$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2048B68EBDCB11EA8AB8267EC4F9AE02.roa File: 2048B68EBDCB11EA8AB8267EC4F9AE02.roa (raw, json) Hash identifier: /AeAyHeRCTVlCjKBxUe5yntFS/+L2cin3x7KdRvoLvw= Subject key identifier: 21:8C:3D:DB:A4:22:EF:96:87:CB:BB:53:05:DF:FE:11:42:58:C8:B7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D08 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2048B68EBDCB11EA8AB8267EC4F9AE02.roa Signing time: Wed 10 May 2023 16:27:22 +0000 ROA not before: Wed 10 May 2023 16:27:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137172 IP address blocks: 103.112.212.0/22 maxlen: 24 103.190.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27912 (0x6d08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5e9-8b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:7e:ed:61:6c:16:bd:13:c4:c1:27:76:3a: 9d:9e:02:f5:d3:11:64:e4:37:77:4c:7a:63:b4:9f: aa:a4:29:30:91:ba:ce:22:5b:ce:4b:81:f6:ea:18: 43:29:a1:ce:90:a8:c8:02:e3:25:a3:f2:ec:41:e3: 9d:f4:46:06:cc:b6:3b:36:47:62:df:f7:0d:66:38: df:f7:f3:a8:39:01:7d:5f:db:65:a3:2c:61:43:d2: 12:6d:80:88:59:2e:18:54:a4:e7:d5:28:1a:25:a3: ab:15:7f:c7:e3:88:42:d4:d6:3d:44:56:60:27:bc: 34:aa:dd:be:06:88:8d:5a:c5:c8:65:76:a1:9d:dc: e6:44:4b:ab:c0:b5:df:8f:65:61:8b:37:47:73:bd: 1a:6f:67:d9:c9:af:63:a7:72:7b:d3:87:0f:d3:15: 34:7a:68:f6:b7:fa:74:5a:27:79:35:6e:7c:33:21: eb:46:1f:08:ff:01:3c:d8:0d:ce:bc:be:63:89:b7: ff:98:19:ac:cb:7f:cd:67:3c:e7:7c:e6:90:33:b0: 84:73:9c:25:7f:1f:44:35:c8:cb:ce:77:01:ea:8f: f6:39:28:07:e5:8b:3d:c8:d4:54:5e:93:af:41:c4: 3d:37:84:45:34:d3:29:d6:f8:91:bd:d6:28:7a:1d: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:3D:DB:A4:22:EF:96:87:CB:BB:53:05:DF:FE:11:42:58:C8:B7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2048B68EBDCB11EA8AB8267EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.212.0/22 103.190.66.0/23 Signature Algorithm: sha256WithRSAEncryption a1:8a:c1:f6:04:44:cf:3a:9e:5f:26:a5:97:35:33:86:c1:5d: 30:fc:fb:0b:27:36:b1:33:11:e9:94:1a:6c:ea:2a:3f:97:cb: 57:41:86:60:16:6b:44:53:88:24:6f:61:24:25:0c:78:f9:ab: 60:74:d8:38:96:4c:08:34:6e:84:cc:5c:f6:06:55:43:a7:bb: 9d:82:d7:b7:6f:ec:82:aa:37:1c:2d:0c:83:94:3b:9a:f7:cf: 71:d4:ce:82:4b:25:a9:77:81:11:b9:a2:ef:a2:80:b1:71:c0: 8d:d0:fa:85:82:d5:3a:48:db:bf:a3:34:9a:3e:eb:3f:20:92: e7:95:c7:e6:5a:af:db:8b:3b:18:f6:5f:f6:76:ab:90:5f:0c: da:4c:dd:51:01:89:b0:ea:20:40:d9:f6:68:6b:1c:e0:69:2d: 0e:f3:ac:16:3f:07:9a:5d:7f:d9:d0:25:19:8b:d7:c6:0b:e3: 09:40:62:98:3c:24:27:af:39:cd:48:f6:f2:f2:c4:0f:3d:39: d4:2c:0c:8a:2c:97:a3:dd:e7:15:83:b4:37:f4:ae:3e:2f:00: 63:37:17:ee:f1:04:b2:3a:c6:5f:25:bc:27:c5:4f:7a:51:b4: 35:d1:c8:50:42:c1:6b:c5:ea:bb:04:aa:09:16:f3:5f:f6:44: 98:d6:54:ac -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVlOS04YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk1+7WFsFr0TxMEndjqdngL10xFk5Dd3THpjtJ+qpCkwkbrOIlvOS4H26hhD KaHOkKjIAuMlo/LsQeOd9EYGzLY7Nkdi3/cNZjjf9/OoOQF9X9tloyxhQ9ISbYCI WS4YVKTn1SgaJaOrFX/H44hC1NY9RFZgJ7w0qt2+BoiNWsXIZXahndzmREurwLXf j2VhizdHc70ab2fZya9jp3J704cP0xU0emj2t/p0Wid5NW58MyHrRh8I/wE82A3O vL5jibf/mBmsy3/NZzznfOaQM7CEc5wlfx9ENcjLzncB6o/2OSgH5Ys9yNRUXpOv QcQ9N4RFNNMp1viRvdYoeh0AhQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCGMPduk Iu+Wh8u7UwXf/hFCWMi3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjA0OEI2OEVC RENCMTFFQThBQjgyNjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJncNQDBAFnvkIwDQYJKoZIhvcNAQELBQADggEBAKGKwfYE RM86nl8mpZc1M4bBXTD8+wsnNrEzEemUGmzqKj+Xy1dBhmAWa0RTiCRvYSQlDHj5 q2B02DiWTAg0boTMXPYGVUOnu52C17dv7IKqNxwtDIOUO5r3z3HUzoJLJal3gRG5 ou+igLFxwI3Q+oWC1TpI27+jNJo+6z8gkueVx+Zar9uLOxj2X/Z2q5BfDNpM3VEB ibDqIEDZ9mhrHOBpLQ7zrBY/B5pdf9nQJRmL18YL4wlAYpg8JCevOc1I9vLyxA89 OdQsDIosl6Pd5xWDtDf0rj4vAGM3F+7xBLI6xl8lvCfFT3pRtDXRyFBCwWvF6rsE qgkW81/2RJjWVKw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org