$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A5383E037C811ECA0FDC123C4F9AE02.roa File: 0A5383E037C811ECA0FDC123C4F9AE02.roa (raw, json) Hash identifier: pmOemyMgjC8xHjYfZ0KJC0QNEvOME1fqaX47E1I6rjg= Subject key identifier: 3B:ED:42:FF:67:8C:D6:E0:90:BB:DC:14:F6:40:3E:66:DC:3F:7E:C0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FEB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A5383E037C811ECA0FDC123C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:06 +0000 ROA not before: Wed 10 May 2023 16:41:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147225 IP address blocks: 103.175.52.0/23 maxlen: 24 2001:df7:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28651 (0x6feb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc921-fa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:c5:de:73:90:ea:cf:b0:d4:0f:4b:b7:35: df:1a:46:ff:ff:3f:13:a3:ef:0d:3d:b9:f4:dc:93: 33:f9:23:5a:e5:13:ab:69:02:a3:da:ee:4f:f0:1b: 18:fc:62:e6:31:2f:d5:cc:0a:5f:42:a5:f2:2c:a0: 3e:3d:a3:f3:ed:5f:2e:80:fc:3e:f6:8e:1d:b9:c2: f4:ca:cf:27:32:87:dd:c0:be:39:9a:ec:2a:dd:0f: 37:62:ba:43:19:84:68:50:53:91:6e:93:65:ad:c6: bc:3a:e2:ee:c9:cf:a0:8d:e3:fb:f1:35:4a:8e:2a: 10:a8:be:a9:9f:1a:81:d9:5c:b3:14:c3:cf:db:22: 0a:47:5f:e8:5c:35:ea:40:cb:b2:04:81:1d:07:09: b3:cb:36:c6:22:a0:dc:4b:26:e4:24:ac:dd:42:1e: a1:27:8a:a2:e5:f2:ef:32:1e:a8:3e:3d:43:25:a2: f0:20:43:eb:8b:e6:8a:17:59:ac:86:46:23:f4:88: 43:bb:b0:17:7b:13:29:b1:66:73:04:05:b2:0f:c6: 63:ce:e2:1d:3c:f6:65:01:a5:c1:85:96:bf:5e:b2: 6b:b6:e1:5d:b8:f7:e9:4b:7f:f2:e5:1b:8c:86:fd: 37:1c:de:e2:6c:be:f2:d7:a2:38:c6:f8:bd:51:09: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:ED:42:FF:67:8C:D6:E0:90:BB:DC:14:F6:40:3E:66:DC:3F:7E:C0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A5383E037C811ECA0FDC123C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.52.0/23 IPv6: 2001:df7:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 81:8e:6c:90:4a:52:5e:9d:92:56:19:6e:91:f5:fe:ec:2a:ab: 65:b2:6b:71:10:76:7a:08:89:11:38:ca:eb:00:a4:09:af:4d: e7:a2:38:d9:d1:d7:57:22:bb:a1:51:c6:a0:63:e3:8f:3a:0c: da:5c:01:fd:09:be:84:fc:28:f7:0a:7c:66:b8:e0:07:55:bd: ff:19:b9:4d:d0:06:86:50:bf:f6:c5:f7:9f:16:40:4a:ff:5a: 28:b6:43:1c:bf:04:0d:02:d5:1c:4f:3e:93:ef:ba:f5:e3:84: 7b:87:0b:be:f6:e0:90:39:18:fb:27:2a:20:be:31:2b:1f:52: 94:ba:c7:d1:2e:09:d1:3a:75:19:54:37:a5:47:ea:84:9a:b2: fe:cb:1d:1a:f0:ac:a5:1b:88:a3:b2:40:9b:6a:bb:41:9e:e0: 17:02:c5:d7:d9:87:58:77:ea:0b:42:44:9e:47:a5:10:6a:0c: a4:39:fb:48:57:c7:ce:98:e6:80:e0:c8:91:87:ad:3d:ca:62: a4:d5:6f:0e:90:a3:e6:7d:a9:f5:97:3a:9b:c7:56:10:07:1c: ab:14:7e:ff:4c:41:6c:1b:97:32:23:ad:4a:75:8f:90:0d:fe: ad:96:f0:e5:4b:b1:a0:40:3d:1a:d6:c9:bd:c9:88:98:cb:b5: 8f:e2:f3:ce -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzkyMS1mYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc3F3nOQ6s+w1A9LtzXfGkb//z8To+8NPbn03JMz+SNa5ROraQKj2u5P8BsY /GLmMS/VzApfQqXyLKA+PaPz7V8ugPw+9o4ducL0ys8nMofdwL45muwq3Q83YrpD GYRoUFORbpNlrca8OuLuyc+gjeP78TVKjioQqL6pnxqB2VyzFMPP2yIKR1/oXDXq QMuyBIEdBwmzyzbGIqDcSybkJKzdQh6hJ4qi5fLvMh6oPj1DJaLwIEPri+aKF1ms hkYj9IhDu7AXexMpsWZzBAWyD8ZjzuIdPPZlAaXBhZa/XrJrtuFduPfpS3/y5RuM hv03HN7ibL7y16I4xvi9UQn/HwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDvtQv9n jNbgkLvcFPZAPmbcP37AMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEE1MzgzRTAz N0M4MTFFQ0EwRkRDMTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrzQwDwQCAAIwCQMHACABDffsgDANBgkqhkiG9w0BAQsF AAOCAQEAgY5skEpSXp2SVhlukfX+7CqrZbJrcRB2egiJETjK6wCkCa9N56I42dHX VyK7oVHGoGPjjzoM2lwB/Qm+hPwo9wp8ZrjgB1W9/xm5TdAGhlC/9sX3nxZASv9a KLZDHL8EDQLVHE8+k++69eOEe4cLvvbgkDkY+ycqIL4xKx9SlLrH0S4J0Tp1GVQ3 pUfqhJqy/ssdGvCspRuIo7JAm2q7QZ7gFwLF19mHWHfqC0JEnkelEGoMpDn7SFfH zpjmgODIkYetPcpipNVvDpCj5n2p9Zc6m8dWEAccqxR+/0xBbBuXMiOtSnWPkA3+ rZbw5UuxoEA9GtbJvcmImMu1j+Lzzg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org