$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa File: 0AB540B2F36C11EB8AC12660C4F9AE02.roa (raw, json) Hash identifier: 9wvoME8yeIQhqBH0XT6d7fi77TSOHswHPSaDMfUUxF0= Subject key identifier: B8:75:7B:6F:59:16:81:8C:FA:90:16:E6:ED:70:9A:3B:34:1D:BF:74 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F5E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:28 +0000 ROA not before: Wed 10 May 2023 16:38:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142471 IP address blocks: 103.170.88.0/24 maxlen: 24 2001:df1:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28510 (0x6f5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc884-468c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:5a:15:f8:f5:6d:42:d3:b2:e6:96:aa:78: 27:5b:77:74:d1:33:62:30:fd:50:df:f5:67:aa:94: d5:14:6e:69:ea:75:35:3c:64:fa:a4:b2:ff:35:87: 89:97:42:b1:0d:2e:55:57:e0:09:f2:91:a6:4c:17: d9:3a:d3:a1:97:83:db:88:db:ba:dd:35:f9:ca:26: 9c:2c:aa:f4:43:37:6a:1a:7e:79:9a:cd:c1:c4:10: 0e:f3:9d:92:f4:39:c4:e3:d9:85:a5:0c:05:dc:bf: 55:24:cd:cc:93:64:d5:40:1b:ea:9b:5c:f3:d5:a6: cd:e4:b6:8f:57:50:c2:de:d5:9c:40:66:7e:1d:80: 8a:3e:87:43:53:b6:48:39:e0:66:19:ae:70:4c:cb: ee:99:c5:8c:a0:2d:ab:2e:a0:37:24:0a:d6:07:b6: 80:ea:56:ca:43:4b:a0:36:d0:20:cf:83:0b:ad:cb: 77:49:21:ff:2c:3b:c6:17:9e:8e:6c:1d:be:9f:10: 05:62:c8:d0:64:5d:fb:0e:36:15:c3:bf:14:ff:46: 09:f6:83:79:9b:22:1b:16:80:46:17:b5:c4:49:28: f7:87:45:2b:47:c3:c3:4d:2c:7a:26:23:c8:d4:4f: 9f:bb:99:99:cb:70:ef:04:19:6e:24:b8:4b:a7:b7: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:7B:6F:59:16:81:8C:FA:90:16:E6:ED:70:9A:3B:34:1D:BF:74 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0AB540B2F36C11EB8AC12660C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.88.0/24 IPv6: 2001:df1:a940::/48 Signature Algorithm: sha256WithRSAEncryption 0e:48:29:92:f0:1c:0a:9e:c9:ac:f1:66:0b:00:e0:c8:5f:7f: ad:3a:d6:fe:cf:fb:75:df:b6:b3:be:df:3d:42:f2:ad:fa:53: bf:39:6d:25:cb:4b:b6:87:a5:1d:cf:aa:e0:7a:fe:be:b2:90: 8f:93:32:70:34:1b:03:b2:8b:ad:00:59:e6:7b:7d:cc:9d:5a: be:72:1b:6d:a6:d2:a0:ea:b7:6b:2f:6c:c7:ce:7c:91:2a:57: f2:97:b1:3b:c8:0e:89:fa:ae:42:e2:f9:9c:be:eb:e2:dc:88: ea:11:75:ee:0e:7a:db:c3:98:21:61:2c:21:39:ab:4e:b6:29: 68:b8:93:7a:76:6e:d3:2d:35:56:a6:d1:39:f1:ed:51:d5:24: 8c:70:02:94:92:8c:2a:96:34:c4:10:2b:19:4d:a2:b3:d3:26: 13:96:06:bb:4c:9a:65:fb:35:39:9f:7f:51:f0:6f:13:08:43: 31:39:c7:8d:a0:d9:5d:d5:8e:de:c5:d2:e8:31:8d:93:30:42: 86:6a:30:e7:77:d3:6f:10:a7:8f:fe:a1:cc:d2:aa:04:91:a7: 69:b5:7e:27:9f:de:58:b3:b2:83:ce:16:60:b8:1a:fe:43:89: 63:ad:a5:95:84:f9:f9:53:78:3d:e3:69:7d:b9:9b:c9:f1:50: c8:85:47:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg4NC00NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1RaFfj1bULTsuaWqngnW3d00TNiMP1Q3/VnqpTVFG5p6nU1PGT6pLL/NYeJ l0KxDS5VV+AJ8pGmTBfZOtOhl4PbiNu63TX5yiacLKr0QzdqGn55ms3BxBAO852S 9DnE49mFpQwF3L9VJM3Mk2TVQBvqm1zz1abN5LaPV1DC3tWcQGZ+HYCKPodDU7ZI OeBmGa5wTMvumcWMoC2rLqA3JArWB7aA6lbKQ0ugNtAgz4MLrct3SSH/LDvGF56O bB2+nxAFYsjQZF37DjYVw78U/0YJ9oN5myIbFoBGF7XESSj3h0UrR8PDTSx6JiPI 1E+fu5mZy3DvBBluJLhLp7cDcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLh1e29Z FoGM+pAW5u1wmjs0Hb90MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEFCNTQwQjJG MzZDMTFFQjhBQzEyNjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnqlgwDwQCAAIwCQMHACABDfGpQDANBgkqhkiG9w0BAQsF AAOCAQEADkgpkvAcCp7JrPFmCwDgyF9/rTrW/s/7dd+2s77fPULyrfpTvzltJctL toelHc+q4Hr+vrKQj5MycDQbA7KLrQBZ5nt9zJ1avnIbbabSoOq3ay9sx858kSpX 8pexO8gOifquQuL5nL7r4tyI6hF17g5628OYIWEsITmrTrYpaLiTenZu0y01VqbR OfHtUdUkjHAClJKMKpY0xBArGU2is9MmE5YGu0yaZfs1OZ9/UfBvEwhDMTnHjaDZ XdWO3sXS6DGNkzBChmow53fTbxCnj/6hzNKqBJGnabV+J5/eWLOyg84WYLga/kOJ Y62llYT5+VN4PeNpfbmbyfFQyIVHyg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org