$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa File: 15E8D2B837BA11EC91248D3FC4F9AE02.roa (raw, json) Hash identifier: qMOM4XP929LyJ2KfUtREeLwIpITlLKWPVaKw8CTALfQ= Subject key identifier: F9:E2:1A:C8:7F:14:BE:62:E7:6E:E8:CD:BD:5C:59:34:39:2F:12:D5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FAF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa Signing time: Wed 10 May 2023 16:39:59 +0000 ROA not before: Wed 10 May 2023 16:39:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146895 IP address blocks: 103.173.44.0/23 maxlen: 24 2407:e140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28591 (0x6faf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:39:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8de-5177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:b4:fd:2c:b2:84:56:15:79:25:6c:bb:91: 7d:41:05:90:b5:a0:b0:44:db:85:ec:ab:46:cd:ec: 4e:b2:99:83:b9:7d:90:13:fd:38:a9:36:ca:b2:b4: 63:05:cf:05:7c:05:89:81:ac:7f:a4:26:93:e4:5e: 23:27:b7:e0:5d:cb:92:f1:c9:c2:71:19:d9:67:08: 6b:3d:8f:72:25:49:59:97:0f:a9:aa:e5:35:4f:1f: 81:3a:25:df:c6:dc:b3:70:89:cf:13:c7:aa:2e:33: ad:37:d1:27:81:0b:78:14:0c:32:e6:2a:a7:2a:53: 02:98:3c:77:da:92:f5:cd:71:cf:ba:7a:0c:fe:9e: 27:33:64:8e:a6:39:f2:bc:fa:54:79:56:19:cb:6e: 18:8a:1c:84:66:92:07:d8:ab:37:b7:e7:1c:16:b4: d0:de:6a:1a:c0:7f:20:d4:e4:b8:cb:bb:94:e6:8e: d0:f4:d2:87:35:d5:c7:9c:8c:83:71:63:86:a9:22: 8d:70:89:85:49:f3:b1:dc:9d:e7:49:0f:10:c0:04: a4:17:b7:4f:8c:19:f0:66:af:c7:b7:a7:93:ff:04: 56:d3:f2:9e:0a:6c:6e:cd:3a:ea:f6:fa:10:8e:81: 35:7d:c6:99:75:8b:ac:cb:d3:bd:4a:8c:42:c6:1b: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E2:1A:C8:7F:14:BE:62:E7:6E:E8:CD:BD:5C:59:34:39:2F:12:D5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.44.0/23 IPv6: 2407:e140::/32 Signature Algorithm: sha256WithRSAEncryption 06:bf:73:df:66:e6:98:31:7a:e6:b7:d4:94:6f:d6:ce:20:1f: de:a3:0d:40:72:e6:16:46:7b:4e:54:66:72:de:53:bc:c4:4f: 67:65:8d:d1:63:d7:9d:a9:69:24:5b:bf:76:d2:83:21:23:7c: e8:77:ba:fe:9e:ef:84:03:64:52:2d:6c:51:16:3d:0f:ec:55: dc:3e:62:b9:de:86:cd:dc:33:76:a2:4e:85:e5:05:ee:d8:13: 9b:bf:b6:e4:6f:13:5c:ce:a2:92:47:4a:25:52:01:57:2e:34: db:59:5c:32:6e:02:ae:04:6e:98:bc:d4:c3:24:29:0c:d3:55: 17:ea:1c:83:69:c2:7b:56:cb:12:72:d2:4d:73:b3:b8:a5:dc: 28:bb:40:30:45:d9:0d:e0:97:0b:a5:68:93:57:5f:89:90:e5: 55:ba:54:b0:d0:d9:b4:37:81:e7:f2:6c:07:e4:67:3f:bb:85: cd:b2:66:67:e6:53:92:ea:62:65:ff:71:80:5c:22:e0:f0:b3: fb:a2:64:b9:b9:17:0c:e7:60:42:a1:be:c5:25:7c:d1:9d:7a: c0:0f:ab:95:5a:34:41:89:8b:8d:22:a8:ce:98:90:53:fc:c5: 5d:d0:eb:e1:66:63:89:20:ee:31:62:73:53:bf:b8:af:f5:e0: f8:0c:eb:8c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICb68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhkZS01MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBi0/SyyhFYVeSVsu5F9QQWQtaCwRNuF7KtGzexOspmDuX2QE/04qTbKsrRj Bc8FfAWJgax/pCaT5F4jJ7fgXcuS8cnCcRnZZwhrPY9yJUlZlw+pquU1Tx+BOiXf xtyzcInPE8eqLjOtN9EngQt4FAwy5iqnKlMCmDx32pL1zXHPunoM/p4nM2SOpjny vPpUeVYZy24YihyEZpIH2Ks3t+ccFrTQ3moawH8g1OS4y7uU5o7Q9NKHNdXHnIyD cWOGqSKNcImFSfOx3J3nSQ8QwASkF7dPjBnwZq/Ht6eT/wRW0/KeCmxuzTrq9voQ joE1fcaZdYusy9O9SoxCxhvUhQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPniGsh/ FL5i527ozb1cWTQ5LxLVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTVFOEQyQjgz N0JBMTFFQzkxMjQ4RDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrSwwDQQCAAIwBwMFACQH4UAwDQYJKoZIhvcNAQELBQAD ggEBAAa/c99m5pgxeua31JRv1s4gH96jDUBy5hZGe05UZnLeU7zET2dljdFj152p aSRbv3bSgyEjfOh3uv6e74QDZFItbFEWPQ/sVdw+Yrnehs3cM3aiToXlBe7YE5u/ tuRvE1zOopJHSiVSAVcuNNtZXDJuAq4Ebpi81MMkKQzTVRfqHINpwntWyxJy0k1z s7il3Ci7QDBF2Q3glwulaJNXX4mQ5VW6VLDQ2bQ3gefybAfkZz+7hc2yZmfmU5Lq YmX/cYBcIuDws/uiZLm5FwznYEKhvsUlfNGdesAPq5VaNEGJi40iqM6YkFP8xV3Q 6+FmY4kg7jFic1O/uK/14PgM64w= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org