$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16BCFC16A2BF11ED825F280EC4F9AE02.roa File: 16BCFC16A2BF11ED825F280EC4F9AE02.roa (raw, json) Hash identifier: k2vKe0W6MjQPZ8dD//69Se9oSXHDHCHhC482Qd5lQIQ= Subject key identifier: 7E:56:91:5D:11:76:53:4D:44:7E:7F:F2:9E:4D:EA:2F:EE:44:D5:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 80EF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16BCFC16A2BF11ED825F280EC4F9AE02.roa Signing time: Mon 01 Jan 2024 04:48:44 +0000 ROA not before: Mon 01 Jan 2024 04:48:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149228 IP address blocks: 103.170.110.0/23 maxlen: 24 103.179.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33007 (0x80ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 1 04:48:44 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6592442b-3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:28:18:23:23:f3:b1:12:7e:20:00:50:60: 3c:a0:8d:11:ab:06:92:6c:be:02:ec:66:32:0a:f7: 5c:60:0c:08:71:86:f5:83:58:b2:8d:59:6f:70:73: c1:aa:83:95:64:cb:13:04:e3:8b:06:dc:6e:f8:11: 24:15:16:22:29:2b:52:25:fe:98:94:27:a2:9f:a9: da:10:f5:5e:93:56:9a:5a:48:43:f0:cf:f1:39:2e: b1:8f:cd:f3:a0:29:ec:7e:1d:b1:36:34:03:a3:ac: 2e:da:30:39:3a:66:b2:69:55:9b:74:6e:72:48:79: 3e:cf:4a:d4:64:12:f2:cd:71:f3:f2:35:72:9c:e2: 5c:d6:c1:37:78:58:59:73:54:e0:07:5b:81:fa:50: 52:f8:07:af:26:9f:df:7f:ba:51:0f:0a:f2:01:82: 91:e3:b5:e6:cd:f5:1f:2e:f4:4c:6a:ae:83:e0:52: d1:38:6e:e9:0e:13:18:c8:db:3b:70:cc:94:3b:37: 4e:5e:bd:e2:46:49:cb:e7:c7:20:ec:b5:de:09:39: c8:ae:c6:cf:91:61:c7:c5:95:ab:92:da:b4:1d:34: 65:d5:61:14:6e:36:60:f0:d1:50:aa:9d:28:a5:4e: 63:e7:e9:a1:0f:5c:a3:11:4a:de:84:ad:fa:65:4d: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:56:91:5D:11:76:53:4D:44:7E:7F:F2:9E:4D:EA:2F:EE:44:D5:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16BCFC16A2BF11ED825F280EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.110.0/23 103.179.42.0/23 Signature Algorithm: sha256WithRSAEncryption 91:6a:9b:63:c2:3c:16:71:10:f5:9b:e7:a2:fd:ab:cc:23:a2: 43:fd:79:8f:b1:32:fb:67:34:ec:96:4a:eb:e0:99:5d:eb:b4: ea:c4:25:52:82:38:cd:8f:a4:ac:43:33:7f:49:3d:fb:fd:e3: a0:c0:43:66:75:45:bf:9d:4e:96:be:d0:a7:94:82:f3:ce:8f: 2f:b5:44:42:eb:11:69:e3:14:53:88:61:d6:ec:a5:b3:47:c3: 88:b5:c6:33:d3:2f:b5:80:8b:6b:f6:2a:b8:d4:32:ea:1e:23: c2:37:29:ba:ae:c0:6d:e3:53:e8:54:e2:cd:eb:e5:31:e1:ec: ed:af:e1:22:cf:d6:1e:32:c4:6f:42:ed:ac:c3:e0:06:e1:fa: 98:1d:28:92:30:ed:d5:9a:1d:60:1f:e2:dc:6b:12:43:66:34: 2f:97:4b:37:46:d8:c4:b3:10:60:7d:6a:b2:59:3e:c3:46:53: 48:ad:fc:5a:cc:50:04:f6:b0:3e:ec:90:45:aa:d5:1a:3b:2b: 23:b1:3a:df:cc:95:a8:d6:98:9f:70:b0:1a:c5:15:10:d1:6f: 7d:e0:a8:ff:2a:2d:61:3f:be:e3:08:9a:f6:7d:89:fb:af:06: fe:30:4d:21:e9:e5:e9:70:17:9a:d2:2a:f5:37:4c:ec:9e:a1: fa:e1:e0:12 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIDvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDEwMTA0NDg0NFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU5MjQ0MmItMzgzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlLKBgjI/OxEn4gAFBgPKCNEasGkmy+AuxmMgr3XGAMCHGG9YNYso1Zb3Bz waqDlWTLEwTjiwbcbvgRJBUWIikrUiX+mJQnop+p2hD1XpNWmlpIQ/DP8TkusY/N 86Ap7H4dsTY0A6OsLtowOTpmsmlVm3Ruckh5Ps9K1GQS8s1x8/I1cpziXNbBN3hY WXNU4AdbgfpQUvgHryaf33+6UQ8K8gGCkeO15s31Hy70TGqug+BS0Thu6Q4TGMjb O3DMlDs3Tl694kZJy+fHIOy13gk5yK7Gz5Fhx8WVq5LatB00ZdVhFG42YPDRUKqd KKVOY+fpoQ9coxFK3oSt+mVNfsECAwEAAaOCApswggKXMB0GA1UdDgQWBBR+VpFd EXZTTUR+f/KeTeov7kTV+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE2QkNGQzE2 QTJCRjExRUQ4MjVGMjgwRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ6puAwQBZ7MqMA0GCSqGSIb3DQEBCwUAA4IBAQCRaptj wjwWcRD1m+ei/avMI6JD/XmPsTL7ZzTslkrr4Jld67TqxCVSgjjNj6SsQzN/ST37 /eOgwENmdUW/nU6WvtCnlILzzo8vtURC6xFp4xRTiGHW7KWzR8OItcYz0y+1gItr 9iq41DLqHiPCNym6rsBt41PoVOLN6+Ux4eztr+Eiz9YeMsRvQu2sw+AG4fqYHSiS MO3Vmh1gH+LcaxJDZjQvl0s3RtjEsxBgfWqyWT7DRlNIrfxazFAE9rA+7JBFqtUa OysjsTrfzJWo1pifcLAaxRUQ0W994Kj/Ki1hP77jCJr2fYn7rwb+ME0h6eXpcBea 0ir1N0zsnqH64eAS -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org