$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa File: 12869E78746511EDBE898845C4F9AE02.roa (raw, json) Hash identifier: zur+05DM9wcJCRn5VRPhoKkiQlyK7tfRWUbGbWc7BsQ= Subject key identifier: 75:2A:70:E2:06:F3:3D:9C:FB:F1:68:0B:98:E4:85:D2:BD:BE:81:FA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 74C9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa Signing time: Mon 03 Jul 2023 08:21:26 +0000 ROA not before: Mon 03 Jul 2023 08:21:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135687 IP address blocks: 103.127.130.0/24 maxlen: 24 103.174.243.0/24 maxlen: 24 103.176.17.0/24 maxlen: 24 2001:df7:4c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29897 (0x74c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 3 08:21:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64a28505-d540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:dc:6b:a1:aa:a8:ae:3f:65:0c:5f:be:f0: cf:2e:cc:36:56:52:b8:07:be:7c:87:4e:99:d8:3e: 8d:ae:4a:0a:89:41:49:65:23:9b:c4:c1:b8:1b:c9: bc:c2:b1:27:14:b3:f9:07:06:fb:dd:f9:ff:bb:13: 3f:fe:63:2c:a9:f3:7e:b9:a4:13:38:01:95:8a:d0: bc:f8:4a:dd:ca:7f:7c:46:8a:38:ca:75:99:fa:f0: ce:31:b1:f1:f4:02:f2:45:a6:46:61:cc:c0:bf:90: 11:5e:da:48:75:31:74:b5:2d:bd:6b:22:20:75:67: 0f:84:bc:14:b2:8e:09:56:32:64:ed:af:65:92:48: 9a:78:5b:19:c5:1a:99:50:e6:a1:20:c7:52:fa:4d: a8:9e:6f:76:01:22:17:0c:81:3a:78:ac:e6:5a:c0: 6c:7b:5e:cf:ec:31:50:de:b9:07:c5:06:b6:02:49: b4:5b:35:87:ba:2e:1f:e9:90:36:0f:77:9d:be:45: 06:3a:ff:92:06:a4:dc:0a:06:c7:76:76:4c:9f:d8: c4:a7:13:c2:39:91:31:fd:1d:b7:ee:c5:0e:db:19: 6d:f1:2c:37:e6:3b:f8:8c:ea:6c:bf:e4:14:e8:71: a5:52:5f:9a:83:d4:36:98:1f:1a:7f:37:75:a6:2c: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2A:70:E2:06:F3:3D:9C:FB:F1:68:0B:98:E4:85:D2:BD:BE:81:FA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.130.0/24 103.174.243.0/24 103.176.17.0/24 IPv6: 2001:df7:4c80::/48 Signature Algorithm: sha256WithRSAEncryption 59:80:12:a1:23:0b:8f:f4:79:22:c1:e1:77:60:28:56:15:ab: 8c:f5:a8:48:e9:be:b0:a2:85:84:dc:c4:51:6b:ac:de:5b:35: 71:f7:75:4b:53:3d:ce:9e:74:a5:f5:5f:13:28:bb:5e:59:4e: 26:46:42:a9:1c:d4:02:56:9a:cc:72:2b:c5:1d:61:07:0a:98: c6:e6:d4:a4:fa:00:5e:49:28:f8:b4:1c:22:97:cc:56:6b:c5: 09:61:93:57:63:c3:2f:aa:de:de:54:59:b4:c4:db:72:43:92: 94:de:0f:aa:70:4e:02:af:5f:e8:6c:14:e7:a6:8d:ea:04:a7: ab:12:81:16:8c:32:e7:02:d7:ae:00:0b:60:5d:5f:ab:6c:91: 3f:ec:04:2f:19:54:a4:c2:54:d9:ce:34:b9:8f:39:15:bb:3d: 13:88:95:0d:62:80:01:3e:69:09:f5:5f:7f:8e:2f:34:cc:39: 92:cc:57:3e:3f:6b:82:10:9d:22:44:83:70:5d:32:fe:f4:1f: e1:3a:92:2b:34:70:35:18:de:77:71:92:fd:f5:0c:a6:79:ec: f7:20:78:8c:ff:25:eb:50:5f:34:34:68:8d:6e:4b:e7:9f:bb: 9d:f9:df:cf:8f:e2:f9:5d:16:b4:e5:38:7f:67:7b:c1:8b:97: a9:52:4d:ff -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICdMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzAzMDgyMTI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGEyODUwNS1kNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43nca6GqqK4/ZQxfvvDPLsw2VlK4B758h06Z2D6NrkoKiUFJZSObxMG4G8m8 wrEnFLP5Bwb73fn/uxM//mMsqfN+uaQTOAGVitC8+Erdyn98Roo4ynWZ+vDOMbHx 9ALyRaZGYczAv5ARXtpIdTF0tS29ayIgdWcPhLwUso4JVjJk7a9lkkiaeFsZxRqZ UOahIMdS+k2onm92ASIXDIE6eKzmWsBse17P7DFQ3rkHxQa2Akm0WzWHui4f6ZA2 D3edvkUGOv+SBqTcCgbHdnZMn9jEpxPCOZEx/R237sUO2xlt8Sw35jv4jOpsv+QU 6HGlUl+ag9Q2mB8afzd1pizrFQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHUqcOIG 8z2c+/FoC5jkhdK9voH6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTI4NjlFNzg3 NDY1MTFFREJFODk4ODQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnf4IDBABnrvMDBABnsBEwDwQCAAIwCQMHACABDfdMgDAN BgkqhkiG9w0BAQsFAAOCAQEAWYASoSMLj/R5IsHhd2AoVhWrjPWoSOm+sKKFhNzE UWus3ls1cfd1S1M9zp50pfVfEyi7XllOJkZCqRzUAlaazHIrxR1hBwqYxubUpPoA Xkko+LQcIpfMVmvFCWGTV2PDL6re3lRZtMTbckOSlN4PqnBOAq9f6GwU56aN6gSn qxKBFowy5wLXrgALYF1fq2yRP+wELxlUpMJU2c40uY85Fbs9E4iVDWKAAT5pCfVf f44vNMw5ksxXPj9rghCdIkSDcF0y/vQf4TqSKzRwNRjed3GS/fUMpnns9yB4jP8l 61BfNDRojW5L55+7nfnfz4/i+V0WtOU4f2d7wYuXqVJN/w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org