$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa File: 14CC134C57E811EC8A0ADB28C4F9AE02.roa (raw, json) Hash identifier: kU/oLMMeGtaLsNOtXRiDuGy78CkQB8CaMG/eD04VXbw= Subject key identifier: 83:D0:A9:43:BD:9F:09:75:6D:57:57:E1:4F:06:22:24:61:59:56:CD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7006 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:37 +0000 ROA not before: Wed 10 May 2023 16:41:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147264 IP address blocks: 103.177.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28678 (0x7006) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc940-8bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:22:d8:4a:e3:14:36:23:47:51:be:5a:02: 21:be:46:71:3d:44:33:04:8b:91:ba:fc:7d:b8:e9: c6:e4:69:32:c7:b4:e6:55:e7:5c:ee:b8:cd:92:1f: 11:ed:d4:9f:05:a1:4a:6f:5b:1b:5a:7b:06:25:4f: 2b:81:57:13:45:96:74:c4:fd:bd:0c:b4:cb:38:8f: 5e:d3:a3:70:9a:bd:b3:aa:1a:ac:1f:12:64:23:cb: a3:9b:75:56:98:3b:92:03:c9:81:ff:12:d5:3b:31: ff:36:95:ce:bd:b7:c8:85:18:1c:cc:d3:85:5d:59: c1:3a:a1:8d:0b:fa:79:cd:7e:37:69:16:f1:b7:c9: ad:5d:6a:05:f6:6f:6e:5b:a4:35:79:3d:0c:1b:d7: de:9a:d4:89:a0:cf:a2:ce:b8:cc:fd:67:20:d9:9c: b8:5e:b5:8f:45:9f:a4:71:fb:6d:6b:74:ef:ec:5e: b6:df:cf:e5:9c:15:5b:3e:10:d4:86:cc:c1:c5:d6: 2a:46:4d:17:52:5c:92:71:10:2b:ce:25:02:63:38: 88:5d:7a:1f:1f:12:c7:94:87:af:57:3f:e7:b6:97: 1f:62:60:a8:7c:3e:83:5b:fc:d2:19:7f:9f:ba:98: d5:22:74:0d:ec:8c:ec:20:6b:97:d0:f5:61:5e:82: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D0:A9:43:BD:9F:09:75:6D:57:57:E1:4F:06:22:24:61:59:56:CD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14CC134C57E811EC8A0ADB28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.172.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:ec:c8:41:dd:23:a2:bf:b0:76:f8:d4:95:53:4c:67:cf:db: 8e:47:80:fe:de:eb:96:09:ca:75:8c:36:7d:21:fb:59:89:4d: 74:96:9c:ef:7c:f3:a1:04:43:02:cb:b4:85:64:59:07:6e:87: e6:6a:7c:89:50:7b:f5:00:85:34:5e:06:66:ee:90:5c:96:ee: 58:f3:1a:35:2b:b3:66:d4:02:90:90:33:4f:82:4d:b2:c4:64: f1:3c:5c:0d:ca:4b:ff:49:ee:48:7a:48:18:32:0c:b7:5f:93: a0:b1:f2:62:8d:cc:81:aa:78:57:54:24:df:34:c3:05:7f:6f: 2f:24:7f:63:dc:7f:23:09:81:3b:eb:0d:4d:d4:06:81:e2:be: b6:17:1a:96:dd:a5:ca:f7:ea:c8:12:0c:07:82:57:ae:85:5d: 9f:3d:6a:58:da:99:69:30:5a:8d:d4:21:91:a6:ad:d0:a4:1a: 3e:84:d5:55:4d:ed:10:02:7e:65:22:14:0b:9f:60:1a:72:82: d9:60:ae:38:c7:8b:16:8a:f9:83:8b:c6:6a:2b:2f:ac:2a:2a: bb:a2:4e:db:ea:a5:79:5c:73:d0:6f:dd:5b:5b:d9:a1:68:fb: 9b:e8:61:a8:18:32:8c:2f:f6:10:26:dd:cb:58:5c:1c:d1:7f: c3:a4:8c:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk0MC04YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6ki2ErjFDYjR1G+WgIhvkZxPUQzBIuRuvx9uOnG5Gkyx7TmVedc7rjNkh8R 7dSfBaFKb1sbWnsGJU8rgVcTRZZ0xP29DLTLOI9e06Nwmr2zqhqsHxJkI8ujm3VW mDuSA8mB/xLVOzH/NpXOvbfIhRgczNOFXVnBOqGNC/p5zX43aRbxt8mtXWoF9m9u W6Q1eT0MG9femtSJoM+izrjM/Wcg2Zy4XrWPRZ+kcftta3Tv7F6238/lnBVbPhDU hszBxdYqRk0XUlyScRArziUCYziIXXofHxLHlIevVz/ntpcfYmCofD6DW/zSGX+f upjVInQN7IzsIGuX0PVhXoJ6BQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIPQqUO9 nwl1bVdX4U8GIiRhWVbNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTRDQzEzNEM1 N0U4MTFFQzhBMEFEQjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsawwDQYJKoZIhvcNAQELBQADggEBAG/syEHdI6K/sHb4 1JVTTGfP245HgP7e65YJynWMNn0h+1mJTXSWnO9886EEQwLLtIVkWQduh+ZqfIlQ e/UAhTReBmbukFyW7ljzGjUrs2bUApCQM0+CTbLEZPE8XA3KS/9J7kh6SBgyDLdf k6Cx8mKNzIGqeFdUJN80wwV/by8kf2PcfyMJgTvrDU3UBoHivrYXGpbdpcr36sgS DAeCV66FXZ89aljamWkwWo3UIZGmrdCkGj6E1VVN7RACfmUiFAufYBpygtlgrjjH ixaK+YOLxmorL6wqKruiTtvqpXlcc9Bv3Vtb2aFo+5voYagYMowv9hAm3ctYXBzR f8OkjCw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org