$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B8688B44C5511ECAD47F327C4F9AE02.roa File: 1B8688B44C5511ECAD47F327C4F9AE02.roa (raw, json) Hash identifier: miHB2r8rYAi6OXmRaVSe0B0ipNHFTLESN1CWFL/M/ns= Subject key identifier: 8A:54:44:DD:57:71:44:7D:F5:E7:50:43:76:B0:B9:D6:9C:FF:5B:09 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A6D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B8688B44C5511ECAD47F327C4F9AE02.roa Signing time: Wed 10 May 2023 16:14:43 +0000 ROA not before: Wed 10 May 2023 16:14:43 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133276 IP address blocks: 103.243.224.0/24 maxlen: 24 103.243.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27245 (0x6a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:14:43 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2f3-bbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:bf:2e:eb:cf:b4:c3:e4:10:82:c9:fe:26: cf:19:5c:ea:cc:ab:32:aa:85:5f:1e:4e:0e:85:ee: dd:1f:ec:c6:ba:2d:f5:17:b1:00:12:e5:c6:5a:c7: 89:3f:25:1f:ac:95:70:3c:f3:41:6a:da:69:cb:5d: aa:d2:f0:22:23:bf:45:e3:1e:c4:91:c3:84:25:9d: 53:d3:90:96:b0:a6:8a:b0:71:cc:11:c3:d2:22:aa: 6d:b1:19:01:7f:e4:ee:55:2b:1e:65:b5:84:99:9c: 31:3f:f8:04:32:c7:64:b2:86:43:e4:40:b5:c8:c5: a0:de:85:24:cf:ce:af:2f:df:f2:c2:76:a0:51:ef: a2:ef:bf:6f:4c:e6:ba:92:34:43:a7:d2:63:25:f9: 55:a7:4f:eb:d3:87:59:e6:28:74:a1:58:04:eb:6c: d1:61:3b:aa:ed:a9:1a:51:d0:f0:57:52:5b:a0:72: 69:a1:c8:89:13:79:75:ca:3c:47:d0:0d:88:6a:ab: 6a:de:33:32:20:a6:af:f3:81:73:47:8b:68:58:72: 32:3f:dc:64:37:f3:18:40:f0:6b:a9:6b:fc:74:c0: cb:73:53:78:fe:c4:78:be:5a:8d:c9:bb:9e:05:d2: 3b:b0:0a:24:ac:8f:70:30:bf:9f:ad:17:72:62:ff: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:44:DD:57:71:44:7D:F5:E7:50:43:76:B0:B9:D6:9C:FF:5B:09 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B8688B44C5511ECAD47F327C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.224.0/24 103.243.226.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:86:16:c4:80:4c:06:12:e5:dc:ca:a7:6f:55:7e:dc:a1:81: ec:76:09:32:18:ee:b1:61:9a:2e:c4:81:60:39:09:ea:f3:03: bd:69:61:78:6b:1d:02:32:45:b6:3f:93:67:ee:d3:fb:5b:51: 18:a2:fd:36:ed:e1:ff:50:c6:75:af:a8:7b:c8:22:15:13:95: 29:40:e2:b6:06:7a:6b:01:55:14:fa:72:8d:27:4f:c6:0a:5e: 79:17:a6:df:0a:46:8f:65:0b:2b:ce:ca:12:e0:42:cf:4c:8c: e3:e5:72:57:9d:0b:75:b6:04:e2:e0:0e:5a:00:c7:9f:ce:a6: 25:85:d2:b7:c9:d7:3d:d3:cb:20:ce:43:05:25:69:21:42:39: 45:5a:04:da:65:ba:6d:0a:41:ba:44:d5:32:ae:e9:be:48:43: b4:d4:ba:d4:21:9c:3d:d3:71:81:79:f8:c8:a5:ad:41:77:44: 33:a8:8b:1c:95:e4:89:12:58:ed:11:f3:3d:5e:4e:eb:93:39: a4:77:8c:df:db:5e:d4:49:f0:d2:b4:1b:5c:b1:52:7c:81:c8: 07:cf:b4:c4:8a:85:d7:b4:9b:a4:30:06:2e:31:43:39:15:8c: d0:bb:62:bd:73:5e:7a:67:32:2f:fa:b6:9b:4d:f9:80:74:61: 6d:d2:5f:db -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICam0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNDQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJmMy1iYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSu/LuvPtMPkEILJ/ibPGVzqzKsyqoVfHk4Ohe7dH+zGui31F7EAEuXGWseJ PyUfrJVwPPNBatppy12q0vAiI79F4x7EkcOEJZ1T05CWsKaKsHHMEcPSIqptsRkB f+TuVSseZbWEmZwxP/gEMsdksoZD5EC1yMWg3oUkz86vL9/ywnagUe+i779vTOa6 kjRDp9JjJflVp0/r04dZ5ih0oVgE62zRYTuq7akaUdDwV1JboHJpociJE3l1yjxH 0A2Iaqtq3jMyIKav84FzR4toWHIyP9xkN/MYQPBrqWv8dMDLc1N4/sR4vlqNybue BdI7sAokrI9wML+frRdyYv9nMwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIpURN1X cUR99edQQ3awudac/1sJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUI4Njg4QjQ0 QzU1MTFFQ0FENDdGMzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn8+ADBABn8+IwDQYJKoZIhvcNAQELBQADggEBAD6GFsSA TAYS5dzKp29Vftyhgex2CTIY7rFhmi7EgWA5CerzA71pYXhrHQIyRbY/k2fu0/tb URii/Tbt4f9QxnWvqHvIIhUTlSlA4rYGemsBVRT6co0nT8YKXnkXpt8KRo9lCyvO yhLgQs9MjOPlcledC3W2BOLgDloAx5/OpiWF0rfJ1z3TyyDOQwUlaSFCOUVaBNpl um0KQbpE1TKu6b5IQ7TUutQhnD3TcYF5+MilrUF3RDOoixyV5IkSWO0R8z1eTuuT OaR3jN/bXtRJ8NK0G1yxUnyByAfPtMSKhde0m6QwBi4xQzkVjNC7Yr1zXnpnMi/6 tptN+YB0YW3SX9s= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org