$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F088F2859411EB84A35F50C4F9AE02.roa File: 19F088F2859411EB84A35F50C4F9AE02.roa (raw, json) Hash identifier: 2KjRDzcJv9BL1pZPsx1nVK7qWn8gxFWjrBSGJZoa9KU= Subject key identifier: 3E:47:68:55:6D:20:63:1E:70:A4:4A:E4:8E:A7:27:1B:E2:2C:33:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7C2A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F088F2859411EB84A35F50C4F9AE02.roa Signing time: Tue 17 Oct 2023 22:51:59 +0000 ROA not before: Tue 17 Oct 2023 22:51:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141879 IP address blocks: 103.164.28.0/24 maxlen: 24 103.164.29.0/24 maxlen: 24 2001:df3:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31786 (0x7c2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 17 22:51:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=652f100f-1fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:e3:f2:e5:3c:05:e3:bf:39:2c:7e:03:20: cc:6f:3d:2f:13:57:1d:c1:31:18:d0:09:51:7a:d6: a6:75:f7:f8:84:92:f4:45:20:37:36:50:87:e5:47: 9a:e7:18:6b:b3:1b:a3:c1:b4:ec:dd:9f:3c:32:a0: ae:3d:ef:f0:05:49:df:c0:f7:8d:63:71:04:72:c3: f6:0b:ff:f9:62:30:f7:62:60:9f:5c:c3:bd:89:f1: f3:d0:b0:f2:71:72:35:32:a8:25:eb:c5:ae:89:b5: a5:16:6d:af:f6:b8:44:cb:24:4f:6a:fd:67:36:e1: 1a:82:0b:f8:df:3d:33:e0:8e:05:af:37:8e:de:11: 01:b9:86:2a:99:d4:a2:19:ee:1b:2a:5c:ad:ee:0d: 4a:9c:ea:71:7d:e0:15:0a:15:c8:04:2e:ca:01:b9: 58:f9:a8:a4:cb:47:59:b6:3a:4f:c9:ef:e5:31:a9: 29:0e:c3:77:e4:08:0a:21:39:e5:79:af:3c:04:94: 84:72:83:52:c1:19:b4:9a:69:96:4a:20:54:52:6c: 5d:c8:00:02:ad:ba:02:1f:16:00:41:1c:5d:0b:ec: d9:a0:76:26:b8:81:e6:8b:fb:5c:80:4a:20:12:ce: b8:85:d0:48:f3:fb:7c:11:45:1e:8b:29:20:b5:35: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:47:68:55:6D:20:63:1E:70:A4:4A:E4:8E:A7:27:1B:E2:2C:33:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F088F2859411EB84A35F50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.28.0/23 IPv6: 2001:df3:9c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:6a:33:60:b6:1b:b1:c6:ef:1f:17:31:1c:6b:29:14:82:0e: 8b:5e:20:7f:54:b3:5e:7d:c8:a1:c7:41:62:a0:d6:d8:01:a0: 67:e3:ea:0f:db:dd:e4:85:6c:b1:8e:be:89:10:e5:c2:94:f5: 8a:03:9a:ba:9f:cc:58:aa:d8:7a:7e:ba:64:58:69:13:09:4f: 01:b9:b6:52:81:6b:17:77:d9:41:06:84:dc:b0:0e:da:54:f2: a3:2a:2e:c6:c5:de:af:bc:33:99:c9:8f:6b:3c:6c:78:c3:fe: 42:e6:4d:b1:6d:9e:32:ec:de:1f:70:1d:ee:39:3e:6f:7a:81: 2d:a5:02:dd:25:54:5d:9b:bc:68:51:18:fa:80:8f:a2:b7:f3: 5d:d7:d5:8b:a7:be:c4:55:20:ce:6c:ff:06:0c:63:af:3c:f8: 5e:ed:9d:5b:4b:1d:fa:b3:e0:c6:11:6b:40:cd:82:2e:c1:41: 61:b3:94:c9:7c:70:96:20:c4:60:5f:b5:31:7f:6c:ae:ad:7a: 47:29:f1:86:e5:44:35:0d:da:bc:a5:30:13:3f:db:f7:a7:17: ae:f9:6b:31:5f:61:4b:1d:bc:f9:22:cb:4b:79:eb:e9:2d:c9: 91:19:48:c4:c4:37:ef:42:f7:49:c9:82:36:ab:d1:38:59:0c: ab:5d:c0:67 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDE3MjI1MTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJmMTAwZi0xZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyanj8uU8BeO/OSx+AyDMbz0vE1cdwTEY0AlRetamdff4hJL0RSA3NlCH5Uea 5xhrsxujwbTs3Z88MqCuPe/wBUnfwPeNY3EEcsP2C//5YjD3YmCfXMO9ifHz0LDy cXI1Mqgl68WuibWlFm2v9rhEyyRPav1nNuEaggv43z0z4I4FrzeO3hEBuYYqmdSi Ge4bKlyt7g1KnOpxfeAVChXIBC7KAblY+aiky0dZtjpPye/lMakpDsN35AgKITnl ea88BJSEcoNSwRm0mmmWSiBUUmxdyAACrboCHxYAQRxdC+zZoHYmuIHmi/tcgEog Es64hdBI8/t8EUUeiykgtTV+QwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD5HaFVt IGMecKRK5I6nJxviLDPhMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTlGMDg4RjI4 NTk0MTFFQjg0QTM1RjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpBwwDwQCAAIwCQMHACABDfMJwDANBgkqhkiG9w0BAQsF AAOCAQEAmmozYLYbscbvHxcxHGspFIIOi14gf1SzXn3IocdBYqDW2AGgZ+PqD9vd 5IVssY6+iRDlwpT1igOaup/MWKrYen66ZFhpEwlPAbm2UoFrF3fZQQaE3LAO2lTy oyouxsXer7wzmcmPazxseMP+QuZNsW2eMuzeH3Ad7jk+b3qBLaUC3SVUXZu8aFEY +oCPorfzXdfVi6e+xFUgzmz/Bgxjrzz4Xu2dW0sd+rPgxhFrQM2CLsFBYbOUyXxw liDEYF+1MX9srq16RynxhuVENQ3avKUwEz/b96cXrvlrMV9hSx28+SLLS3nr6S3J kRlIxMQ370L3ScmCNqvROFkMq13AZw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org