$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11AEA5FA065F11EDA35E8B80C4F9AE02.roa File: 11AEA5FA065F11EDA35E8B80C4F9AE02.roa (raw, json) Hash identifier: 9qI/Q557BD+3zCmjv3rNkcUTmzD5PtiG1zPrexiw22k= Subject key identifier: 9E:CB:B2:D9:5F:2C:C1:87:89:B7:DE:47:9B:61:3E:0A:90:98:D9:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 745B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11AEA5FA065F11EDA35E8B80C4F9AE02.roa Signing time: Thu 22 Jun 2023 08:12:09 +0000 ROA not before: Thu 22 Jun 2023 08:12:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147237 IP address blocks: 103.110.127.0/24 maxlen: 24 103.175.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29787 (0x745b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 22 08:12:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64940258-57a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:da:d6:fb:70:92:5f:99:b5:a5:8c:fe:24: ff:14:c1:03:52:b2:3b:96:17:7d:dd:95:59:da:c7: af:be:72:f0:2a:35:02:c3:44:0a:9b:56:df:ac:31: 84:11:5d:50:5e:1f:ba:68:3f:08:6c:ea:c1:3c:c9: cd:9d:10:fd:d8:0c:79:57:7b:a9:8f:d5:91:f7:e2: 75:3c:b7:9f:f8:bd:c9:ee:ac:0f:70:b8:27:6e:6f: 49:6e:ac:e0:42:ba:3c:e2:b5:d6:20:d6:f7:97:50: b0:71:37:e1:3d:f7:17:52:77:a4:ab:74:d0:73:26: 19:c6:37:aa:cb:a6:02:2a:e2:65:31:ee:bb:81:21: 2f:73:a2:6b:15:dc:65:a8:94:36:e7:d8:95:a8:7c: 4f:76:b3:94:0f:aa:b3:96:14:9b:ac:a9:9b:21:2b: 71:c6:83:0e:43:3c:c5:d2:08:45:e2:7b:44:1a:91: be:fb:22:62:3a:e8:23:49:a5:67:c0:22:b7:34:f4: 27:c4:80:49:48:18:5a:64:8d:f0:a5:3d:fa:2e:fd: 98:10:c3:92:c9:96:d5:93:6c:04:48:43:5b:77:0e: 7e:dc:ab:ad:ed:03:db:0c:38:33:4d:8c:e0:9d:d4: e5:cf:86:ae:63:63:8c:05:18:c7:db:b7:49:54:fe: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:B2:D9:5F:2C:C1:87:89:B7:DE:47:9B:61:3E:0A:90:98:D9:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11AEA5FA065F11EDA35E8B80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.127.0/24 103.175.163.0/24 Signature Algorithm: sha256WithRSAEncryption 50:0d:58:d4:aa:9e:0c:01:7a:8a:aa:49:6a:58:64:92:ee:f6: 53:23:6f:ff:da:cd:45:81:1a:19:b5:d6:5e:f8:b2:f0:cc:14: 63:ea:c8:7e:8d:18:b0:c1:7e:f6:9d:e5:36:e6:4c:d1:5b:14: 56:e0:5b:33:d6:eb:05:f4:b5:4e:dd:29:94:16:6a:6b:75:92: 46:3f:58:e1:56:66:eb:91:65:d5:b0:ea:13:f3:51:ed:c6:f4: 6c:2a:b7:0a:cd:cf:01:09:a0:c1:15:a4:de:57:45:a4:4e:5d: 13:42:cd:13:19:27:8b:50:0c:34:ba:6c:6c:1f:97:0d:46:a9: 83:90:88:61:0f:22:11:78:e5:45:b2:b2:b4:06:48:91:db:2b: ab:7e:01:76:a3:8b:c2:b2:7a:20:ee:03:c1:ed:e3:da:4b:b3: fb:e9:82:48:27:59:35:6c:ce:97:9e:3c:5d:12:12:a0:ff:32: bc:01:8a:6b:8f:e9:0d:8d:e7:c6:fe:f6:7a:b0:85:93:f5:db: 4b:89:25:31:d3:c0:96:16:d8:af:6f:91:e5:e9:75:60:f3:a8: 3c:b5:2a:dc:54:86:59:fd:f2:59:69:f5:d4:87:f8:fb:81:b7: 34:64:a8:9e:4a:9e:51:5d:31:25:1a:c5:94:a8:35:90:1c:c9: cb:9b:d2:e2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICdFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjIyMDgxMjA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0MDI1OC01N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSva1vtwkl+ZtaWM/iT/FMEDUrI7lhd93ZVZ2sevvnLwKjUCw0QKm1bfrDGE EV1QXh+6aD8IbOrBPMnNnRD92Ax5V3upj9WR9+J1PLef+L3J7qwPcLgnbm9Jbqzg Qro84rXWINb3l1CwcTfhPfcXUnekq3TQcyYZxjeqy6YCKuJlMe67gSEvc6JrFdxl qJQ259iVqHxPdrOUD6qzlhSbrKmbIStxxoMOQzzF0ghF4ntEGpG++yJiOugjSaVn wCK3NPQnxIBJSBhaZI3wpT36Lv2YEMOSyZbVk2wESENbdw5+3Kut7QPbDDgzTYzg ndTlz4auY2OMBRjH27dJVP6ZzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ7Lstlf LMGHibfeR5thPgqQmNn4MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTFBRUE1RkEw NjVGMTFFREEzNUU4QjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnbn8DBABnr6MwDQYJKoZIhvcNAQELBQADggEBAFANWNSq ngwBeoqqSWpYZJLu9lMjb//azUWBGhm11l74svDMFGPqyH6NGLDBfvad5TbmTNFb FFbgWzPW6wX0tU7dKZQWamt1kkY/WOFWZuuRZdWw6hPzUe3G9GwqtwrNzwEJoMEV pN5XRaROXRNCzRMZJ4tQDDS6bGwflw1GqYOQiGEPIhF45UWysrQGSJHbK6t+AXaj i8KyeiDuA8Ht49pLs/vpgkgnWTVszpeePF0SEqD/MrwBimuP6Q2N58b+9nqwhZP1 20uJJTHTwJYW2K9vkeXpdWDzqDy1KtxUhln98llp9dSH+PuBtzRkqJ5KnlFdMSUa xZSoNZAcycub0uI= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:13 2024 by rpki-client on console-fra.rpki-client.org