$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa File: 13E9953002DA11EBBE6C0F19C4F9AE02.roa (raw, json) Hash identifier: IruLidn5RUGw9Hn8EEEK44Yt7d2KVW9TR6xQZgikzyk= Subject key identifier: E9:8C:B2:C9:6D:D9:3E:4C:48:A9:30:3B:67:23:78:BE:D4:32:0B:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B08 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa Signing time: Wed 10 May 2023 16:17:42 +0000 ROA not before: Wed 10 May 2023 16:17:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134259 IP address blocks: 103.61.252.0/22 maxlen: 24 103.174.252.0/23 maxlen: 24 2001:df1:7940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27400 (0x6b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:17:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3a5-9d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:d9:08:12:45:39:e7:71:73:4a:61:b5:58: 14:da:6a:86:58:6f:e8:79:69:d4:6a:c1:85:0a:af: 8f:f1:1a:f9:53:9f:eb:19:b9:49:92:f3:87:f8:d7: 95:30:b4:ea:94:08:ee:71:30:dd:9c:7b:47:a1:f5: 82:cc:4e:ed:b4:c4:be:c9:ba:19:fc:8d:c8:61:af: 9c:6b:e6:13:ba:7d:d8:42:f5:e5:85:19:bf:ad:31: 74:95:ef:7b:25:a5:2a:f6:b3:e3:4a:66:02:94:88: 71:da:7f:29:78:47:26:b7:37:7b:50:f1:1d:ca:5c: b6:ca:1c:ae:d7:11:e1:6c:be:bb:2a:19:28:e2:cd: b3:99:00:96:76:2e:ac:88:f7:32:70:a4:1c:c7:1e: 5f:39:fd:07:0b:e0:b1:47:26:ea:79:a5:01:bd:30: a2:b0:94:ae:a9:ac:89:60:75:8f:df:26:20:1d:42: 0c:9b:8d:25:50:c0:2a:25:b8:7f:58:5d:43:cf:ba: dc:c2:41:4a:8a:8a:60:8f:08:af:19:1c:60:0a:21: 54:df:f5:f3:3e:6c:9e:d8:7c:a1:2e:e0:3d:c4:be: 76:29:39:b0:f8:90:ea:c7:64:41:c8:bb:3f:04:68: 3d:7b:57:5d:ff:16:3e:b9:22:38:a4:52:d5:df:a8: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:B2:C9:6D:D9:3E:4C:48:A9:30:3B:67:23:78:BE:D4:32:0B:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.61.252.0/22 103.174.252.0/23 IPv6: 2001:df1:7940::/48 Signature Algorithm: sha256WithRSAEncryption 48:08:fb:a1:25:29:1d:f0:8a:36:a3:df:0a:f2:25:ab:b7:28: 8f:40:28:1f:84:7d:aa:0c:a3:67:17:63:ab:1f:a6:fa:ce:58: 2f:ff:4e:73:1e:12:02:48:89:00:04:90:e5:7a:eb:15:9e:01: 84:ca:69:4a:6c:27:97:82:83:62:c7:a4:5a:f0:39:04:d9:87: ec:c5:23:18:53:87:39:be:1d:b3:e3:97:85:fb:b2:13:2a:05: 65:14:22:d7:6c:84:44:03:08:f6:47:6c:3d:31:d8:09:6a:52: 37:1a:92:61:1f:18:30:6f:21:1e:62:d1:4d:69:40:f2:ce:ab: c2:83:42:23:19:aa:c1:86:87:16:15:7e:5b:e8:9d:7d:94:61: 37:07:72:1a:93:ee:ef:d2:1c:9b:66:ac:af:33:74:23:f3:10: 3e:66:ba:4f:37:ae:52:c9:67:87:ad:ee:18:c6:13:09:4f:0a: f0:c3:4c:c0:e2:89:a1:c1:b1:fa:d3:79:5c:6a:e7:89:1f:27: d6:56:5e:83:4b:49:c8:11:8e:30:75:49:34:e6:fa:52:d6:bb: 39:a1:5e:ae:0e:eb:fb:83:17:43:f0:3c:b8:aa:22:0c:61:b5: 25:fa:58:15:3a:3f:0d:6c:f2:f4:41:09:8f:09:c5:66:31:5f: 33:f8:2a:f0 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICawgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNzQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNhNS05ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvanZCBJFOedxc0phtVgU2mqGWG/oeWnUasGFCq+P8Rr5U5/rGblJkvOH+NeV MLTqlAjucTDdnHtHofWCzE7ttMS+yboZ/I3IYa+ca+YTun3YQvXlhRm/rTF0le97 JaUq9rPjSmYClIhx2n8peEcmtzd7UPEdyly2yhyu1xHhbL67Khko4s2zmQCWdi6s iPcycKQcxx5fOf0HC+CxRybqeaUBvTCisJSuqayJYHWP3yYgHUIMm40lUMAqJbh/ WF1Dz7rcwkFKiopgjwivGRxgCiFU3/XzPmye2HyhLuA9xL52KTmw+JDqx2RByLs/ BGg9e1dd/xY+uSI4pFLV36hnZwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOmMsslt 2T5MSKkwO2cjeL7UMgs3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTNFOTk1MzAw MkRBMTFFQkJFNkMwRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnPfwDBAFnrvwwDwQCAAIwCQMHACABDfF5QDANBgkqhkiG 9w0BAQsFAAOCAQEASAj7oSUpHfCKNqPfCvIlq7coj0AoH4R9qgyjZxdjqx+m+s5Y L/9Ocx4SAkiJAASQ5XrrFZ4BhMppSmwnl4KDYsekWvA5BNmH7MUjGFOHOb4ds+OX hfuyEyoFZRQi12yERAMI9kdsPTHYCWpSNxqSYR8YMG8hHmLRTWlA8s6rwoNCIxmq wYaHFhV+W+idfZRhNwdyGpPu79Icm2asrzN0I/MQPma6TzeuUslnh63uGMYTCU8K 8MNMwOKJocGx+tN5XGrniR8n1lZeg0tJyBGOMHVJNOb6Uta7OaFerg7r+4MXQ/A8 uKoiDGG1JfpYFTo/DWzy9EEJjwnFZjFfM/gq8A== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:13 2024 by rpki-client on console-fra.rpki-client.org