$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E152ADA48D911EBA3644B14C4F9AE02.roa File: 0E152ADA48D911EBA3644B14C4F9AE02.roa (raw, json) Hash identifier: xJEplrKMJ4N1AZBmLTMG5WwjO/F4rEeq2O7hpmeUghs= Subject key identifier: 5A:29:75:F1:09:D7:5C:AF:5A:56:85:57:95:32:7C:2E:5F:19:E2:6B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E77 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E152ADA48D911EBA3644B14C4F9AE02.roa Signing time: Wed 10 May 2023 16:34:11 +0000 ROA not before: Wed 10 May 2023 16:34:11 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141284 IP address blocks: 103.158.156.0/23 maxlen: 24 2406:bc40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28279 (0x6e77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:11 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc783-7d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:c1:52:0c:14:ae:a9:76:bb:f0:5c:a5:2c: 86:7c:f0:87:29:c5:01:31:16:26:96:98:0f:65:1d: 81:14:e3:b3:97:d0:d8:86:ae:1a:85:61:1e:3d:f3: b1:5c:67:f8:d4:0f:cc:71:4a:91:ee:65:e3:70:6f: 86:1a:a0:e8:5e:c2:e8:f2:5f:f7:81:37:a2:c9:a0: fa:c0:4a:a2:de:4f:4b:6d:04:6f:79:e2:d8:02:4e: 7e:63:90:8d:cf:5b:7e:da:3b:b3:84:12:0c:5e:4c: 02:9c:09:f7:c3:9b:cf:bd:dc:02:1f:71:f6:67:e5: 54:12:67:08:c7:a3:b8:86:92:9d:ff:2a:1b:f2:dd: 44:f9:ea:7a:4a:0e:4a:ae:c9:5d:91:e6:45:a3:35: ff:4a:1a:01:4c:ee:13:44:6b:da:1e:56:59:98:53: 6d:1d:65:4c:56:7d:76:44:6d:aa:8d:55:25:97:0c: 46:f7:ee:0d:b8:2a:34:fe:fe:80:5d:ea:19:05:c8: 53:90:93:ff:42:cf:ab:31:c8:bf:ee:7c:ce:19:99: b5:88:7e:d6:64:49:bb:a5:f2:24:70:30:57:5b:a8: 20:d8:8c:6e:96:05:1a:5e:ce:ad:78:15:2d:89:5d: dc:a5:29:00:86:7c:ef:3d:d5:56:30:5a:29:56:8b: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:29:75:F1:09:D7:5C:AF:5A:56:85:57:95:32:7C:2E:5F:19:E2:6B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E152ADA48D911EBA3644B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.156.0/23 IPv6: 2406:bc40::/32 Signature Algorithm: sha256WithRSAEncryption 94:d4:f5:94:aa:b7:f1:e8:10:e2:f7:62:e7:ab:a3:f3:e1:e4: 91:5e:ca:53:fa:bd:03:49:9f:25:25:4d:69:88:43:27:70:73: 85:96:db:20:57:47:e7:e2:c8:4b:a7:84:63:02:51:3c:a5:c9: 13:ea:79:1d:09:fe:86:f8:28:ed:d9:04:8c:bc:77:13:f5:fe: 91:81:5f:56:99:47:d1:7f:0e:cd:07:ae:fb:8e:58:fa:5a:1c: 4e:43:6b:77:3f:e5:5e:1f:07:3c:a4:1d:30:0b:ff:16:86:7c: cc:08:a6:35:70:bb:6b:5e:ff:d9:21:5b:fd:81:c7:1a:43:b2: 70:41:1a:64:9d:f5:e0:c5:a3:1d:bb:1f:0f:e4:5e:66:cf:be: d7:d2:91:34:64:2d:b9:ad:1c:c0:51:e4:b0:ab:96:72:a0:ac: 8f:22:2a:92:02:4e:f9:80:15:34:ce:cc:4d:96:01:a4:f8:98: a4:71:fb:2d:34:09:45:4f:b2:ea:ae:1a:71:f8:4c:87:2f:57: 89:a9:f6:fa:e4:bb:80:69:ed:a6:0f:b1:c5:30:40:2f:73:3d: 57:bf:47:b6:9a:23:e4:2f:02:56:37:56:9e:ab:3f:76:19:7b: 76:76:a9:95:71:67:e0:42:fe:63:18:56:80:72:a3:84:13:3a: fe:29:60:19 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc4My03ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNPBUgwUrql2u/BcpSyGfPCHKcUBMRYmlpgPZR2BFOOzl9DYhq4ahWEePfOx XGf41A/McUqR7mXjcG+GGqDoXsLo8l/3gTeiyaD6wEqi3k9LbQRveeLYAk5+Y5CN z1t+2juzhBIMXkwCnAn3w5vPvdwCH3H2Z+VUEmcIx6O4hpKd/yob8t1E+ep6Sg5K rsldkeZFozX/ShoBTO4TRGvaHlZZmFNtHWVMVn12RG2qjVUllwxG9+4NuCo0/v6A XeoZBchTkJP/Qs+rMci/7nzOGZm1iH7WZEm7pfIkcDBXW6gg2IxulgUaXs6teBUt iV3cpSkAhnzvPdVWMFopVos+jwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFopdfEJ 11yvWlaFV5UyfC5fGeJrMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEUxNTJBREE0 OEQ5MTFFQkEzNjQ0QjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnpwwDQQCAAIwBwMFACQGvEAwDQYJKoZIhvcNAQELBQAD ggEBAJTU9ZSqt/HoEOL3Yuero/Ph5JFeylP6vQNJnyUlTWmIQydwc4WW2yBXR+fi yEunhGMCUTylyRPqeR0J/ob4KO3ZBIy8dxP1/pGBX1aZR9F/Ds0HrvuOWPpaHE5D a3c/5V4fBzykHTAL/xaGfMwIpjVwu2te/9khW/2BxxpDsnBBGmSd9eDFox27Hw/k XmbPvtfSkTRkLbmtHMBR5LCrlnKgrI8iKpICTvmAFTTOzE2WAaT4mKRx+y00CUVP suquGnH4TIcvV4mp9vrku4Bp7aYPscUwQC9zPVe/R7aaI+QvAlY3Vp6rP3YZe3Z2 qZVxZ+BC/mMYVoByo4QTOv4pYBk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org