$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa File: 1E04076471EA11ECB3503078C4F9AE02.roa (raw, json) Hash identifier: Nkj3rq+Zrz7M0X6iBRp+DGv32UhusQV5HAnryfprmmQ= Subject key identifier: 53:C4:D4:89:3F:15:9A:26:18:8D:58:1C:6E:15:62:26:B8:0A:B5:75 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A1C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:08 +0000 ROA not before: Wed 10 May 2023 16:13:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132785 IP address blocks: 45.114.148.0/22 maxlen: 24 103.27.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27164 (0x6a1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc294-dbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:fa:98:06:57:6b:41:a9:b4:c8:5a:1e:95: fd:09:47:ec:0c:19:6f:bc:72:3f:da:fb:11:20:94: 50:46:07:35:7c:74:e7:ef:12:9d:dd:f5:24:2e:53: 46:b3:fd:fd:df:82:39:c6:19:44:27:bc:5b:80:87: 25:c5:8a:c6:05:53:ec:7f:ee:ae:99:b1:d6:84:f2: cb:57:e2:b5:7d:25:bc:4a:04:e5:54:a5:6a:74:8b: 02:30:5d:10:8e:6a:8c:e5:fa:be:12:cf:37:99:3c: ac:c5:0c:3a:a7:58:d5:4b:4a:c8:c6:9a:bf:7d:3c: a2:80:c3:5b:b4:f1:2f:63:98:61:e7:b1:06:52:50: 7b:1f:38:3b:0f:fa:29:3d:98:9f:6c:f4:51:88:54: 11:00:ad:2b:8c:ca:b1:37:05:6a:c3:46:7a:f8:48: eb:e5:a6:f0:31:47:7d:d2:dd:83:77:83:e1:8c:02: 82:ee:83:d7:13:08:8b:aa:6b:24:52:79:67:0d:2c: d8:c2:fb:1b:27:2f:72:db:65:21:8d:56:46:48:c6: cf:4a:8e:b4:1a:7b:fb:53:38:33:9e:47:d2:c8:8d: bc:d6:6b:8c:59:b0:43:e1:d1:ba:1c:89:16:24:2c: 2f:fb:82:b6:a6:e3:5a:85:31:d5:b9:9c:96:7c:e1: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:D4:89:3F:15:9A:26:18:8D:58:1C:6E:15:62:26:B8:0A:B5:75 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.148.0/22 103.27.164.0/22 Signature Algorithm: sha256WithRSAEncryption 90:6b:ee:54:a1:cb:9a:1e:05:8f:b1:24:d7:43:7b:80:6a:cb: 6f:c4:eb:27:b1:ec:8f:11:e7:4f:9c:75:42:a9:d5:92:32:fa: a4:b0:25:67:ec:c1:56:86:15:93:78:55:a3:36:b3:24:96:ac: 8d:50:43:d2:4e:f7:46:1c:f9:ce:af:8d:2a:ea:0c:36:81:7d: e1:80:0c:2b:bd:cd:4c:7e:97:c2:ba:4c:a3:16:ed:05:17:0c: c5:4d:0e:e3:c5:92:7f:f0:17:3a:28:83:8c:57:12:ad:36:78: 67:4d:9b:59:91:14:7a:67:ee:d4:65:f0:3a:65:e6:f4:35:2d: 5e:9f:5a:d3:b9:e2:51:3a:a9:ff:80:be:8a:10:dd:28:7a:e4: a5:ad:c0:94:16:50:4d:93:43:08:d0:5c:6d:87:a0:bd:f9:0f: 01:a8:d3:5d:5c:46:a3:ce:4d:a4:49:d4:96:eb:77:2f:e3:bf: 07:0a:45:f3:71:be:96:cd:7d:92:c9:cd:0a:7c:a8:da:3c:7e: 46:61:49:97:fa:76:87:8a:ba:c0:e3:9e:ad:d4:52:17:bd:c4: 43:82:39:02:1e:b7:0b:88:95:a5:74:bb:3b:89:46:65:c9:ed: 7d:f2:c4:b7:bb:16:d5:71:aa:aa:c1:e5:f3:48:7a:c6:43:50: 58:09:51:e3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICahwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI5NC1kYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2r6mAZXa0GptMhaHpX9CUfsDBlvvHI/2vsRIJRQRgc1fHTn7xKd3fUkLlNG s/3934I5xhlEJ7xbgIclxYrGBVPsf+6umbHWhPLLV+K1fSW8SgTlVKVqdIsCMF0Q jmqM5fq+Es83mTysxQw6p1jVS0rIxpq/fTyigMNbtPEvY5hh57EGUlB7Hzg7D/op PZifbPRRiFQRAK0rjMqxNwVqw0Z6+Ejr5abwMUd90t2Dd4PhjAKC7oPXEwiLqmsk UnlnDSzYwvsbJy9y22UhjVZGSMbPSo60Gnv7UzgznkfSyI281muMWbBD4dG6HIkW JCwv+4K2puNahTHVuZyWfOFmAQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFPE1Ik/ FZomGI1YHG4VYia4CrV1MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUUwNDA3NjQ3 MUVBMTFFQ0IzNTAzMDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItcpQDBAJnG6QwDQYJKoZIhvcNAQELBQADggEBAJBr7lSh y5oeBY+xJNdDe4Bqy2/E6yex7I8R50+cdUKp1ZIy+qSwJWfswVaGFZN4VaM2sySW rI1QQ9JO90Yc+c6vjSrqDDaBfeGADCu9zUx+l8K6TKMW7QUXDMVNDuPFkn/wFzoo g4xXEq02eGdNm1mRFHpn7tRl8Dpl5vQ1LV6fWtO54lE6qf+AvooQ3Sh65KWtwJQW UE2TQwjQXG2HoL35DwGo011cRqPOTaRJ1Jbrdy/jvwcKRfNxvpbNfZLJzQp8qNo8 fkZhSZf6doeKusDjnq3UUhe9xEOCOQIetwuIlaV0uzuJRmXJ7X3yxLe7FtVxqqrB 5fNIesZDUFgJUeM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org