$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6C8EF6FBCB11ED95691773C4F9AE02.roa File: 1B6C8EF6FBCB11ED95691773C4F9AE02.roa (raw, json) Hash identifier: Th8TLwVjyxYUM0oncVB6Vc9pz6wjW9iIvfkRiFBmoHo= Subject key identifier: 81:F8:37:89:54:13:8D:F2:0C:24:35:F4:7D:6E:DD:E8:6A:09:C1:DA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 72D4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6C8EF6FBCB11ED95691773C4F9AE02.roa Signing time: Fri 26 May 2023 13:42:08 +0000 ROA not before: Fri 26 May 2023 13:42:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151166 IP address blocks: 103.144.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29396 (0x72d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 26 13:42:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6470b72f-4f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:9f:7b:bb:9b:59:9d:b7:f4:11:18:e0:b2: 46:9b:b2:dc:22:0a:a6:1b:be:9f:53:71:89:7a:fc: 22:93:b9:5a:41:f4:69:cb:02:80:c3:ae:b8:1e:e0: 84:fd:1e:09:51:87:e0:a2:21:6b:00:9f:ff:90:61: c4:fa:da:a9:3e:c1:b6:a7:5a:d3:f9:0b:e3:4f:6a: 71:74:05:38:3f:0d:83:10:71:2c:34:96:45:7d:58: 4d:9a:42:22:8c:82:e7:43:2e:91:11:05:75:a2:c6: 8c:bd:9f:e1:8f:89:a2:38:92:5c:d4:c1:42:3d:83: 7e:f0:7e:d7:b8:dd:26:45:bd:fa:24:31:f4:35:79: 1a:bd:98:3c:9a:75:bf:06:33:a7:78:8e:a0:ee:a7: 2a:90:98:c1:d9:3b:09:8d:f4:7a:9c:65:45:c7:65: ab:21:af:6c:7c:6d:5a:78:29:20:28:5a:47:b9:b5: f5:8a:c8:51:66:35:04:67:43:ee:ff:3d:04:d4:fd: d2:33:f6:c4:aa:f2:b0:3c:66:7f:2d:11:cb:f3:dd: e5:6c:c4:91:53:c3:a4:43:58:b8:1f:80:98:4e:e9: 83:42:e4:11:80:4f:ba:08:57:14:38:06:91:58:c7: 0a:d7:f5:65:14:b0:51:e1:80:4c:5f:b3:c8:9e:aa: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:37:89:54:13:8D:F2:0C:24:35:F4:7D:6E:DD:E8:6A:09:C1:DA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B6C8EF6FBCB11ED95691773C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.214.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:09:43:db:41:b5:42:e6:5a:da:f3:af:83:bf:30:3b:1f:30: 8b:be:f5:a7:9b:de:56:7e:d1:43:90:22:f8:f9:31:01:39:a2: 4c:66:58:27:c6:33:a1:f3:01:9f:c8:3f:b1:c7:19:1d:b7:32: 43:e9:16:64:9e:ef:bc:f2:70:b4:84:cd:52:2b:92:1c:ff:66: e0:80:b5:89:7d:4f:e7:b6:a4:dc:44:e4:ae:9d:d4:a0:22:e0: ca:34:ff:d1:a4:f9:bb:a4:09:f9:f2:77:4f:75:c4:6e:50:7c: 52:a6:d6:85:d4:e6:dc:9f:12:2f:69:95:f6:57:ec:dc:4e:7b: 56:31:ed:6c:d4:12:03:e6:0f:ce:22:a0:bc:af:dc:53:7f:86: 08:90:cc:b6:68:96:16:d6:f4:70:c7:fd:7f:c2:f8:d9:cf:01: 4b:27:5c:c2:58:64:79:03:91:b5:3e:80:48:56:d7:bb:39:9d: 12:04:ac:b7:cd:45:ff:4b:bb:06:3b:59:30:02:8b:6c:7d:21: 67:6f:a1:97:97:46:a4:6f:0d:82:cd:8c:7a:cb:6e:4d:ad:b4: 98:77:04:b0:aa:b8:e3:78:22:12:2f:ed:68:fc:b1:12:2d:e2: 3d:53:76:9c:2c:90:73:fe:e6:8e:6a:10:f2:56:96:a6:67:37: df:b2:66:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICctQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTI2MTM0MjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcwYjcyZi00ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxafe7ubWZ239BEY4LJGm7LcIgqmG76fU3GJevwik7laQfRpywKAw664HuCE /R4JUYfgoiFrAJ//kGHE+tqpPsG2p1rT+QvjT2pxdAU4Pw2DEHEsNJZFfVhNmkIi jILnQy6REQV1osaMvZ/hj4miOJJc1MFCPYN+8H7XuN0mRb36JDH0NXkavZg8mnW/ BjOneI6g7qcqkJjB2TsJjfR6nGVFx2WrIa9sfG1aeCkgKFpHubX1ishRZjUEZ0Pu /z0E1P3SM/bEqvKwPGZ/LRHL893lbMSRU8OkQ1i4H4CYTumDQuQRgE+6CFcUOAaR WMcK1/VlFLBR4YBMX7PInqpXMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIH4N4lU E43yDCQ19H1u3ehqCcHaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUI2QzhFRjZG QkNCMTFFRDk1NjkxNzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkNYwDQYJKoZIhvcNAQELBQADggEBAE8JQ9tBtULmWtrz r4O/MDsfMIu+9aeb3lZ+0UOQIvj5MQE5okxmWCfGM6HzAZ/IP7HHGR23MkPpFmSe 77zycLSEzVIrkhz/ZuCAtYl9T+e2pNxE5K6d1KAi4Mo0/9Gk+bukCfnyd091xG5Q fFKm1oXU5tyfEi9plfZX7NxOe1Yx7WzUEgPmD84ioLyv3FN/hgiQzLZolhbW9HDH /X/C+NnPAUsnXMJYZHkDkbU+gEhW17s5nRIErLfNRf9LuwY7WTACi2x9IWdvoZeX RqRvDYLNjHrLbk2ttJh3BLCquON4IhIv7Wj8sRIt4j1TdpwskHP+5o5qEPJWlqZn N9+yZqQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org