$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B11D5AEEB4611EE8CCC9B23C4F9AE02.roa File: 1B11D5AEEB4611EE8CCC9B23C4F9AE02.roa (raw, json) Hash identifier: T08hwkyEgqZJx/QCEfRuN6kixj3Z69iFQ1MEpL2S4Bc= Subject key identifier: 91:C2:F5:25:50:B3:1B:1B:AB:2B:AE:1E:28:4D:F8:6B:8C:EB:0B:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8545 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B11D5AEEB4611EE8CCC9B23C4F9AE02.roa Signing time: Tue 26 Mar 2024 07:59:05 +0000 ROA not before: Tue 26 Mar 2024 07:59:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141262 IP address blocks: 103.49.48.0/23 maxlen: 24 103.159.46.0/23 maxlen: 24 2001:df1:5840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34117 (0x8545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 26 07:59:05 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=66028049-9ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:b9:9b:19:76:f4:32:2e:c8:e9:18:45:44: b6:9c:fb:15:98:65:26:c3:83:21:a4:3f:63:06:ae: b9:aa:a1:95:9e:0d:7a:bb:b4:ea:3b:b4:82:64:b2: bc:f9:cf:1c:de:02:d9:fb:ec:da:0d:9a:2f:97:54: 36:54:07:ac:c0:58:97:39:2b:48:6a:8d:5a:5f:e9: aa:74:67:99:16:03:a9:e7:79:5a:ea:00:68:24:48: 87:45:e4:03:c7:4f:5b:41:ef:b6:ab:16:fa:65:a2: c5:59:5e:e4:b5:71:73:50:45:3a:a8:79:99:e5:3d: 88:f9:81:d3:ee:fb:81:53:55:23:a9:9f:7d:f8:f5: 3a:6f:cb:da:fb:ff:24:f5:ca:de:5d:1b:fc:f2:c2: 01:2e:7c:2a:9e:2b:14:b6:03:88:0e:e4:ed:0a:a2: 37:21:7d:6c:85:42:22:f1:97:ca:af:77:49:03:8d: 88:1d:c1:2d:f6:1a:5f:1a:64:3b:f0:85:4f:b5:39: 24:b0:54:2c:b8:fe:0d:b1:33:64:60:59:65:56:fe: 0e:ca:6b:da:b2:c2:ce:28:0d:ab:ff:4b:e3:7a:76: 26:32:bb:5d:cf:bd:47:a9:a5:14:50:aa:fc:cb:c4: 83:b3:8e:58:3b:44:cb:f6:83:79:f1:4a:c4:d2:0b: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C2:F5:25:50:B3:1B:1B:AB:2B:AE:1E:28:4D:F8:6B:8C:EB:0B:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B11D5AEEB4611EE8CCC9B23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.48.0/23 103.159.46.0/23 IPv6: 2001:df1:5840::/48 Signature Algorithm: sha256WithRSAEncryption 9d:f6:77:9e:fe:2f:a4:5d:b3:44:38:6f:9f:27:3b:2b:e0:5a: 29:ff:f8:ce:6c:17:9a:88:f8:8a:c7:5c:b8:34:43:f7:0a:be: f8:75:d7:1c:3a:cb:84:15:e2:94:23:3c:9f:d1:08:ce:d9:62: c0:41:e7:77:60:2d:d1:ab:ef:b6:5c:47:a3:f1:2c:c9:02:a5: eb:92:4f:9c:26:54:72:e8:45:40:23:39:82:e5:1e:75:e4:94: 5a:d0:60:24:09:68:d8:51:79:86:20:9e:be:b0:85:39:56:02: f8:92:01:0d:d3:98:fe:60:f5:78:34:5b:1f:31:bc:fa:2e:26: 84:8a:28:fc:39:d5:31:55:80:4c:bf:3e:cd:5a:8e:c4:20:9a: 2e:bf:7b:ed:91:e4:50:53:27:9b:c3:91:a7:8a:3b:0f:1a:c1: 31:10:2d:5e:17:b8:56:17:ca:2b:1f:df:ab:72:e1:1d:6a:e5: 92:f9:0d:b1:28:1d:10:c5:55:f8:fd:09:13:46:07:7d:7f:01: d8:b9:42:75:c8:85:be:29:92:78:60:23:00:61:2b:78:3c:7e: db:d0:58:ad:1e:b1:83:99:f4:60:f7:4d:c4:dd:46:b6:3d:9a: 0b:15:69:4a:d3:0f:59:dd:0a:eb:77:b3:6b:ee:14:d4:9d:4a: 10:e1:a1:e5 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIVFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMyNjA3NTkwNVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjYwMjgwNDktOWVlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsnuZsZdvQyLsjpGEVEtpz7FZhlJsODIaQ/YwauuaqhlZ4Neru06ju0gmSy vPnPHN4C2fvs2g2aL5dUNlQHrMBYlzkrSGqNWl/pqnRnmRYDqed5WuoAaCRIh0Xk A8dPW0HvtqsW+mWixVle5LVxc1BFOqh5meU9iPmB0+77gVNVI6mfffj1Om/L2vv/ JPXK3l0b/PLCAS58Kp4rFLYDiA7k7QqiNyF9bIVCIvGXyq93SQONiB3BLfYaXxpk O/CFT7U5JLBULLj+DbEzZGBZZVb+Dspr2rLCzigNq/9L43p2JjK7Xc+9R6mlFFCq /MvEg7OOWDtEy/aDefFKxNILcikCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSRwvUl ULMbG6srrh4oTfhrjOsLWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFCMTFENUFF RUI0NjExRUU4Q0NDOUIyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZzEwAwQBZ58uMA8EAgACMAkDBwAgAQ3xWEAwDQYJKoZI hvcNAQELBQADggEBAJ32d57+L6Rds0Q4b58nOyvgWin/+M5sF5qI+IrHXLg0Q/cK vvh11xw6y4QV4pQjPJ/RCM7ZYsBB53dgLdGr77ZcR6PxLMkCpeuST5wmVHLoRUAj OYLlHnXklFrQYCQJaNhReYYgnr6whTlWAviSAQ3TmP5g9Xg0Wx8xvPouJoSKKPw5 1TFVgEy/Ps1ajsQgmi6/e+2R5FBTJ5vDkaeKOw8awTEQLV4XuFYXyisf36ty4R1q 5ZL5DbEoHRDFVfj9CRNGB31/Adi5QnXIhb4pknhgIwBhK3g8ftvQWK0esYOZ9GD3 TcTdRrY9mgsVaUrTD1ndCut3s2vuFNSdShDhoeU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org