$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14ABAF0C161711EC9CF7C367C4F9AE02.roa File: 14ABAF0C161711EC9CF7C367C4F9AE02.roa (raw, json) Hash identifier: r5nU8hvZJDYsdOXWx91zD9qoZBQ5neqJoaQ/jW9m/2U= Subject key identifier: 06:1C:96:19:DF:E2:F7:BE:ED:15:66:15:BE:A6:7D:3A:35:43:36:0E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D64 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14ABAF0C161711EC9CF7C367C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:07 +0000 ROA not before: Wed 10 May 2023 16:29:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138262 IP address blocks: 103.132.228.0/23 maxlen: 24 103.162.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28004 (0x6d64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc653-6359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:76:29:fd:6c:b6:04:7b:10:ec:13:54:54: 0e:8d:7b:e1:06:46:ba:83:d7:a3:ac:39:d0:d2:f5: 6c:f0:f9:9c:40:f7:57:d9:e7:f2:f9:12:c2:61:38: cc:52:d6:ef:31:2b:88:2f:f2:50:20:49:8e:66:dd: c5:17:06:d0:8e:75:bb:01:52:c2:26:e3:85:e0:2d: 08:cb:85:0d:6a:f7:51:78:8f:e3:45:38:c3:4e:a8: 4c:72:0c:69:69:d1:c1:56:09:f8:fe:45:39:4c:79: 87:5a:9d:b6:ca:35:63:29:69:60:e5:dc:15:fc:02: 4a:07:35:4b:66:6d:47:5d:97:fc:f1:81:8e:52:8e: d8:04:e7:c9:8e:74:89:a0:28:af:53:3d:7e:ad:88: cb:78:ee:5f:39:4f:ad:08:cb:fb:42:45:49:46:64: 53:3d:20:37:50:16:27:32:e2:79:ce:28:d3:d6:b6: 8f:1e:a5:01:ee:d2:09:cb:88:eb:10:0e:13:ad:76: c7:62:44:f5:22:03:51:b9:50:98:eb:42:56:62:42: f9:5b:f2:d9:13:c1:86:7a:c8:34:00:d8:60:18:9c: fd:7e:fa:ae:55:ee:2b:2e:14:76:83:d4:13:a6:df: 63:19:8f:66:19:df:a5:ab:15:8a:33:28:ab:d0:48: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1C:96:19:DF:E2:F7:BE:ED:15:66:15:BE:A6:7D:3A:35:43:36:0E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14ABAF0C161711EC9CF7C367C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.228.0/23 103.162.74.0/24 Signature Algorithm: sha256WithRSAEncryption 72:03:e5:b8:8b:20:86:a1:4e:aa:e2:78:83:40:8d:e1:ca:e9: a2:48:0e:3b:12:1a:0c:bf:ca:9c:ac:de:0f:7a:7d:6e:0a:95: 12:7d:e8:ff:24:5b:d5:3a:cd:0a:66:45:74:d8:d9:52:1e:35: 86:8b:8a:4e:ea:60:98:27:0c:b0:2a:db:29:f1:69:35:a1:ae: d5:c8:e6:b2:c4:10:48:a4:63:e7:49:e2:a9:3a:b5:38:54:15: 6c:b4:93:c0:24:8f:0a:2d:8b:61:56:fd:cc:ad:2e:8d:d9:24: c3:32:a6:32:41:4a:dd:78:5a:f3:ef:95:0b:1c:d1:6e:d1:8a: cf:84:a2:12:96:28:65:a1:98:bc:29:41:c3:77:94:dc:2e:8a: a7:77:85:c8:db:b1:4a:b7:37:ee:52:3a:e9:4b:dd:6a:4c:d0: ba:d5:2b:95:b8:0d:26:16:27:a9:85:7d:86:29:6d:62:55:ad: 65:d5:4c:a6:a4:a1:53:36:a3:cb:03:5d:d5:7a:54:05:88:eb: b5:06:57:69:0e:bb:af:6c:eb:6e:cf:c9:e7:61:e1:85:cd:bb: 06:3e:04:e0:ee:e9:f5:49:fe:fc:ac:85:6f:bf:a6:37:5b:23: 1d:77:7c:e3:2d:61:64:ed:35:6b:de:2a:ac:10:d1:24:e6:02: a4:37:f4:f4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY1My02MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wB2Kf1stgR7EOwTVFQOjXvhBka6g9ejrDnQ0vVs8PmcQPdX2efy+RLCYTjM UtbvMSuIL/JQIEmOZt3FFwbQjnW7AVLCJuOF4C0Iy4UNavdReI/jRTjDTqhMcgxp adHBVgn4/kU5THmHWp22yjVjKWlg5dwV/AJKBzVLZm1HXZf88YGOUo7YBOfJjnSJ oCivUz1+rYjLeO5fOU+tCMv7QkVJRmRTPSA3UBYnMuJ5zijT1raPHqUB7tIJy4jr EA4TrXbHYkT1IgNRuVCY60JWYkL5W/LZE8GGesg0ANhgGJz9fvquVe4rLhR2g9QT pt9jGY9mGd+lqxWKMyir0EhUJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAYclhnf 4ve+7RVmFb6mfTo1QzYOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTRBQkFGMEMx NjE3MTFFQzlDRjdDMzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnhOQDBABnokowDQYJKoZIhvcNAQELBQADggEBAHID5biL IIahTqrieINAjeHK6aJIDjsSGgy/ypys3g96fW4KlRJ96P8kW9U6zQpmRXTY2VIe NYaLik7qYJgnDLAq2ynxaTWhrtXI5rLEEEikY+dJ4qk6tThUFWy0k8Akjwoti2FW /cytLo3ZJMMypjJBSt14WvPvlQsc0W7Ris+EohKWKGWhmLwpQcN3lNwuiqd3hcjb sUq3N+5SOulL3WpM0LrVK5W4DSYWJ6mFfYYpbWJVrWXVTKakoVM2o8sDXdV6VAWI 67UGV2kOu69s627Pyedh4YXNuwY+BODu6fVJ/vyshW+/pjdbIx13fOMtYWTtNWve KqwQ0STmAqQ39PQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org