPVHNivTFJrAZj4HzrRp1A wfHJDq3nWpcyXI/ck2EotFdJL0Jv/rBV4R3WKpRprBbiT/MAe1wJlbW+bIzfq8G4 ukYXkZQk8xHIcasqZRMyMHlo+e6sYeKGoLo4pHd0+m4FCaOH1z6ywTOQsy0xobGH KQTsTzygZt09juLbxAAK8bDbNEhLHSHq4pW9zPJVbsfL16e8OrpER8q8vCkibHrA lVSPXteN6fe3c1tVrlOSUFitswIDAQABo4IClTCCApEwHQYDVR0OBBYEFJMdtKfx Dg0+MUMdArKxTAg0CELTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDdGMEE1MzhG QjhGMTFFREE1MjMwRDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFne5gwDQYJKoZIhvcNAQELBQADggEBAHPGwgcv+GAy43AL AUYzb5u7ZjSaZSCpDuFv37JYCfIhBsADlISuy9e+vJ5KebDSJ+Z2UqgehBOciD80 3Z7zVlm/DHaacWcgDxIf4M4ZLT8LJL73n32W9Iy697A32udLWDLnAwuRULFNnvv5 iMBLhiBTqZd5uQb/AvZRnn8jcVcpjbeqjzexsGx75rl042NVwh1WElRhuSmEcGaq Fl6kY3afeemGGfkuqMDa5v7JKHbyLxCy8Z10YVAha1bb+h4UxdbGgKkrh/HqIZjW dZbTlAaJ8Y7C/KScwRSTPtyAqDHhFxqRA3tH1WW1i1uVziwYj82d1T/8MqMBeDdX q5pRYAY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org