$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CEE885454D211EBB120B85EC4F9AE02.roa File: 0CEE885454D211EBB120B85EC4F9AE02.roa (raw, json) Hash identifier: M8Q4FGj7Rrqz58+aYbHAHNukz0vhPeq++Jha71UPUOc= Subject key identifier: B7:28:36:14:38:D2:1B:F0:0B:49:99:2C:6D:EA:7D:C4:CC:DF:A8:5C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6ECD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CEE885454D211EBB120B85EC4F9AE02.roa Signing time: Wed 10 May 2023 16:35:46 +0000 ROA not before: Wed 10 May 2023 16:35:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141528 IP address blocks: 103.159.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28365 (0x6ecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7e1-6f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:d2:93:06:5c:54:04:02:dd:79:37:2a:2e: 80:7a:03:ce:2f:74:7e:5e:c1:5c:16:02:e2:d1:dd: 1d:3a:26:91:61:99:38:82:7e:2b:d5:fa:9e:43:69: 06:c5:b8:2b:dd:55:b4:da:54:a4:5a:71:1c:bd:d5: 38:13:b8:5b:d9:e3:c8:67:96:bf:97:1f:95:8f:2a: b7:c8:8c:92:dc:59:99:8a:b6:7b:e0:88:79:f5:32: b1:88:c8:ed:ec:0e:45:e1:bd:73:16:e4:73:6f:df: 2d:e1:1e:d1:0f:94:f2:ac:0f:54:9f:ca:c2:02:2b: 07:a9:a2:e9:2e:a0:ab:99:ca:74:7f:70:f8:ae:2f: 9d:b7:24:45:cf:a7:29:64:d4:b5:61:a6:e8:3f:13: dc:51:a7:3b:ef:f0:02:be:4a:19:4b:64:41:3f:e4: ce:0e:cc:54:07:f9:d1:e0:75:ca:93:d7:d8:58:4b: 5c:70:c1:7d:07:01:00:18:44:bf:d7:05:53:e1:47: 44:e1:31:ea:1a:e6:28:ec:ae:48:1b:65:ed:10:c5: 9c:aa:31:1a:6f:8c:a5:87:61:46:68:4b:69:4f:9d: 45:ad:39:38:f2:2f:5f:f3:88:b3:7d:64:4c:04:e7: 53:e3:01:9b:70:6e:fb:10:54:70:b4:d6:9d:56:ce: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:28:36:14:38:D2:1B:F0:0B:49:99:2C:6D:EA:7D:C4:CC:DF:A8:5C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CEE885454D211EBB120B85EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:91:19:cb:6b:d7:48:ac:d2:f0:2b:f7:c6:b2:e5:5f:23:27: 05:c8:21:33:a9:23:0f:3d:ce:9b:ff:ec:fd:07:e0:44:30:60: 36:a8:43:f6:5c:8a:63:59:7e:26:a4:65:7b:e6:2e:e6:05:6d: 25:05:d9:4e:0d:4e:50:37:65:d5:95:54:07:d5:cd:c1:a9:f9: f6:4f:e7:2f:d7:40:bc:e4:67:2d:ad:5d:da:91:50:07:48:06: 65:fe:93:a8:1a:df:a9:9b:19:93:68:87:a0:9f:89:cc:4d:b6: 19:e6:7a:0e:15:07:36:99:f6:6e:7c:4e:92:92:cc:f4:6a:c5: 51:ae:45:90:fd:f6:52:7f:7d:2c:c4:23:93:a6:fe:41:10:8f: cd:28:a4:b6:17:6f:e8:c6:54:9d:c3:8e:95:4d:19:ae:e5:c5: 8c:fd:eb:6d:cd:be:25:17:16:28:df:2a:65:63:75:e0:b6:56: f1:85:58:00:05:2b:74:84:98:24:a8:54:2c:14:87:4b:76:79: 2f:a0:9b:02:fc:d9:bd:48:c3:4b:03:84:02:9f:91:38:61:87: ba:0a:02:d0:d8:36:f9:02:d4:79:e7:f3:6d:93:d3:84:fd:7d: 8a:90:3f:6e:18:35:12:bb:32:89:85:2d:2f:2b:7c:02:2b:ba: a0:95:b9:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdlMS02ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaTSkwZcVAQC3Xk3Ki6AegPOL3R+XsFcFgLi0d0dOiaRYZk4gn4r1fqeQ2kG xbgr3VW02lSkWnEcvdU4E7hb2ePIZ5a/lx+Vjyq3yIyS3FmZirZ74Ih59TKxiMjt 7A5F4b1zFuRzb98t4R7RD5TyrA9Un8rCAisHqaLpLqCrmcp0f3D4ri+dtyRFz6cp ZNS1YaboPxPcUac77/ACvkoZS2RBP+TODsxUB/nR4HXKk9fYWEtccMF9BwEAGES/ 1wVT4UdE4THqGuYo7K5IG2XtEMWcqjEab4ylh2FGaEtpT51FrTk48i9f84izfWRM BOdT4wGbcG77EFRwtNadVs6flQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLcoNhQ4 0hvwC0mZLG3qfcTM36hcMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMENFRTg4NTQ1 NEQyMTFFQkIxMjBCODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnn/wwDQYJKoZIhvcNAQELBQADggEBAD+RGctr10is0vAr 98ay5V8jJwXIITOpIw89zpv/7P0H4EQwYDaoQ/ZcimNZfiakZXvmLuYFbSUF2U4N TlA3ZdWVVAfVzcGp+fZP5y/XQLzkZy2tXdqRUAdIBmX+k6ga36mbGZNoh6CficxN thnmeg4VBzaZ9m58TpKSzPRqxVGuRZD99lJ/fSzEI5Om/kEQj80opLYXb+jGVJ3D jpVNGa7lxYz9623NviUXFijfKmVjdeC2VvGFWAAFK3SEmCSoVCwUh0t2eS+gmwL8 2b1Iw0sDhAKfkThhh7oKAtDYNvkC1Hnn822T04T9fYqQP24YNRK7MomFLS8rfAIr uqCVuaQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org