$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F78EBA2A6B811EDA4749167C4F9AE02.roa File: 0F78EBA2A6B811EDA4749167C4F9AE02.roa (raw, json) Hash identifier: bnlsa+5CHnMR3UL6LbT2dhWQrvSpcOICA6GOmx0XCXc= Subject key identifier: C7:75:C4:D2:C5:2A:48:F0:96:41:C8:35:96:A6:0B:07:4A:D6:D3:42 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7C08 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F78EBA2A6B811EDA4749167C4F9AE02.roa Signing time: Mon 16 Oct 2023 07:44:27 +0000 ROA not before: Mon 16 Oct 2023 07:44:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134940 IP address blocks: 103.203.252.0/24 maxlen: 24 103.203.255.0/24 maxlen: 24 202.133.72.0/24 maxlen: 24 202.133.73.0/24 maxlen: 24 202.133.74.0/24 maxlen: 24 202.133.75.0/24 maxlen: 24 2001:df1:edc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31752 (0x7c08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 16 07:44:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=652ce9db-99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:6e:da:65:02:03:4b:b6:ac:24:13:58:41: 46:91:d9:7e:46:d3:70:de:b3:1c:04:45:ec:e2:d8: 30:9e:ca:0e:b3:7d:40:a8:5d:65:b0:ed:79:03:79: 01:98:59:27:b3:19:4d:77:a9:96:c8:55:12:7b:a4: 69:33:a0:82:d0:89:c1:57:6a:d5:be:42:95:a6:69: 4e:f8:a3:dc:2f:a4:fb:10:9a:e0:1c:2c:3a:f8:b3: f1:87:ac:89:5b:d6:bd:0d:fb:0d:e1:88:5b:07:bf: 84:fd:5c:7e:2b:4a:00:d3:4f:68:78:4a:ec:cc:4f: 40:3c:31:c4:6b:8b:09:01:a2:9e:f1:e6:77:58:56: 03:6a:46:ed:8a:2d:16:41:23:f8:64:84:6b:6f:2c: 49:af:24:30:d5:4c:64:f5:98:51:ec:66:84:be:16: 21:f7:8c:a0:c5:4b:a0:72:c9:8c:d0:b0:5b:9a:6a: f8:9d:61:ce:2d:0b:9e:ab:30:c0:fb:d0:90:e8:f7: 7c:76:1a:2a:98:a5:74:22:34:08:bf:5e:72:42:ec: 65:9e:6c:65:72:93:ae:ee:8a:1a:b2:78:fe:55:9a: 97:49:f9:51:26:02:31:9b:d1:42:10:ba:7b:73:b9: aa:af:8c:77:04:45:54:7e:7a:68:c2:a6:96:78:1d: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:C4:D2:C5:2A:48:F0:96:41:C8:35:96:A6:0B:07:4A:D6:D3:42 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F78EBA2A6B811EDA4749167C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.252.0/24 103.203.255.0/24 202.133.72.0/22 IPv6: 2001:df1:edc0::/48 Signature Algorithm: sha256WithRSAEncryption 68:f1:06:98:ce:fb:16:8a:6a:75:89:01:e5:49:55:be:84:21: ae:df:11:4c:2c:44:c9:3f:31:74:0a:7c:f8:a9:ec:cb:24:a0: 2e:76:84:a3:99:a4:7c:b7:8c:4b:ce:36:2c:91:7e:9b:2c:db: 97:b1:6f:ea:66:19:f5:3c:7f:ab:65:43:ec:5b:6f:b7:9c:4d: d8:6b:43:19:80:d7:b1:d0:e8:90:6d:17:a2:2a:73:69:ea:12: 2f:bf:0c:26:b7:7e:66:9d:20:20:e1:0e:97:fd:73:17:ae:bc: cf:76:0b:f4:17:72:f1:cd:a0:3b:9f:09:61:d2:e9:60:88:2f: 7e:2e:5f:b5:0a:28:73:b0:18:cb:e9:58:09:1a:a5:f3:ef:b8: 33:28:6f:85:13:56:2c:6f:34:e3:9c:d9:d7:70:08:ef:c6:37: b3:2b:9a:e4:84:56:d9:09:01:db:7d:5e:cc:78:3c:b0:a6:cb: de:e8:3f:80:a6:c3:b4:1a:7e:9c:ee:85:f8:f4:1d:fe:99:79: 17:9d:d1:99:1c:04:53:15:65:4c:a3:d4:a9:2f:cc:c9:38:14: b5:3b:70:03:5d:7c:bf:0c:cc:5e:55:ce:2c:56:53:e1:32:b4: cc:94:14:a9:1d:61:4a:20:af:0a:df:f4:51:cd:f8:ad:6d:c8: 65:8b:61:8f -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICfAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDE2MDc0NDI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJjZTlkYi05OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDBu2mUCA0u2rCQTWEFGkdl+RtNw3rMcBEXs4tgwnsoOs31AqF1lsO15A3kB mFknsxlNd6mWyFUSe6RpM6CC0InBV2rVvkKVpmlO+KPcL6T7EJrgHCw6+LPxh6yJ W9a9DfsN4YhbB7+E/Vx+K0oA009oeErszE9APDHEa4sJAaKe8eZ3WFYDakbtii0W QSP4ZIRrbyxJryQw1Uxk9ZhR7GaEvhYh94ygxUugcsmM0LBbmmr4nWHOLQueqzDA +9CQ6Pd8dhoqmKV0IjQIv15yQuxlnmxlcpOu7ooasnj+VZqXSflRJgIxm9FCELp7 c7mqr4x3BEVUfnpowqaWeB27iwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMd1xNLF KkjwlkHINZamCwdK1tNCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEY3OEVCQTJB NkI4MTFFREE0NzQ5MTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABny/wDBABny/8DBALKhUgwDwQCAAIwCQMHACABDfHtwDAN BgkqhkiG9w0BAQsFAAOCAQEAaPEGmM77FopqdYkB5UlVvoQhrt8RTCxEyT8xdAp8 +KnsyySgLnaEo5mkfLeMS842LJF+myzbl7Fv6mYZ9Tx/q2VD7Ftvt5xN2GtDGYDX sdDokG0XoipzaeoSL78MJrd+Zp0gIOEOl/1zF668z3YL9Bdy8c2gO58JYdLpYIgv fi5ftQooc7AYy+lYCRql8++4MyhvhRNWLG8045zZ13AI78Y3syua5IRW2QkB231e zHg8sKbL3ug/gKbDtBp+nO6F+PQd/pl5F53RmRwEUxVlTKPUqS/MyTgUtTtwA118 vwzMXlXOLFZT4TK0zJQUqR1hSiCvCt/0Uc34rW3IZYthjw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org