$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB3DB6698F911EBB5BCF914C4F9AE02.roa File: 0DB3DB6698F911EBB5BCF914C4F9AE02.roa (raw, json) Hash identifier: 0noEyHd+dcrygmvJBh1bYzPD3ya9ORHPjqkZDmV2IVk= Subject key identifier: 52:59:97:1B:E4:AE:12:ED:A0:A9:B6:52:16:3B:91:70:09:7D:32:75 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F38 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB3DB6698F911EBB5BCF914C4F9AE02.roa Signing time: Wed 10 May 2023 16:37:46 +0000 ROA not before: Wed 10 May 2023 16:37:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141870 IP address blocks: 103.165.62.0/23 maxlen: 24 2001:df6:7480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28472 (0x6f38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc85a-3474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:5d:89:11:19:e2:2e:79:03:07:c1:40:13: 95:9b:9d:77:77:98:76:95:a7:4a:0a:cc:e7:9c:b1: 05:67:49:86:14:98:cf:7a:36:ed:d9:1c:03:70:a9: 45:a2:bb:fc:bb:89:51:b8:61:6f:38:26:09:59:36: 59:5e:eb:e7:84:b6:73:65:34:73:f1:4c:c3:90:f5: 64:d9:da:7d:bf:4f:8c:74:94:82:79:e1:c0:9c:a8: 6e:a7:c2:33:e6:12:ef:23:7a:e5:e4:d5:03:95:58: 68:a0:b1:d2:c0:73:d0:d1:39:f1:10:19:44:33:8e: 66:0f:a2:13:2b:39:cc:1b:2a:ef:3e:2e:0a:3f:d4: 1c:77:11:71:88:fa:26:b4:d0:08:c7:0d:92:74:cf: 25:e7:72:ec:67:5c:2f:63:11:03:dd:95:17:a0:84: a8:08:e3:17:64:f8:20:88:4d:fd:9d:09:7b:e3:0a: 51:d4:f8:3f:6a:e0:53:89:16:4e:db:40:6e:34:63: a6:d1:9a:76:ec:86:44:e7:c9:7f:0c:15:38:a9:ad: e2:b8:3f:94:14:a0:4a:ce:5f:06:82:8d:db:a3:eb: 94:52:6b:76:05:1c:e4:92:10:f8:2f:47:b6:75:ae: e0:43:92:f7:ed:38:47:0c:41:17:8e:d8:e9:df:bf: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:59:97:1B:E4:AE:12:ED:A0:A9:B6:52:16:3B:91:70:09:7D:32:75 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB3DB6698F911EBB5BCF914C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.62.0/23 IPv6: 2001:df6:7480::/48 Signature Algorithm: sha256WithRSAEncryption ba:cd:37:75:68:cb:6f:15:d7:e1:e3:ef:f6:ac:4c:16:55:86: bd:27:99:7d:d3:4c:0c:40:f8:e8:3e:4d:74:69:b0:b7:0f:8e: 14:7f:2c:d2:65:f8:bf:02:ae:f7:15:67:a3:09:b8:bf:04:84: 24:38:f0:bb:b8:ae:57:8b:fa:e0:88:bd:22:22:d9:ad:ee:b5: ae:ba:14:ca:be:21:e2:ab:6a:b0:fd:44:3e:a1:14:0d:4c:ed: 8f:1c:4a:2e:33:d3:b6:69:93:1a:8f:16:9a:07:ec:06:67:f7: bd:b2:5e:61:d2:3c:3d:71:3b:32:47:97:7b:92:2e:1d:1f:11: e1:b2:a1:68:4a:44:99:88:22:b3:d6:b0:b4:f1:22:0b:6c:17: 1c:87:74:14:06:25:20:a1:cf:b3:13:65:06:a4:89:54:ba:03: e2:78:55:72:1a:35:9d:c5:e9:c2:40:b3:b7:2d:c6:0a:7d:35: 38:28:ba:20:cc:65:5b:df:75:58:eb:02:cb:8b:37:79:71:c4: bf:24:0b:03:64:90:0b:f7:fd:4d:67:70:c3:4c:2e:e3:e6:19: 85:36:fa:d7:22:5b:d9:30:18:9c:0e:c7:50:81:83:54:3c:2f: 87:e6:73:c4:13:c5:dc:fe:7a:19:1f:3f:bb:3f:f1:e3:a7:86: 16:07:9a:a0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg1YS0zNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ5diREZ4i55AwfBQBOVm513d5h2ladKCsznnLEFZ0mGFJjPejbt2RwDcKlF orv8u4lRuGFvOCYJWTZZXuvnhLZzZTRz8UzDkPVk2dp9v0+MdJSCeeHAnKhup8Iz 5hLvI3rl5NUDlVhooLHSwHPQ0TnxEBlEM45mD6ITKznMGyrvPi4KP9QcdxFxiPom tNAIxw2SdM8l53LsZ1wvYxED3ZUXoISoCOMXZPggiE39nQl74wpR1Pg/auBTiRZO 20BuNGOm0Zp27IZE58l/DBU4qa3iuD+UFKBKzl8Ggo3bo+uUUmt2BRzkkhD4L0e2 da7gQ5L37ThHDEEXjtjp378BnQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFJZlxvk rhLtoKm2UhY7kXAJfTJ1MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMERCM0RCNjY5 OEY5MTFFQkI1QkNGOTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpT4wDwQCAAIwCQMHACABDfZ0gDANBgkqhkiG9w0BAQsF AAOCAQEAus03dWjLbxXX4ePv9qxMFlWGvSeZfdNMDED46D5NdGmwtw+OFH8s0mX4 vwKu9xVnowm4vwSEJDjwu7iuV4v64Ii9IiLZre61rroUyr4h4qtqsP1EPqEUDUzt jxxKLjPTtmmTGo8WmgfsBmf3vbJeYdI8PXE7MkeXe5IuHR8R4bKhaEpEmYgis9aw tPEiC2wXHId0FAYlIKHPsxNlBqSJVLoD4nhVcho1ncXpwkCzty3GCn01OCi6IMxl W991WOsCy4s3eXHEvyQLA2SQC/f9TWdww0wu4+YZhTb61yJb2TAYnA7HUIGDVDwv h+ZzxBPF3P56GR8/uz/x46eGFgeaoA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org