$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21FBB070587911EEBCB2910CC4F9AE02.roa File: 21FBB070587911EEBCB2910CC4F9AE02.roa (raw, json) Hash identifier: 2/ORIRlYg3FakQEBc8OQjXzrVlMMmDRKwOYFwgAn/bw= Subject key identifier: 5B:8E:7D:11:15:E7:4F:92:28:AC:75:7F:BF:A9:7E:6E:5D:54:7F:0D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A88 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21FBB070587911EEBCB2910CC4F9AE02.roa Signing time: Thu 21 Sep 2023 12:19:38 +0000 ROA not before: Thu 21 Sep 2023 12:19:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132751 IP address blocks: 103.179.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31368 (0x7a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 21 12:19:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=650c34da-fd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:d6:6d:3e:c6:7b:b8:51:ea:fb:38:b2:dd: a4:40:98:21:73:b1:71:12:35:59:d4:85:86:1b:59: c9:4c:58:3c:5b:80:48:3b:95:2f:86:05:e0:85:7e: 54:04:7f:c2:00:ab:de:d2:86:18:a8:b4:26:d5:57: 8f:df:37:e6:25:d9:2c:e3:b4:a0:98:94:1d:c5:b2: 16:ba:e9:db:38:b6:68:01:c3:9a:42:0b:bd:79:64: 69:5d:c5:0a:af:0b:69:99:72:5f:16:1d:7a:34:31: 34:59:d3:f3:54:20:ba:b4:dc:fd:0b:20:d4:2e:37: 68:19:c0:42:c1:d7:2c:43:a5:90:d0:f9:c2:68:1c: 93:aa:9c:f9:94:88:fa:4c:56:e0:66:6c:5c:9c:f9: 83:91:7c:1f:e7:b4:26:39:0a:9e:ee:f6:9f:33:25: b9:ef:10:fd:20:97:06:d2:85:80:c8:95:82:47:aa: 6d:99:37:4a:f8:8a:87:a3:b7:e7:68:ed:4f:51:22: b8:19:4c:8f:d7:d7:96:65:95:89:05:2a:2b:7d:89: 95:c0:88:0e:b6:ff:99:13:89:bf:fe:ec:db:69:a3: 55:73:58:6f:b0:05:f1:40:f6:ac:86:e7:9e:e8:98: 24:5d:da:2b:c6:95:76:91:40:7e:e0:a7:dc:d6:78: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:7D:11:15:E7:4F:92:28:AC:75:7F:BF:A9:7E:6E:5D:54:7F:0D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21FBB070587911EEBCB2910CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:66:34:33:7d:9e:8e:35:dd:f2:fb:bc:3c:4a:6c:4f:8d:24: cc:96:c1:5c:24:02:ce:fd:08:d0:a1:db:37:19:e7:02:8e:71: 1b:50:e1:55:ad:75:c9:23:4e:45:34:93:8e:74:7b:1d:33:65: f5:02:87:73:d3:63:5e:20:ef:73:b0:8c:13:78:2e:ec:d0:00: 24:f2:d4:70:7f:f5:52:28:ce:bf:b5:c6:20:2b:72:0c:3b:76: 25:ac:eb:99:88:25:d9:cb:a2:97:3c:47:67:20:e7:fe:af:ed: 03:96:1e:35:99:5a:f5:a6:7b:0c:94:b9:a4:6c:d3:e8:f1:5c: bb:74:b2:43:29:cf:7d:d5:96:8a:13:ae:a6:4c:70:b6:77:6b: 23:c2:78:4a:09:68:3b:31:05:76:3c:3c:66:57:54:87:58:24: a3:79:92:8f:75:2a:9f:f6:5c:32:40:cd:d9:3c:92:95:e5:17: ff:ad:89:9b:53:53:c6:b8:55:11:d9:01:37:55:b0:cf:70:42: 39:21:d2:9c:ca:fd:39:c2:af:22:02:42:13:5f:9d:74:ae:88: 0e:3c:62:9b:5e:87:ae:e8:7c:cc:9a:b0:7a:e8:56:55:7f:da: 64:3d:58:58:e1:22:61:07:1d:10:11:30:ae:24:9f:ad:85:4d: b7:5d:c7:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICeogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTIxMTIxOTM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBjMzRkYS1mZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlvWbT7Ge7hR6vs4st2kQJghc7FxEjVZ1IWGG1nJTFg8W4BIO5UvhgXghX5U BH/CAKve0oYYqLQm1VeP3zfmJdks47SgmJQdxbIWuunbOLZoAcOaQgu9eWRpXcUK rwtpmXJfFh16NDE0WdPzVCC6tNz9CyDULjdoGcBCwdcsQ6WQ0PnCaByTqpz5lIj6 TFbgZmxcnPmDkXwf57QmOQqe7vafMyW57xD9IJcG0oWAyJWCR6ptmTdK+IqHo7fn aO1PUSK4GUyP19eWZZWJBSorfYmVwIgOtv+ZE4m//uzbaaNVc1hvsAXxQPashuee 6JgkXdorxpV2kUB+4Kfc1niHewIDAQABo4IClTCCApEwHQYDVR0OBBYEFFuOfREV 50+SKKx1f7+pfm5dVH8NMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjFGQkIwNzA1 ODc5MTFFRUJDQjI5MTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABns+IwDQYJKoZIhvcNAQELBQADggEBAA5mNDN9no413fL7 vDxKbE+NJMyWwVwkAs79CNCh2zcZ5wKOcRtQ4VWtdckjTkU0k450ex0zZfUCh3PT Y14g73OwjBN4LuzQACTy1HB/9VIozr+1xiArcgw7diWs65mIJdnLopc8R2cg5/6v 7QOWHjWZWvWmewyUuaRs0+jxXLt0skMpz33VlooTrqZMcLZ3ayPCeEoJaDsxBXY8 PGZXVIdYJKN5ko91Kp/2XDJAzdk8kpXlF/+tiZtTU8a4VRHZATdVsM9wQjkh0pzK /TnCryICQhNfnXSuiA48Ypteh67ofMyasHroVlV/2mQ9WFjhImEHHRARMK4kn62F Tbddxw0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org