$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20EA4C7E02E511EBB6F9CD53C4F9AE02.roa File: 20EA4C7E02E511EBB6F9CD53C4F9AE02.roa (raw, json) Hash identifier: z4FgdSdGF8k1HZuF3JHSwTuUenQEV4M+9uXUKxD8vXI= Subject key identifier: 20:97:7A:7E:AA:DA:B6:DB:0A:69:53:03:5D:3A:AA:E4:2F:28:B6:97 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CF6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20EA4C7E02E511EBB6F9CD53C4F9AE02.roa Signing time: Wed 10 May 2023 16:27:02 +0000 ROA not before: Wed 10 May 2023 16:27:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137150 IP address blocks: 103.108.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27894 (0x6cf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5d5-bbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:78:65:11:7a:47:e1:5e:2e:be:9e:7e:3b: a9:7a:ae:f5:c9:09:1f:3a:bc:11:a1:cf:26:d1:cb: 21:a3:d6:78:16:7e:0b:93:bb:eb:bb:3f:25:93:a6: fa:87:21:30:71:85:46:a9:18:29:f8:80:8d:c4:b1: 46:64:bb:69:22:1e:e5:dc:11:77:bf:f4:2a:ca:ac: 89:43:93:b6:7e:34:55:bb:a5:c8:cd:11:55:3f:c2: c0:4b:c8:19:df:77:91:e8:ef:42:4b:10:96:74:5f: 8a:86:79:1d:4b:92:e4:0b:04:b5:fd:d6:ab:ea:62: 16:dd:2a:b4:46:f4:51:82:dc:9e:ab:9f:7c:05:65: 3d:b0:47:75:09:35:78:44:a2:94:03:ae:cf:ea:ef: 55:0c:62:d3:ab:a3:a1:ea:20:e2:10:58:93:ae:74: d9:89:c0:06:df:91:fd:ab:16:56:62:ca:94:bf:c3: 52:22:dc:53:dc:09:b8:0b:18:96:73:84:7f:00:db: 9d:6a:13:0f:77:d9:6e:17:86:8b:88:36:13:55:d3: fd:6c:37:6f:23:0c:f1:b1:15:d6:76:1e:3e:39:25: 8d:70:17:da:5a:15:a7:e5:f5:7b:07:a5:99:4e:a5: 7c:db:35:b9:93:f1:71:d8:0b:43:35:5b:f5:5d:38: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:97:7A:7E:AA:DA:B6:DB:0A:69:53:03:5D:3A:AA:E4:2F:28:B6:97 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20EA4C7E02E511EBB6F9CD53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.98.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:37:a9:4f:1b:22:a8:5d:84:3c:86:f4:3c:02:1e:5c:ba:df: df:df:9a:32:1d:5a:25:19:1e:8f:21:cf:6d:46:d0:c7:1a:7a: 66:1c:23:30:0d:2f:4e:e1:74:0f:6a:7b:0a:25:c4:3f:25:e5: 68:59:1a:b0:95:5c:47:e1:13:11:4a:2e:e2:c7:7d:0f:e2:2f: eb:99:f6:06:e7:5d:ea:d4:7a:f9:96:7a:c4:e5:57:42:0b:69: 4e:05:e6:e7:34:d4:55:98:42:2f:51:d5:1a:9b:21:64:6e:62: 51:61:45:e7:ff:c4:36:17:ad:bf:64:e9:5b:bc:43:d0:a8:91: c8:7c:3d:c9:46:29:39:f4:37:eb:ac:60:77:2b:92:fe:b6:83: 65:16:5d:fa:5a:36:26:aa:eb:8c:2a:ca:61:c1:8e:df:4e:92: 80:f1:a6:98:fa:43:3c:bd:94:4c:b3:27:46:1c:60:b3:0e:3e: 21:31:8d:8d:a9:2d:3c:f8:6e:40:53:cd:b5:72:0a:88:bf:6c: 78:f6:22:e3:51:ca:c8:a2:79:9e:99:a0:1f:ca:08:c7:eb:a9: 80:fb:15:89:c8:20:26:2b:41:ca:9d:f0:5c:3d:33:1a:97:1d: cc:6d:ca:53:ce:66:95:7d:f6:c2:55:3a:c1:ef:be:0a:c3:a5: 51:b5:7f:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVkNS1iYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzl4ZRF6R+FeLr6efjupeq71yQkfOrwRoc8m0csho9Z4Fn4Lk7vruz8lk6b6 hyEwcYVGqRgp+ICNxLFGZLtpIh7l3BF3v/QqyqyJQ5O2fjRVu6XIzRFVP8LAS8gZ 33eR6O9CSxCWdF+KhnkdS5LkCwS1/dar6mIW3Sq0RvRRgtyeq598BWU9sEd1CTV4 RKKUA67P6u9VDGLTq6Oh6iDiEFiTrnTZicAG35H9qxZWYsqUv8NSItxT3Am4CxiW c4R/ANudahMPd9luF4aLiDYTVdP9bDdvIwzxsRXWdh4+OSWNcBfaWhWn5fV7B6WZ TqV82zW5k/Fx2AtDNVv1XThvCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCCXen6q 2rbbCmlTA106quQvKLaXMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjBFQTRDN0Uw MkU1MTFFQkI2RjlDRDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbGIwDQYJKoZIhvcNAQELBQADggEBAFs3qU8bIqhdhDyG 9DwCHly639/fmjIdWiUZHo8hz21G0McaemYcIzANL07hdA9qewolxD8l5WhZGrCV XEfhExFKLuLHfQ/iL+uZ9gbnXerUevmWesTlV0ILaU4F5uc01FWYQi9R1RqbIWRu YlFhRef/xDYXrb9k6Vu8Q9Cokch8PclGKTn0N+usYHcrkv62g2UWXfpaNiaq64wq ymHBjt9OkoDxppj6Qzy9lEyzJ0YcYLMOPiExjY2pLTz4bkBTzbVyCoi/bHj2IuNR ysiieZ6ZoB/KCMfrqYD7FYnIICYrQcqd8Fw9MxqXHcxtylPOZpV99sJVOsHvvgrD pVG1fx4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org