$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/147ABE1602DA11EBBE6C0F19C4F9AE02.roa File: 147ABE1602DA11EBBE6C0F19C4F9AE02.roa (raw, json) Hash identifier: 8+Yurn0nCsReiaS2nICCC7f0hNJFuzNuVXZXRg/ydYw= Subject key identifier: 18:94:7F:50:77:52:8D:32:D1:FF:19:0E:A1:D1:91:AC:9D:41:69:30 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BB1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/147ABE1602DA11EBBE6C0F19C4F9AE02.roa Signing time: Wed 10 May 2023 16:20:55 +0000 ROA not before: Wed 10 May 2023 16:20:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135245 IP address blocks: 103.220.12.0/24 maxlen: 24 103.220.13.0/24 maxlen: 24 103.220.14.0/24 maxlen: 24 103.220.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27569 (0x6bb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc467-6107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:9f:64:01:ea:12:94:c3:34:e1:de:5d:0f: ba:56:de:3f:20:73:00:e3:3d:b7:56:49:d7:43:e8: 87:21:59:cb:81:d8:b7:fe:e0:53:1b:a4:c8:43:59: 5e:2b:2c:2a:0a:f1:b4:c3:dd:ea:77:7f:24:79:f6: b6:56:7c:fd:88:70:e0:69:f0:54:2d:b0:f2:a7:dd: 0b:90:32:35:95:6d:1e:a2:26:ee:55:c8:85:11:a5: a5:b3:42:a9:b3:83:1c:9b:40:73:f1:0e:26:10:78: 5e:c8:3e:51:9c:37:e1:d5:df:b0:a3:cd:be:59:01: 53:72:5a:f7:90:05:e2:7b:26:4e:76:81:a7:df:25: c4:d7:25:e4:cd:30:62:d3:50:e7:58:8f:05:13:05: 60:6a:9c:bb:e7:e0:89:ac:ab:2f:2c:b7:3f:7c:55: 9d:62:b5:c8:97:10:80:09:eb:27:69:6c:50:ed:a8: 4e:7f:c9:1d:b2:ac:7b:d9:8b:d5:e2:99:be:49:f0: 5c:16:27:87:2a:89:0c:f3:51:26:e9:6b:20:7a:91: cc:15:46:4f:b0:92:34:50:da:8a:9b:3b:c7:4e:15: 58:52:4b:6e:d1:09:b6:28:7d:b2:62:59:84:8f:90: e8:0c:c2:43:0a:5b:76:70:ac:23:35:a5:7d:0c:b6: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:94:7F:50:77:52:8D:32:D1:FF:19:0E:A1:D1:91:AC:9D:41:69:30 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/147ABE1602DA11EBBE6C0F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.220.12.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:4f:82:4b:ec:fe:2e:6e:53:41:d2:a1:08:c5:b2:be:8f:32: 89:2f:5e:66:e4:f5:e2:f5:35:2b:b6:8f:e4:63:7f:58:d6:f1: 7e:34:1e:2a:95:6f:fe:d0:62:b7:25:fd:92:d6:b7:5b:ca:8e: c4:11:3f:a7:0e:e2:10:bb:63:92:98:f2:fa:cf:7f:f5:91:4a: c1:d5:46:04:ed:be:93:9d:78:00:4a:ee:7c:17:d3:2b:ff:c4: be:06:88:94:20:56:dd:b7:0a:cd:50:55:83:38:46:13:ee:df: 81:04:1a:4d:45:61:77:70:c0:8f:5a:b1:a1:39:4d:ac:3c:4a: c0:71:94:95:dd:15:13:46:b7:6e:98:7f:b9:81:44:70:76:c8: c1:11:4d:09:b2:dd:e9:af:ee:30:2f:36:00:6c:35:3f:a2:87: 9c:b9:b4:d9:ec:5d:d6:fd:ac:fb:71:a9:88:78:ae:96:52:83: 8e:31:b1:f9:ef:c3:77:9c:79:cf:d7:03:62:a6:a6:2c:8e:1d: 22:78:08:f4:4f:a9:77:58:d1:01:8b:f4:3c:b1:64:d4:f8:54: b9:cf:f1:f6:cb:32:af:e1:55:a6:a0:ac:8a:a0:22:f9:78:a0: 45:fd:bc:ab:18:e3:b8:b4:2c:74:f0:16:e5:bd:d8:2e:5a:3f: 75:b2:c6:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICa7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDU1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ2Ny02MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg6fZAHqEpTDNOHeXQ+6Vt4/IHMA4z23VknXQ+iHIVnLgdi3/uBTG6TIQ1le KywqCvG0w93qd38kefa2Vnz9iHDgafBULbDyp90LkDI1lW0eoibuVciFEaWls0Kp s4Mcm0Bz8Q4mEHheyD5RnDfh1d+wo82+WQFTclr3kAXieyZOdoGn3yXE1yXkzTBi 01DnWI8FEwVgapy75+CJrKsvLLc/fFWdYrXIlxCACesnaWxQ7ahOf8kdsqx72YvV 4pm+SfBcFieHKokM81Em6WsgepHMFUZPsJI0UNqKmzvHThVYUktu0Qm2KH2yYlmE j5DoDMJDClt2cKwjNaV9DLZ7awIDAQABo4IClTCCApEwHQYDVR0OBBYEFBiUf1B3 Uo0y0f8ZDqHRkaydQWkwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTQ3QUJFMTYw MkRBMTFFQkJFNkMwRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn3AwwDQYJKoZIhvcNAQELBQADggEBAHxPgkvs/i5uU0HS oQjFsr6PMokvXmbk9eL1NSu2j+Rjf1jW8X40HiqVb/7QYrcl/ZLWt1vKjsQRP6cO 4hC7Y5KY8vrPf/WRSsHVRgTtvpOdeABK7nwX0yv/xL4GiJQgVt23Cs1QVYM4RhPu 34EEGk1FYXdwwI9asaE5Taw8SsBxlJXdFRNGt26Yf7mBRHB2yMERTQmy3emv7jAv NgBsNT+ih5y5tNnsXdb9rPtxqYh4rpZSg44xsfnvw3ecec/XA2KmpiyOHSJ4CPRP qXdY0QGL9DyxZNT4VLnP8fbLMq/hVaagrIqgIvl4oEX9vKsY47i0LHTwFuW92C5a P3WyxmY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org