$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5FB0B675BE11EBAAC6FA29C4F9AE02.roa File: 0E5FB0B675BE11EBAAC6FA29C4F9AE02.roa (raw, json) Hash identifier: EqC8zdJWP+8/L44i9T357hJGmip3hEcpOSkeyBCCjv4= Subject key identifier: 83:79:C0:60:47:4C:CE:C3:B6:2A:28:87:FE:37:89:D1:AF:DF:EA:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BB2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5FB0B675BE11EBAAC6FA29C4F9AE02.roa Signing time: Wed 10 May 2023 16:20:56 +0000 ROA not before: Wed 10 May 2023 16:20:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135247 IP address blocks: 45.251.32.0/22 maxlen: 24 103.219.204.0/22 maxlen: 24 202.53.4.0/22 maxlen: 24 203.28.245.0/24 maxlen: 24 2001:df2:6200::/48 maxlen: 48 2407:36c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27570 (0x6bb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc468-0b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:12:95:e4:f1:eb:27:67:1d:95:9e:38:cc: b9:ab:26:3f:e5:3e:bf:78:00:61:9c:af:ce:f5:4f: 53:a5:89:0b:81:32:75:9e:c0:d1:19:bc:f6:0d:76: a5:19:2d:d0:0d:9d:45:5c:be:53:e7:88:57:d8:04: df:eb:26:9a:20:42:eb:e6:d9:6c:4b:c4:fe:88:ab: f8:60:40:85:2a:89:c7:a4:3d:1a:9e:eb:74:6c:25: 0f:31:f6:35:bd:59:3f:a3:58:45:ff:c0:c4:e0:8d: 40:91:57:74:e0:14:26:93:3e:7e:ef:d4:f4:63:95: 33:12:a2:ed:c5:43:21:35:5e:24:e3:ef:29:42:ef: 3a:49:7e:69:b6:b7:cf:15:2f:bd:f2:52:98:63:79: 1f:ed:ec:b8:8d:6a:40:b0:03:04:03:3e:4f:72:43: 49:6e:1e:53:fa:93:ae:4b:b2:29:ed:e4:ff:30:e2: 7e:d5:3a:fa:5c:b7:71:43:cc:dd:2f:fd:6a:0b:5a: 61:9f:40:de:79:60:2e:0e:df:40:4b:79:07:85:de: 80:21:c2:fa:26:11:e4:af:f5:e7:7c:f9:4e:e4:c9: ca:f6:46:a0:88:38:6b:2f:7b:ae:d5:9d:7f:c1:1c: 1e:f8:31:dc:93:41:1c:6a:bc:e8:a7:c5:b3:08:4f: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:79:C0:60:47:4C:CE:C3:B6:2A:28:87:FE:37:89:D1:AF:DF:EA:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5FB0B675BE11EBAAC6FA29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.32.0/22 103.219.204.0/22 202.53.4.0/22 203.28.245.0/24 IPv6: 2001:df2:6200::/48 2407:36c0::/32 Signature Algorithm: sha256WithRSAEncryption 40:53:a4:8d:75:36:ab:26:f1:d7:53:a8:44:88:9b:ef:e7:a3: 93:19:78:14:2d:6c:43:c7:eb:8d:8d:14:a2:41:41:45:d9:12: 7f:3c:90:4b:bf:b3:f0:f4:6a:0e:03:dc:91:63:9f:9a:f4:2d: 9b:bd:fe:b9:36:14:38:9e:85:6a:31:ec:38:84:43:a0:01:c2: 31:3f:17:9f:61:60:60:67:12:1d:d2:a0:7a:d9:82:9c:8a:50: 04:dc:a8:0e:71:7c:47:66:81:06:41:85:6a:cc:21:b4:b8:b3: 37:29:45:2b:02:66:83:b7:4b:8d:25:7b:eb:44:cc:3e:03:20: 8e:52:95:89:a7:43:41:99:6f:f4:31:0b:89:69:b8:fd:b9:04: c7:ca:b3:8e:b1:5d:e8:ff:d8:67:9e:b2:48:2d:98:2f:3f:5d: 71:d2:92:6c:62:ae:7e:c9:fa:52:54:73:c1:2c:cc:8e:9d:04: e5:08:7d:cd:35:f9:e9:fd:75:57:fc:8f:f5:89:bb:dd:31:5b: 4d:3f:f4:ad:6a:37:56:ab:d1:30:4b:ff:c0:98:81:e2:fe:25: e3:94:23:e5:9d:43:d8:f4:fd:fb:2e:f6:21:84:c1:bd:26:13: 96:32:18:15:21:6e:c1:0d:75:e6:e7:fc:2e:d5:27:f7:bd:62: 6c:f8:bd:6e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICa7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ2OC0wYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyogSleTx6ydnHZWeOMy5qyY/5T6/eABhnK/O9U9TpYkLgTJ1nsDRGbz2DXal GS3QDZ1FXL5T54hX2ATf6yaaIELr5tlsS8T+iKv4YECFKonHpD0anut0bCUPMfY1 vVk/o1hF/8DE4I1AkVd04BQmkz5+79T0Y5UzEqLtxUMhNV4k4+8pQu86SX5ptrfP FS+98lKYY3kf7ey4jWpAsAMEAz5PckNJbh5T+pOuS7Ip7eT/MOJ+1Tr6XLdxQ8zd L/1qC1phn0DeeWAuDt9AS3kHhd6AIcL6JhHkr/XnfPlO5MnK9kagiDhrL3uu1Z1/ wRwe+DHck0Ecarzop8WzCE+WBwIDAQABo4ICvzCCArswHQYDVR0OBBYEFIN5wGBH TM7Dtiooh/43idGv3+qxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEU1RkIwQjY3 NUJFMTFFQkFBQzZGQTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MB4EAgABMBgDBAIt+yADBAJn28wDBALKNQQDBADLHPUwFgQCAAIwEAMHACAB DfJiAAMFACQHNsAwDQYJKoZIhvcNAQELBQADggEBAEBTpI11Nqsm8ddTqESIm+/n o5MZeBQtbEPH642NFKJBQUXZEn88kEu/s/D0ag4D3JFjn5r0LZu9/rk2FDiehWox 7DiEQ6ABwjE/F59hYGBnEh3SoHrZgpyKUATcqA5xfEdmgQZBhWrMIbS4szcpRSsC ZoO3S40le+tEzD4DII5SlYmnQ0GZb/QxC4lpuP25BMfKs46xXej/2GeeskgtmC8/ XXHSkmxirn7J+lJUc8EszI6dBOUIfc01+en9dVf8j/WJu90xW00/9K1qN1ar0TBL /8CYgeL+JeOUI+WdQ9j0/fsu9iGEwb0mE5YyGBUhbsENdebn/C7VJ/e9Ymz4vW4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org