$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/212E02F20A2E11EB9F9E9B0BC4F9AE02.roa File: 212E02F20A2E11EB9F9E9B0BC4F9AE02.roa (raw, json) Hash identifier: tpvxhF4NKOorObNledmw2WepfXTTf2jtWt2h3/FJ17M= Subject key identifier: EB:BC:90:12:EF:00:A9:1E:0F:FC:EF:E2:8D:09:8F:25:69:A1:99:E2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B41 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/212E02F20A2E11EB9F9E9B0BC4F9AE02.roa Signing time: Wed 10 May 2023 16:18:47 +0000 ROA not before: Wed 10 May 2023 16:18:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134854 IP address blocks: 103.205.152.0/22 maxlen: 24 2404:1580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27457 (0x6b41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3e6-f53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:ec:3b:bc:78:db:af:13:12:ad:eb:eb:02: a5:58:f7:03:57:40:a5:95:db:67:8e:2e:07:91:30: 48:5d:fe:0f:72:90:be:f3:a1:e2:d9:96:a2:95:5a: 82:ab:d2:e8:a9:f3:1f:a9:1f:ac:bd:ea:28:92:d1: fa:cd:3a:27:9b:dd:1b:22:de:6d:51:c0:f1:23:b2: d6:8e:f6:6f:a5:95:13:fa:f6:f5:35:41:6f:6e:49: fb:12:e6:27:db:f0:86:6d:35:fe:cd:76:4e:1a:88: 69:4d:65:69:3b:8c:45:7b:ba:de:42:37:47:ed:e7: fe:0f:88:1c:03:ef:fd:b0:be:f7:6e:8c:fb:6f:58: 6f:5c:c8:08:43:8d:a9:97:2e:d0:f6:36:d4:60:64: e3:f7:0f:59:b4:9c:bf:4d:cc:41:7c:35:04:52:86: 2a:a3:63:cd:8a:ee:26:f8:2d:73:d7:e2:0c:98:84: 27:dc:92:21:d8:9a:d0:d8:7e:d7:0b:4b:ca:4e:89: 10:f2:69:04:8d:32:e6:12:ed:cd:66:6b:ba:e2:74: 22:4c:e8:97:12:79:86:5f:e3:10:d3:c8:e8:dc:1f: 7c:57:0d:ed:00:35:13:4f:da:f9:a1:42:f4:c7:0b: 4a:77:ba:14:1b:aa:00:7a:cc:b6:f2:6b:03:4d:63: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:90:12:EF:00:A9:1E:0F:FC:EF:E2:8D:09:8F:25:69:A1:99:E2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/212E02F20A2E11EB9F9E9B0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.152.0/22 IPv6: 2404:1580::/32 Signature Algorithm: sha256WithRSAEncryption 0a:b0:d5:8b:8f:1c:c1:0a:c9:6c:3d:28:f3:26:94:d6:c0:08: b0:36:d4:13:a9:d4:77:4d:28:4f:95:cf:96:38:25:fb:84:16: 8a:2c:e8:b2:33:6d:26:ee:de:b6:8d:dd:e5:52:96:dd:9e:08: 73:7c:ac:cb:bc:19:3f:8a:65:d8:33:50:dd:b5:38:6c:f4:53: 67:e2:ea:fc:f3:8b:64:d6:cf:92:f9:81:3f:ce:aa:11:ba:2c: c5:ea:ee:ad:d8:4d:07:02:ea:5c:ac:5a:86:c0:df:e0:1e:9e: 7b:4e:4a:02:37:77:ec:96:89:e8:7b:6c:21:14:72:53:a6:af: 1b:de:67:46:c6:0e:d8:5e:73:79:eb:7b:f3:bb:95:f6:c8:46: c1:1c:76:37:a6:33:78:05:37:ad:a5:94:61:6b:2f:cb:8c:87: 41:52:dc:a0:a7:89:8f:66:6c:d7:b3:6e:f7:77:84:c5:8a:b7: ef:f9:84:e6:a1:7a:c4:9f:82:da:f1:63:6f:34:2d:df:af:9a: 2d:e3:3e:bc:14:7e:f8:98:7c:e3:48:40:bd:85:d0:04:fa:8b: a8:34:cd:a4:7b:78:af:02:ea:f6:2a:29:55:12:77:e0:24:4d: 4b:de:a3:1e:7c:c9:f0:e6:78:79:f3:92:87:9a:3e:99:04:2d: 13:33:c7:2c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICa0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNlNi1mNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAjsO7x4268TEq3r6wKlWPcDV0Clldtnji4HkTBIXf4PcpC+86Hi2ZailVqC q9LoqfMfqR+sveooktH6zTonm90bIt5tUcDxI7LWjvZvpZUT+vb1NUFvbkn7EuYn 2/CGbTX+zXZOGohpTWVpO4xFe7reQjdH7ef+D4gcA+/9sL73boz7b1hvXMgIQ42p ly7Q9jbUYGTj9w9ZtJy/TcxBfDUEUoYqo2PNiu4m+C1z1+IMmIQn3JIh2JrQ2H7X C0vKTokQ8mkEjTLmEu3NZmu64nQiTOiXEnmGX+MQ08jo3B98Vw3tADUTT9r5oUL0 xwtKd7oUG6oAesy28msDTWOrFQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOu8kBLv AKkeD/zv4o0JjyVpoZniMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjEyRTAyRjIw QTJFMTFFQjlGOUU5QjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnzZgwDQQCAAIwBwMFACQEFYAwDQYJKoZIhvcNAQELBQAD ggEBAAqw1YuPHMEKyWw9KPMmlNbACLA21BOp1HdNKE+Vz5Y4JfuEFoos6LIzbSbu 3raN3eVSlt2eCHN8rMu8GT+KZdgzUN21OGz0U2fi6vzzi2TWz5L5gT/OqhG6LMXq 7q3YTQcC6lysWobA3+AenntOSgI3d+yWieh7bCEUclOmrxveZ0bGDthec3nre/O7 lfbIRsEcdjemM3gFN62llGFrL8uMh0FS3KCniY9mbNezbvd3hMWKt+/5hOahesSf gtrxY280Ld+vmi3jPrwUfviYfONIQL2F0AT6i6g0zaR7eK8C6vYqKVUSd+AkTUve ox58yfDmeHnzkoeaPpkELRMzxyw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org