$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/220F360CE12D11EA9F4A9A3DC4F9AE02.roa File: 220F360CE12D11EA9F4A9A3DC4F9AE02.roa (raw, json) Hash identifier: /BTKDbD7VXLcrOesC6D5EidrzGeNF2uYlXOwmu+3AKE= Subject key identifier: 7D:33:EA:3A:7E:0C:5D:FD:9B:E0:6B:AA:67:FC:BE:74:4B:D5:40:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CD7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/220F360CE12D11EA9F4A9A3DC4F9AE02.roa Signing time: Wed 10 May 2023 16:26:29 +0000 ROA not before: Wed 10 May 2023 16:26:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137106 IP address blocks: 103.108.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27863 (0x6cd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:26:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5b5-cdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:43:19:c7:20:cd:b3:99:10:89:0b:97:11: c1:97:72:a9:1f:fb:5e:84:cd:0c:ea:d1:1c:6c:22: 5c:e9:77:87:ea:29:a9:47:7a:1e:ea:0a:14:55:c8: db:e0:55:90:10:98:58:2a:f2:ef:25:04:ea:75:be: 2d:a1:7c:9e:ac:ee:38:c6:f8:63:6a:14:62:35:1a: 58:78:9c:21:0d:46:a5:35:cb:c4:4d:e9:0b:f3:f1: ec:b3:82:fb:3d:3d:cb:36:04:96:0d:c2:a9:48:b3: ed:b9:a6:7a:ab:66:81:74:c6:17:88:5a:12:9a:f4: b5:01:8d:0d:8c:d8:cd:eb:7b:c8:11:6b:59:ba:5d: b6:36:1c:0b:e6:94:44:a9:36:e8:ee:79:a3:42:69: bb:37:1d:7d:a3:35:49:e8:9a:1d:aa:70:86:77:09: 7b:5b:cb:db:0b:ab:6a:d3:36:c6:ed:59:fd:1c:2e: 17:a8:98:1d:37:b5:24:90:bc:0f:3c:82:31:8a:11: c7:70:1c:11:64:29:93:5b:8f:f1:7a:28:83:04:5e: 69:1d:18:98:4f:8c:22:4c:66:94:fa:d3:41:b4:5f: 5c:f1:82:db:5f:9c:70:db:d4:0f:c4:2a:d5:0c:26: f8:bb:21:61:ca:d2:7d:e4:8c:13:a8:9b:87:59:3f: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:EA:3A:7E:0C:5D:FD:9B:E0:6B:AA:67:FC:BE:74:4B:D5:40:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/220F360CE12D11EA9F4A9A3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.204.0/22 Signature Algorithm: sha256WithRSAEncryption 81:19:1c:eb:ab:db:e7:bd:ff:bf:f0:a6:d4:6d:b2:70:2d:2c: 2b:29:51:1a:ca:7d:9d:9d:c6:56:43:0f:73:a3:27:3e:aa:ae: ab:6f:05:a6:92:b2:00:5e:10:57:c4:ba:8c:95:03:5a:11:6c: 09:82:63:31:89:90:00:05:fe:1e:70:10:30:cb:eb:fa:ec:80: 7b:24:22:77:3e:97:61:fb:9f:57:25:3d:4a:90:9e:8d:8d:cf: 20:69:f2:21:9b:62:bb:fc:b4:ef:8d:dc:d0:8a:17:cb:10:f1: 08:72:7a:2e:26:60:aa:59:39:c0:a2:44:65:44:a6:db:9c:4b: 11:26:b9:bf:a3:b1:01:bf:16:6a:e1:d1:92:48:88:a1:91:dd: 2e:3c:5e:b1:b5:4b:cb:ab:9f:42:22:91:fb:44:00:3e:82:92: b1:67:6a:d3:56:5d:5a:55:b7:35:b7:48:94:8c:17:0c:8f:0d: 4d:a0:2f:60:92:75:8b:b1:83:11:ab:33:db:60:2d:1f:40:44: 94:b8:9b:7d:68:43:82:0f:51:ab:a5:24:6e:ac:10:59:3c:e2: 6f:9b:2a:09:02:a9:9b:9c:71:41:95:f4:e4:91:81:c2:2a:4d: 3a:c8:60:ed:7c:42:58:3e:88:f5:a2:63:8b:a4:ed:82:16:a9: a9:74:a0:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNjI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzViNS1jZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYZDGccgzbOZEIkLlxHBl3KpH/tehM0M6tEcbCJc6XeH6impR3oe6goUVcjb 4FWQEJhYKvLvJQTqdb4toXyerO44xvhjahRiNRpYeJwhDUalNcvETekL8/Hss4L7 PT3LNgSWDcKpSLPtuaZ6q2aBdMYXiFoSmvS1AY0NjNjN63vIEWtZul22NhwL5pRE qTbo7nmjQmm7Nx19ozVJ6JodqnCGdwl7W8vbC6tq0zbG7Vn9HC4XqJgdN7UkkLwP PIIxihHHcBwRZCmTW4/xeiiDBF5pHRiYT4wiTGaU+tNBtF9c8YLbX5xw29QPxCrV DCb4uyFhytJ95IwTqJuHWT/NdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH0z6jp+ DF39m+Brqmf8vnRL1UC7MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjIwRjM2MENF MTJEMTFFQTlGNEE5QTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbMwwDQYJKoZIhvcNAQELBQADggEBAIEZHOur2+e9/7/w ptRtsnAtLCspURrKfZ2dxlZDD3OjJz6qrqtvBaaSsgBeEFfEuoyVA1oRbAmCYzGJ kAAF/h5wEDDL6/rsgHskInc+l2H7n1clPUqQno2NzyBp8iGbYrv8tO+N3NCKF8sQ 8Qhyei4mYKpZOcCiRGVEptucSxEmub+jsQG/Fmrh0ZJIiKGR3S48XrG1S8urn0Ii kftEAD6CkrFnatNWXVpVtzW3SJSMFwyPDU2gL2CSdYuxgxGrM9tgLR9ARJS4m31o Q4IPUaulJG6sEFk84m+bKgkCqZuccUGV9OSRgcIqTTrIYO18Qlg+iPWiY4uk7YIW qal0oLM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org