$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa File: 0D63CCF6302911EEBEE85209C4F9AE02.roa (raw, json) Hash identifier: 2xshMRB6j4x231AyaMdu5RocFI6VpBGgiFGngJQa9hY= Subject key identifier: 8E:D8:43:CB:F0:D1:9E:E9:31:BB:69:A9:4C:73:B7:D2:18:DF:1F:2A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 76A6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa Signing time: Tue 01 Aug 2023 05:05:37 +0000 ROA not before: Tue 01 Aug 2023 05:05:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133315 IP address blocks: 43.250.132.0/22 maxlen: 24 43.250.208.0/22 maxlen: 24 103.78.168.0/23 maxlen: 24 103.81.250.0/23 maxlen: 24 103.166.95.0/24 maxlen: 24 103.169.76.0/23 maxlen: 24 103.171.43.0/24 maxlen: 24 103.232.8.0/22 maxlen: 24 103.235.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30374 (0x76a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 1 05:05:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64c892a1-997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:b3:8a:91:64:bb:f2:54:10:2a:48:72:72: 9f:e6:4d:36:42:2d:a9:d9:27:e9:31:13:80:26:b9: 2e:be:eb:ea:f6:94:59:2d:2b:44:64:a3:68:e8:e2: 15:23:7c:bb:05:05:14:bc:90:c2:ad:cb:64:d1:4b: 0a:d1:7e:df:cb:21:fa:99:d4:a2:8b:b3:04:56:e9: 38:3b:dc:89:19:e3:0d:92:a9:ef:25:f7:7f:6e:3d: 3e:31:78:9c:a8:7a:42:95:39:6a:e6:22:dc:f4:76: 08:18:c4:10:76:ba:6c:54:38:34:ad:0d:44:9b:47: ab:f6:27:36:08:21:eb:8b:e8:01:27:18:41:3e:f3: 4a:31:3c:79:30:4f:9b:5e:a5:2c:5a:65:b2:cf:af: 50:e7:d1:bf:2a:e2:30:10:0e:06:3a:c1:eb:da:a9: 2b:fb:32:94:0b:c0:5a:20:28:21:d0:68:75:12:06: 9a:24:31:38:d1:b8:da:50:68:82:e0:84:c3:da:52: 45:68:a0:05:36:b4:f9:a4:0d:e5:79:74:f5:e4:f9: b6:74:f4:56:e5:31:4c:d8:61:c4:53:a4:ac:bb:7f: 9f:d1:46:b5:b2:89:d2:9a:0e:a8:8b:50:47:ef:32: 2d:37:00:af:e1:12:73:83:3d:48:17:cd:3e:60:5c: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:43:CB:F0:D1:9E:E9:31:BB:69:A9:4C:73:B7:D2:18:DF:1F:2A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D63CCF6302911EEBEE85209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.132.0/22 43.250.208.0/22 103.78.168.0/23 103.81.250.0/23 103.166.95.0/24 103.169.76.0/23 103.171.43.0/24 103.232.8.0/22 103.235.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:c4:1a:77:5c:43:49:c7:02:2b:35:c6:05:db:70:43:ce:d1: 7e:47:a4:f7:2a:fa:95:6e:b1:78:42:35:c3:cf:36:1d:2e:90: 38:d4:b6:d6:7b:b1:dc:fb:a8:d2:33:18:22:72:e5:8f:25:eb: f0:fe:af:ce:65:14:ce:e1:bb:4a:9f:ff:a2:b7:b9:57:f6:8b: d5:a2:15:f6:35:74:09:09:95:5b:50:32:49:4d:48:da:cf:62: 6b:2b:4c:67:1c:a1:c6:b7:81:9b:ff:99:ba:e2:b8:9b:28:c2: 1b:26:63:5f:84:ca:b9:33:e7:9c:ec:c0:32:dd:42:95:af:ed: 88:c5:29:83:e2:ec:fd:fe:2b:ed:c4:92:c8:17:f1:94:ef:94: 83:c1:46:7f:a6:b6:75:9e:11:40:96:bd:ae:08:92:ba:a0:7b: 27:84:b4:2f:81:01:d7:50:2c:a5:be:b7:08:93:5f:db:38:2a: 44:da:c3:f3:a0:81:97:70:9f:f0:73:b3:cb:62:02:fd:16:1b: 98:1e:55:d6:98:30:59:65:99:61:0d:84:36:35:3b:6e:f9:06: 53:38:58:a1:cc:9b:a1:04:a1:f7:ce:c9:b7:30:ec:eb:8b:0b: 84:76:fd:9b:c0:42:d4:c8:53:fb:ac:31:59:1d:b7:23:71:38: 13:35:3b:d7 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICdqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODAxMDUwNTM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4OTJhMS05OTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YOzipFku/JUECpIcnKf5k02Qi2p2SfpMROAJrkuvuvq9pRZLStEZKNo6OIV I3y7BQUUvJDCrctk0UsK0X7fyyH6mdSii7MEVuk4O9yJGeMNkqnvJfd/bj0+MXic qHpClTlq5iLc9HYIGMQQdrpsVDg0rQ1Em0er9ic2CCHri+gBJxhBPvNKMTx5ME+b XqUsWmWyz69Q59G/KuIwEA4GOsHr2qkr+zKUC8BaICgh0Gh1EgaaJDE40bjaUGiC 4ITD2lJFaKAFNrT5pA3leXT15Pm2dPRW5TFM2GHEU6Ssu3+f0Ua1sonSmg6oi1BH 7zItNwCv4RJzgz1IF80+YFyFGQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFI7YQ8vw 0Z7pMbtpqUxzt9IY3x8qMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEQ2M0NDRjYz MDI5MTFFRUJFRTg1MjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAIr+oQDBAIr+tADBAFnTqgDBAFnUfoDBABnpl8DBAFnqUwD BABnqysDBAJn6AgDBAJn63gwDQYJKoZIhvcNAQELBQADggEBAD/EGndcQ0nHAis1 xgXbcEPO0X5HpPcq+pVusXhCNcPPNh0ukDjUttZ7sdz7qNIzGCJy5Y8l6/D+r85l FM7hu0qf/6K3uVf2i9WiFfY1dAkJlVtQMklNSNrPYmsrTGccoca3gZv/mbriuJso whsmY1+Eyrkz55zswDLdQpWv7YjFKYPi7P3+K+3EksgX8ZTvlIPBRn+mtnWeEUCW va4IkrqgeyeEtC+BAddQLKW+twiTX9s4KkTaw/OggZdwn/Bzs8tiAv0WG5geVdaY MFllmWENhDY1O275BlM4WKHMm6EEoffOybcw7OuLC4R2/ZvAQtTIU/usMVkdtyNx OBM1O9c= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org