$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa File: 1336FB66ED7311EC86064A84C4F9AE02.roa (raw, json) Hash identifier: i2GFlKHHuRNiDSyuy1W+I9X0bVF7p9WtGZTt/sPkugQ= Subject key identifier: 6D:B0:5E:C4:8F:6E:EA:E5:B9:31:41:98:E6:F5:DF:4B:27:DC:0E:F5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7068 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa Signing time: Wed 10 May 2023 16:43:26 +0000 ROA not before: Wed 10 May 2023 16:43:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149539 IP address blocks: 103.185.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28776 (0x7068) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:43:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9ae-953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:14:0f:71:db:71:3c:f7:df:8f:4f:ae:c2: 59:e2:39:6e:09:64:dd:3d:c4:d2:41:fb:79:c1:be: a7:02:d4:89:10:df:5f:34:b4:67:af:5a:85:c2:02: 64:33:e8:fb:96:e6:20:06:74:16:af:b3:5b:f9:c0: 3f:0e:51:6c:0c:f3:a6:71:9d:48:55:8c:ee:47:a9: 05:0c:7c:df:8d:5e:a9:ed:01:4f:69:99:48:63:e9: 65:59:6f:b7:04:7b:03:b1:cc:7c:13:5e:37:04:e8: 60:e5:f3:eb:ac:fb:6f:33:aa:81:04:93:ae:32:50: c5:bf:18:91:c5:00:f0:ef:97:19:3f:2d:5d:34:a2: 6a:ad:05:c0:01:a3:c3:c3:92:12:53:89:04:7f:2c: 8b:cc:68:4f:a2:62:fd:c5:18:01:4c:6e:e9:84:79: 58:b3:56:93:48:95:fc:37:6b:81:f9:f2:33:c9:87: e1:67:a7:bd:8a:e4:c9:b6:a7:83:0f:6d:1b:a6:c0: 51:c6:31:64:a5:44:a5:aa:c8:e3:bf:65:6d:73:98: d5:cf:33:ef:be:92:64:93:e2:25:93:33:bf:d9:82: 62:6f:60:a7:81:d0:69:bb:0e:f5:22:79:27:9f:03: e5:b7:fe:9f:8f:0a:96:41:c4:2b:64:13:89:75:f5: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:5E:C4:8F:6E:EA:E5:B9:31:41:98:E6:F5:DF:4B:27:DC:0E:F5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.213.0/24 Signature Algorithm: sha256WithRSAEncryption b9:18:68:e8:29:b2:9b:ae:86:29:96:d7:6a:0d:9b:a0:7b:e5: 7d:44:80:0a:99:a0:35:d5:c2:28:06:b8:e7:20:b7:a0:ec:c6: 42:bd:69:e8:2c:6e:1f:9e:6e:10:90:7e:b3:9b:22:cd:39:34: 6b:53:c6:c6:54:16:7e:3b:98:be:ba:6e:e2:bb:9f:a1:b5:81: 1d:2f:ea:c3:37:7b:52:f7:06:01:82:ca:75:f1:b9:29:a4:b0: 46:8a:41:e7:6e:b8:6c:5a:a8:d4:0b:fd:be:76:f6:d8:5d:2b: 7e:6a:2a:88:75:9d:eb:df:7c:0d:63:88:2f:21:ee:fb:02:d7: f0:b4:45:1e:4f:65:63:52:08:49:f0:94:21:3d:57:55:e5:35: 43:55:e8:3d:30:83:1d:a6:6d:dc:2f:ce:18:d7:ff:42:b9:f6: fd:0b:dc:06:69:88:f9:f7:21:57:82:47:a9:7d:5c:97:4f:0f: 77:8c:e2:05:b9:c4:45:d1:d9:d9:ba:7f:bf:c8:58:89:2a:94: 6a:76:70:a0:43:08:c6:ff:68:9f:22:98:6e:1e:71:9a:37:fb: 75:b8:4b:13:06:46:d8:5e:1f:eb:f9:da:e7:e5:59:b0:9f:23: 3a:91:e2:ae:1d:b8:47:f6:e5:1d:dd:98:8e:64:e1:3c:77:d5: 5e:c7:af:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlhZS05NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywoUD3HbcTz3349PrsJZ4jluCWTdPcTSQft5wb6nAtSJEN9fNLRnr1qFwgJk M+j7luYgBnQWr7Nb+cA/DlFsDPOmcZ1IVYzuR6kFDHzfjV6p7QFPaZlIY+llWW+3 BHsDscx8E143BOhg5fPrrPtvM6qBBJOuMlDFvxiRxQDw75cZPy1dNKJqrQXAAaPD w5ISU4kEfyyLzGhPomL9xRgBTG7phHlYs1aTSJX8N2uB+fIzyYfhZ6e9iuTJtqeD D20bpsBRxjFkpUSlqsjjv2Vtc5jVzzPvvpJkk+IlkzO/2YJib2CngdBpuw71Inkn nwPlt/6fjwqWQcQrZBOJdfXrXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG2wXsSP burluTFBmOb130sn3A71MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTMzNkZCNjZF RDczMTFFQzg2MDY0QTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnudUwDQYJKoZIhvcNAQELBQADggEBALkYaOgpspuuhimW 12oNm6B75X1EgAqZoDXVwigGuOcgt6DsxkK9aegsbh+ebhCQfrObIs05NGtTxsZU Fn47mL66buK7n6G1gR0v6sM3e1L3BgGCynXxuSmksEaKQeduuGxaqNQL/b529thd K35qKoh1nevffA1jiC8h7vsC1/C0RR5PZWNSCEnwlCE9V1XlNUNV6D0wgx2mbdwv zhjX/0K59v0L3AZpiPn3IVeCR6l9XJdPD3eM4gW5xEXR2dm6f7/IWIkqlGp2cKBD CMb/aJ8imG4ecZo3+3W4SxMGRtheH+v52uflWbCfIzqR4q4duEf25R3dmI5k4Tx3 1V7Hr/8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org