$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa File: 16DAA12648AF11EE9B1A6C27C4F9AE02.roa (raw, json) Hash identifier: JFZeCnxUp0ByTqLSEVNocAOEwsVoFZe7KPDiYOtztyU= Subject key identifier: 49:DD:89:8C:F4:C5:6B:20:76:43:43:FC:C7:0F:F0:F9:59:DC:F8:31 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7924 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa Signing time: Fri 01 Sep 2023 10:09:41 +0000 ROA not before: Fri 01 Sep 2023 10:09:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 5065 IP address blocks: 45.113.76.0/22 maxlen: 24 103.52.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31012 (0x7924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 1 10:09:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64f1b865-5023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:e2:70:dc:30:ff:05:d4:31:3c:9d:1d:4c: a4:6c:23:83:e5:46:85:15:54:00:24:22:cc:db:9c: 91:dd:cf:7f:b5:4a:c9:f9:1e:9d:e2:23:90:ba:48: cf:cc:a4:3c:a9:d8:5b:59:26:d5:5f:38:7d:bc:e1: e7:95:66:b4:53:c1:76:aa:49:45:3f:8a:dd:a7:3f: 97:65:4e:5e:84:65:a7:6e:8f:5d:29:20:af:da:9d: b0:27:98:27:72:95:a3:5b:36:0a:2c:ee:76:01:34: e3:1c:41:bf:bb:0f:4e:f3:db:f1:c7:e9:7a:03:9d: d8:6c:fe:54:0e:f3:ff:ea:84:d3:48:6c:07:56:4b: 88:ed:f1:ff:0b:33:7f:6b:a8:a2:c4:70:8a:69:06: 44:5e:dc:22:3c:6e:36:b4:a5:2a:9b:cd:a9:5f:47: d5:be:90:18:1d:b2:d1:d3:74:ba:28:8b:4e:2e:ed: 4b:8d:2f:f4:54:15:d9:fc:56:f6:b7:de:ff:b9:69: 03:0d:9e:b0:50:5b:2c:89:0e:e0:f8:5f:c1:c0:a9: a4:40:85:89:45:79:21:dc:2c:16:0b:99:fd:bb:c6: 81:ee:73:66:b6:0e:30:73:c7:86:b8:97:51:80:4d: 43:5c:9b:a5:bd:dc:3c:8f:b3:aa:19:72:77:64:c0: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:89:8C:F4:C5:6B:20:76:43:43:FC:C7:0F:F0:F9:59:DC:F8:31 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16DAA12648AF11EE9B1A6C27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.76.0/22 103.52.224.0/22 Signature Algorithm: sha256WithRSAEncryption 16:39:5b:52:fe:19:ad:7f:b8:ba:da:ca:53:47:43:b7:99:24: 00:3b:04:5a:c9:f3:01:7f:4a:b2:ee:e4:1c:b2:62:0f:27:00: 97:bc:a2:d3:66:ec:b1:da:44:7a:5e:29:7c:ba:51:c6:5b:dc: 28:c4:85:67:16:6b:23:4e:89:81:b3:bd:ad:79:32:be:7f:59: ff:39:c4:a6:ce:cf:0b:1d:e3:b5:88:8f:57:d2:32:77:c8:3e: 80:54:5a:0b:43:5e:4b:8f:e9:cc:77:59:d8:11:97:97:00:8e: ed:77:77:c0:d3:73:7e:e4:a4:92:2b:4f:db:c8:90:46:56:98: 70:f1:1f:09:82:28:9a:2d:ac:37:79:14:e0:dd:59:69:e3:b8: 9e:6c:3d:c1:63:8e:2d:c3:cd:ac:15:7b:e4:65:6f:1a:43:6a: 18:e8:77:94:2c:21:b8:35:bd:36:fb:82:02:44:7e:d2:91:13: c6:45:2c:a7:29:b0:a0:6c:44:cf:58:4f:b1:c0:a6:96:5c:76: e4:d0:7a:84:91:ba:8a:d5:b6:c2:7c:2a:28:8d:de:67:df:64: f9:5a:29:20:df:e4:a6:a5:b0:c0:db:e1:a0:b3:e8:7b:3f:35: ec:97:91:7c:e1:12:4c:6b:9f:e0:5e:57:5d:e5:20:03:a8:20: 08:2a:ba:48 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICeSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTAxMTAwOTQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYxYjg2NS01MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HHicNww/wXUMTydHUykbCOD5UaFFVQAJCLM25yR3c9/tUrJ+R6d4iOQukjP zKQ8qdhbWSbVXzh9vOHnlWa0U8F2qklFP4rdpz+XZU5ehGWnbo9dKSCv2p2wJ5gn cpWjWzYKLO52ATTjHEG/uw9O89vxx+l6A53YbP5UDvP/6oTTSGwHVkuI7fH/CzN/ a6iixHCKaQZEXtwiPG42tKUqm82pX0fVvpAYHbLR03S6KItOLu1LjS/0VBXZ/Fb2 t97/uWkDDZ6wUFssiQ7g+F/BwKmkQIWJRXkh3CwWC5n9u8aB7nNmtg4wc8eGuJdR gE1DXJulvdw8j7OqGXJ3ZMB8TwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEndiYz0 xWsgdkND/McP8PlZ3PgxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTZEQUExMjY0 OEFGMTFFRTlCMUE2QzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItcUwDBAJnNOAwDQYJKoZIhvcNAQELBQADggEBABY5W1L+ Ga1/uLraylNHQ7eZJAA7BFrJ8wF/SrLu5ByyYg8nAJe8otNm7LHaRHpeKXy6UcZb 3CjEhWcWayNOiYGzva15Mr5/Wf85xKbOzwsd47WIj1fSMnfIPoBUWgtDXkuP6cx3 WdgRl5cAju13d8DTc37kpJIrT9vIkEZWmHDxHwmCKJotrDd5FODdWWnjuJ5sPcFj ji3DzawVe+RlbxpDahjod5QsIbg1vTb7ggJEftKRE8ZFLKcpsKBsRM9YT7HAppZc duTQeoSRuorVtsJ8KiiN3mffZPlaKSDf5KalsMDb4aCz6Hs/NeyXkXzhEkxrn+Be V13lIAOoIAgqukg= -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:49 2024 by rpki-client on console-fra.rpki-client.org