$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BF3D2D22FCA11EBBF03C422C4F9AE02.roa File: 1BF3D2D22FCA11EBBF03C422C4F9AE02.roa (raw, json) Hash identifier: WlVsZGHmgOcncRswkbQarTTCOM4t+C9iYEOsD0WQ8h4= Subject key identifier: 06:87:00:65:48:4F:EB:C6:59:7F:A9:4B:D7:1D:2B:33:2D:8C:D4:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E8B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BF3D2D22FCA11EBBF03C422C4F9AE02.roa Signing time: Wed 10 May 2023 16:34:33 +0000 ROA not before: Wed 10 May 2023 16:34:33 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141308 IP address blocks: 103.158.44.0/23 maxlen: 24 103.179.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28299 (0x6e8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:33 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc799-9e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:f1:80:14:ea:8c:7e:f1:11:26:f2:ec:e4: f8:bc:40:99:0e:38:4f:e3:3d:38:fb:fb:2a:43:46: ba:23:a0:2b:ac:77:c6:80:51:92:6e:64:b8:74:b6: 48:6e:9d:eb:5d:09:0e:2c:f8:2c:8d:d6:9f:ee:0e: 1a:97:14:f3:3d:3d:eb:f3:8c:53:0b:30:7d:99:9a: f2:d2:50:4d:67:81:b4:ed:27:ea:0d:fa:80:c3:36: 96:bd:6b:1e:04:ec:77:00:3c:7c:20:17:fd:ac:f9: 51:55:8b:c0:7e:0a:d2:56:34:3e:46:e9:cc:ed:f0: 40:8c:3c:e2:80:f3:0e:8c:1c:0a:f1:91:b5:11:a3: 2d:10:ef:39:8e:da:47:51:e1:67:04:d4:7e:62:f8: dc:3e:2a:5d:26:3a:9b:29:1c:40:92:6a:29:50:ab: 28:89:89:28:c0:48:9b:2b:b8:d0:43:5c:4a:92:91: 19:7c:d1:ed:1c:88:8a:3b:08:0e:d9:95:be:f7:10: 76:58:94:1d:42:cc:f3:81:65:16:1c:30:97:57:51: 4e:52:43:be:ff:ab:d4:1c:27:2a:47:e9:38:6d:f6: 47:62:11:44:b8:f1:c5:9a:4e:04:fc:2a:f2:db:8b: 04:87:08:13:ad:48:bf:da:e7:a0:07:01:88:2f:a1: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:87:00:65:48:4F:EB:C6:59:7F:A9:4B:D7:1D:2B:33:2D:8C:D4:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BF3D2D22FCA11EBBF03C422C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.44.0/23 103.179.228.0/23 Signature Algorithm: sha256WithRSAEncryption 15:14:0f:3d:a8:3f:8f:94:27:9d:ab:3e:2f:84:90:48:ab:c3: ff:ef:99:3b:1e:95:a3:35:18:b6:25:3e:15:2a:86:60:7a:53: f2:53:f3:88:95:71:db:94:2d:9a:22:a6:7a:4e:ae:c8:16:0e: 77:13:07:6d:b7:da:63:80:f9:f2:60:61:58:cc:70:31:5f:e4: 38:ba:92:69:f2:63:64:ee:1d:61:45:77:0e:c5:a6:a4:95:c8: 81:24:8e:73:ed:29:9b:15:5b:4f:03:4e:95:92:13:56:e6:92: 22:50:1f:a4:43:77:25:65:a7:a7:ef:f3:91:5d:96:34:0b:1e: ad:be:cd:44:4f:33:c0:ea:57:d9:24:f4:bd:99:8f:8f:4d:27: 3e:0f:ed:76:83:71:08:48:d8:79:3e:37:22:be:e4:95:b0:bb: fc:b8:98:91:7c:c4:95:ac:b8:3a:ff:81:c8:61:46:22:1a:37: 62:17:90:e5:e5:d5:06:c4:b3:73:fc:ab:d1:ad:67:df:81:e3: 3c:08:75:f2:ab:24:6d:92:f5:58:07:9e:9a:8c:9e:46:a4:ba: 54:d9:08:b8:18:d0:9a:29:33:75:fa:91:ed:0a:0e:3e:0d:94: ce:49:5a:8b:2b:ac:60:c8:88:f8:c2:29:db:f0:fe:d7:35:c0: 86:3f:79:d6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICboswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc5OS05ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuHxgBTqjH7xESby7OT4vECZDjhP4z04+/sqQ0a6I6ArrHfGgFGSbmS4dLZI bp3rXQkOLPgsjdaf7g4alxTzPT3r84xTCzB9mZry0lBNZ4G07SfqDfqAwzaWvWse BOx3ADx8IBf9rPlRVYvAfgrSVjQ+RunM7fBAjDzigPMOjBwK8ZG1EaMtEO85jtpH UeFnBNR+YvjcPipdJjqbKRxAkmopUKsoiYkowEibK7jQQ1xKkpEZfNHtHIiKOwgO 2ZW+9xB2WJQdQszzgWUWHDCXV1FOUkO+/6vUHCcqR+k4bfZHYhFEuPHFmk4E/Cry 24sEhwgTrUi/2uegBwGIL6HbfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAaHAGVI T+vGWX+pS9cdKzMtjNRqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUJGM0QyRDIy RkNBMTFFQkJGMDNDNDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnniwDBAFns+QwDQYJKoZIhvcNAQELBQADggEBABUUDz2o P4+UJ52rPi+EkEirw//vmTselaM1GLYlPhUqhmB6U/JT84iVcduULZoipnpOrsgW DncTB2232mOA+fJgYVjMcDFf5Di6kmnyY2TuHWFFdw7FpqSVyIEkjnPtKZsVW08D TpWSE1bmkiJQH6RDdyVlp6fv85FdljQLHq2+zURPM8DqV9kk9L2Zj49NJz4P7XaD cQhI2Hk+NyK+5JWwu/y4mJF8xJWsuDr/gchhRiIaN2IXkOXl1QbEs3P8q9GtZ9+B 4zwIdfKrJG2S9VgHnpqMnkakulTZCLgY0JopM3X6ke0KDj4NlM5JWosrrGDIiPjC Kdvw/tc1wIY/edY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org