$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B6B4EA868F811EEB6C0D00EC4F9AE02.roa File: 0B6B4EA868F811EEB6C0D00EC4F9AE02.roa (raw, json) Hash identifier: RFG0VpzLzk4GiTfyClXYnKsEQjUCXK2NQOy9BPfz1ko= Subject key identifier: A4:7F:3A:A8:77:50:C6:E3:F7:87:FE:14:BC:D0:6F:B0:22:7D:3C:17 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7BB8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B6B4EA868F811EEB6C0D00EC4F9AE02.roa Signing time: Thu 12 Oct 2023 12:13:12 +0000 ROA not before: Thu 12 Oct 2023 12:13:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133269 IP address blocks: 36.255.208.0/22 maxlen: 24 103.239.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31672 (0x7bb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 12 12:13:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6527e2d8-29f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:9d:23:cf:05:60:2b:43:e6:a1:a8:43:34: 40:51:88:b5:16:ae:2c:b0:c9:19:b5:b1:2b:7b:68: 89:92:9a:fd:91:86:72:32:c4:5b:99:1e:9d:36:b1: 7f:7d:93:71:eb:52:f5:6a:9f:4e:d2:dd:9f:b0:5c: 97:30:ce:80:35:19:58:ff:b1:fb:99:32:11:5d:b1: e6:39:72:75:81:dc:d3:13:9e:c8:39:9a:1e:b6:52: 20:d9:ad:0c:1e:12:47:6a:e3:67:c4:3e:83:b7:b9: 3a:0c:cc:6f:17:cc:dc:7e:34:f4:fc:3d:7f:67:4f: 7a:dd:e1:73:d6:5b:ce:a6:6f:84:43:3f:16:2b:c9: 1d:6e:0a:f7:76:7d:97:22:81:f0:58:ea:8f:ce:f1: 2a:da:96:43:91:62:9a:e3:80:e2:4d:65:1e:19:d6: 7c:0c:1a:fc:e4:18:0f:64:6a:12:2b:c9:72:60:6b: e5:45:ea:e7:f1:ba:5a:5d:20:3b:63:5e:45:6b:cf: 39:a6:42:f5:86:db:7d:69:20:b2:7b:8b:66:92:26: 5e:f7:e9:44:ab:e4:15:38:e6:af:0a:59:da:5d:fc: a4:ea:2b:2d:f2:51:73:8b:69:cb:19:b3:2e:b8:72: 0d:1c:bb:19:6f:85:b6:f8:94:ef:1d:7e:fd:a6:22: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7F:3A:A8:77:50:C6:E3:F7:87:FE:14:BC:D0:6F:B0:22:7D:3C:17 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B6B4EA868F811EEB6C0D00EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.208.0/22 103.239.144.0/22 Signature Algorithm: sha256WithRSAEncryption 69:e2:69:9f:2c:1c:17:10:8d:c5:fa:d4:d8:a8:71:d8:ac:c8: 81:0a:cf:10:50:2a:f5:fa:d1:49:20:4b:4e:b3:bb:69:ff:a0: 31:19:15:aa:20:65:a8:fd:cd:18:d1:c0:4b:86:e7:5c:c0:43: 99:a9:c2:b3:3b:eb:fc:a1:cd:0e:19:c3:03:4c:ca:d9:9f:e3: 70:c6:ad:2d:97:2a:e6:ad:31:57:be:c3:b8:8d:bd:c7:fc:48: fa:bb:a9:d0:8c:7e:09:c5:60:a7:bb:b0:e5:02:7d:e1:9f:b5: e4:6f:7f:01:89:32:ba:39:32:f8:f8:7f:40:cd:81:22:bd:4b: 53:46:e8:a9:45:b1:55:6f:9e:94:d8:47:19:ed:0d:0a:67:c3: 44:4b:1c:60:95:47:5a:42:2c:bc:9b:4a:da:db:d0:e2:24:00: 5d:29:ff:06:c5:02:a0:e5:5e:82:6b:4f:e9:54:73:87:ba:cb: 80:3b:41:d6:14:7f:1f:81:65:c4:b9:fa:cb:55:67:54:ea:f7: e6:b3:90:0a:68:b7:b2:07:07:81:e6:f6:c4:41:46:22:82:84: c6:c9:bd:0c:26:0b:7e:c0:32:12:2a:e5:9a:5c:e6:91:a5:40: 87:3b:cf:f9:27:c5:a7:c1:b4:a1:aa:2c:c2:65:9e:94:45:21: bf:74:ed:fe -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICe7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDEyMTIxMzEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI3ZTJkOC0yOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoqdI88FYCtD5qGoQzRAUYi1Fq4ssMkZtbEre2iJkpr9kYZyMsRbmR6dNrF/ fZNx61L1ap9O0t2fsFyXMM6ANRlY/7H7mTIRXbHmOXJ1gdzTE57IOZoetlIg2a0M HhJHauNnxD6Dt7k6DMxvF8zcfjT0/D1/Z0963eFz1lvOpm+EQz8WK8kdbgr3dn2X IoHwWOqPzvEq2pZDkWKa44DiTWUeGdZ8DBr85BgPZGoSK8lyYGvlRern8bpaXSA7 Y15Fa885pkL1htt9aSCye4tmkiZe9+lEq+QVOOavClnaXfyk6ist8lFzi2nLGbMu uHINHLsZb4W2+JTvHX79piLbwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKR/Oqh3 UMbj94f+FLzQb7AifTwXMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEI2QjRFQTg2 OEY4MTFFRUI2QzBEMDBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIk/9ADBAJn75AwDQYJKoZIhvcNAQELBQADggEBAGniaZ8s HBcQjcX61NiocdisyIEKzxBQKvX60UkgS06zu2n/oDEZFaogZaj9zRjRwEuG51zA Q5mpwrM76/yhzQ4ZwwNMytmf43DGrS2XKuatMVe+w7iNvcf8SPq7qdCMfgnFYKe7 sOUCfeGfteRvfwGJMro5Mvj4f0DNgSK9S1NG6KlFsVVvnpTYRxntDQpnw0RLHGCV R1pCLLybStrb0OIkAF0p/wbFAqDlXoJrT+lUc4e6y4A7QdYUfx+BZcS5+stVZ1Tq 9+azkApot7IHB4Hm9sRBRiKChMbJvQwmC37AMhIq5Zpc5pGlQIc7z/knxafBtKGq LMJlnpRFIb907f4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org