$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa File: 0D60654AD0BC11EA950DF04CC4F9AE02.roa (raw, json) Hash identifier: sUv7912pFF6anTjO6T1+1G/ADeXhlZlxKKVNmQ5jY6o= Subject key identifier: 8B:7B:DB:9B:D9:7A:34:EE:87:7F:8F:36:64:DF:C2:CA:7B:6B:FD:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F69 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa Signing time: Mon 04 Dec 2023 09:48:36 +0000 ROA not before: Mon 04 Dec 2023 09:48:36 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139527 IP address blocks: 103.146.4.0/24 maxlen: 24 103.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32617 (0x7f69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 4 09:48:36 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=656da074-8eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4e:2e:0f:e9:08:00:e4:cf:99:7f:98:47:73: 91:d9:86:ca:50:98:98:4f:23:09:34:ec:5e:41:02: db:05:dd:3d:85:8f:c0:f8:dd:f5:6e:db:89:3d:de: fe:a9:3e:7b:1c:68:e7:d1:81:af:6a:c3:38:4b:46: 9a:87:9a:f7:a1:9f:e4:9c:19:fe:07:7e:9f:b7:1a: 89:38:bf:db:87:f3:85:a8:ac:7b:d1:18:8a:3c:9e: 88:4e:71:40:89:74:72:ca:f6:96:c5:99:fb:9f:d6: 7f:ca:6f:a5:b6:c0:d4:b2:e8:b7:7a:86:65:d7:54: 8b:91:f2:b1:0a:c0:84:7c:86:1c:f3:5a:5a:30:0a: e5:43:6f:3d:a1:8d:ca:27:a6:05:a0:df:96:ed:d5: 87:a4:ed:fd:c7:e9:82:6f:16:e9:68:ff:06:16:5c: 74:8a:9e:76:65:0a:2c:a6:a1:6b:6f:27:0b:72:12: 25:00:df:48:07:39:3b:3f:a9:d6:e3:1f:5b:86:f1: a4:fb:c5:9e:cc:01:99:7d:4e:a6:1b:d9:7b:24:59: f3:bc:83:9c:66:8d:76:36:6e:f6:be:af:65:0d:64: a6:c9:09:d8:44:61:04:c2:dd:45:ba:00:b1:21:c6: c8:e8:ca:3a:90:8c:df:a6:39:8f:de:8f:16:4e:fc: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7B:DB:9B:D9:7A:34:EE:87:7F:8F:36:64:DF:C2:CA:7B:6B:FD:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.4.0/24 103.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption af:1b:15:cb:93:ab:10:b3:18:63:74:a5:f5:0d:f4:e0:98:7f: a2:a7:1a:82:ef:b9:03:f1:76:87:c6:5e:87:90:10:14:23:bf: 03:e3:f6:bc:93:31:d4:48:3a:75:6e:03:7c:ef:01:85:03:a4: 8c:9e:5c:7c:e9:bc:f3:fc:19:82:41:7b:51:a0:d6:c8:42:c5: 3c:ec:3c:2a:1c:1d:b1:00:0e:2a:af:83:9a:cc:4c:19:4b:8e: 9c:28:45:6e:e4:d5:7a:43:20:08:f7:e9:0c:dc:55:69:06:9c: 86:ed:89:86:4a:56:bb:58:70:f3:a1:2d:12:f1:b6:93:75:dd: 49:29:55:76:70:2f:c3:2c:3b:ab:f9:f5:e3:63:53:02:3b:8a: c0:ab:bb:02:c7:ab:94:30:af:2a:20:ea:a0:1e:0c:9b:60:c9: 8a:17:43:c9:f2:ae:34:cd:63:c7:5d:17:73:5a:33:41:4e:47: 5f:19:aa:d6:59:8c:3c:9a:63:be:5a:c5:8e:7c:d3:97:d8:1b: 4e:55:ef:d3:e1:07:eb:9c:aa:66:48:c4:12:e1:8d:3e:35:b1: 3b:70:69:5f:07:9b:36:3d:7e:80:64:36:69:b9:10:2d:aa:23: ba:08:bd:f5:36:80:06:fd:93:c0:e1:9e:96:6b:a7:db:c3:c6: 87:bf:bc:89 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICf2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMjA0MDk0ODM2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZkYTA3NC04ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8U4uD+kIAOTPmX+YR3OR2YbKUJiYTyMJNOxeQQLbBd09hY/A+N31btuJPd7+ qT57HGjn0YGvasM4S0aah5r3oZ/knBn+B36ftxqJOL/bh/OFqKx70RiKPJ6ITnFA iXRyyvaWxZn7n9Z/ym+ltsDUsui3eoZl11SLkfKxCsCEfIYc81paMArlQ289oY3K J6YFoN+W7dWHpO39x+mCbxbpaP8GFlx0ip52ZQospqFrbycLchIlAN9IBzk7P6nW 4x9bhvGk+8WezAGZfU6mG9l7JFnzvIOcZo12Nm72vq9lDWSmyQnYRGEEwt1FugCx IcbI6Mo6kIzfpjmP3o8WTvwQuwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIt725vZ ejTuh3+PNmTfwsp7a/0lMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEQ2MDY1NEFE MEJDMTFFQTk1MERGMDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnkgQDBABn/8cwDQYJKoZIhvcNAQELBQADggEBAK8bFcuT qxCzGGN0pfUN9OCYf6KnGoLvuQPxdofGXoeQEBQjvwPj9ryTMdRIOnVuA3zvAYUD pIyeXHzpvPP8GYJBe1Gg1shCxTzsPCocHbEADiqvg5rMTBlLjpwoRW7k1XpDIAj3 6QzcVWkGnIbtiYZKVrtYcPOhLRLxtpN13UkpVXZwL8MsO6v59eNjUwI7isCruwLH q5Qwryog6qAeDJtgyYoXQ8nyrjTNY8ddF3NaM0FOR18ZqtZZjDyaY75axY5805fY G05V79PhB+ucqmZIxBLhjT41sTtwaV8HmzY9foBkNmm5EC2qI7oIvfU2gAb9k8Dh npZrp9vDxoe/vIk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org