$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2213B416526511ECA89D3683C4F9AE02.roa File: 2213B416526511ECA89D3683C4F9AE02.roa (raw, json) Hash identifier: l8/7iADJtYZ51JO5xTrErrzcwbU0AoEcWjOVCCBc/Uw= Subject key identifier: 1B:40:DA:35:7E:02:23:6C:8F:25:98:51:B8:75:4A:42:C9:49:66:1C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7012 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2213B416526511ECA89D3683C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:50 +0000 ROA not before: Wed 10 May 2023 16:41:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147282 IP address blocks: 103.176.242.0/23 maxlen: 24 2400:3720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28690 (0x7012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc94e-b24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:a3:a6:25:c7:1c:e2:b2:8a:fa:84:4d:1b: 60:9e:6d:ff:4f:55:83:83:0f:31:5a:c1:ca:ec:66: 95:0e:32:08:47:f7:58:b0:a1:0c:ed:e1:44:29:eb: dc:36:a6:c3:c6:d6:31:3a:c0:9b:22:eb:46:0d:60: 7d:23:97:24:58:62:a9:5a:5f:76:34:9c:cc:38:62: b3:4a:55:38:d6:7a:9f:9a:2e:fd:7c:d2:74:6a:a3: 1a:4d:d4:aa:ac:bb:0c:a8:39:37:d5:e5:bc:c7:9f: 46:5e:16:b8:8f:57:ca:ca:f7:54:3c:91:68:80:bb: 4e:0a:41:ab:ad:a4:e0:89:cc:7d:ab:f8:99:d2:0f: 4a:e6:73:c8:27:c8:c7:67:d0:15:33:c6:88:d2:9d: fc:38:e4:5d:4d:af:3a:d5:c0:65:63:f3:42:21:a5: 26:16:ce:8a:1d:65:07:b5:3b:a7:38:b3:f6:25:97: 19:57:81:6b:87:7f:fb:61:a9:16:47:89:4b:24:10: a7:c0:53:7d:a8:c3:82:e8:12:c3:d0:1a:4d:97:b4: fa:f8:93:50:26:9d:77:2b:fc:af:c1:1d:52:44:ee: ff:9e:ba:9b:c0:4e:7c:0b:4d:51:37:e9:6f:f6:29: b6:56:d7:ce:88:d9:cc:6d:8a:bb:65:ac:b1:30:7c: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:40:DA:35:7E:02:23:6C:8F:25:98:51:B8:75:4A:42:C9:49:66:1C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2213B416526511ECA89D3683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.242.0/23 IPv6: 2400:3720::/32 Signature Algorithm: sha256WithRSAEncryption 04:ed:b6:f2:d9:8a:42:cc:a9:b4:57:7b:7c:4d:ed:9e:4c:64: 71:72:bf:40:8b:c9:19:db:66:fd:e8:e0:d8:64:1c:b8:12:ef: 58:03:82:c0:6a:6e:20:8e:34:0c:f3:5d:a4:47:ff:4f:26:7e: e0:f6:98:3e:31:c9:a9:74:d0:92:46:8d:da:82:41:f7:9d:0f: fe:02:d0:9d:bd:a9:8f:19:9c:51:6c:b5:59:39:5c:f4:f0:0c: 18:85:fd:bc:6b:27:37:1b:99:92:7a:c4:a2:a3:81:cf:d0:61: 1b:df:81:5b:35:68:6b:33:52:b9:d3:84:a2:48:07:18:3b:0b: b4:5a:e0:a3:43:e4:aa:d2:21:74:af:c4:67:20:c6:ef:a4:11: 28:ab:9c:d5:dc:e2:73:5b:62:ce:09:de:59:2b:fa:c7:09:64: a9:2e:90:7c:b1:55:7a:9b:8e:c9:72:86:71:56:09:df:74:e3: e8:2b:73:e7:07:0e:4e:b4:e4:17:77:b4:f4:51:89:33:14:90: 67:4b:c0:83:4d:b8:49:56:cf:f0:74:30:cb:d7:d9:2d:f4:60: 60:b7:cf:f7:4c:9c:e2:d0:81:59:b0:6c:c2:82:3e:9e:f3:60: 20:06:a4:7f:8f:5f:1d:ad:52:a0:ff:18:50:ff:4a:78:0f:0e: 72:dc:79:b3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICcBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk0ZS1iMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq+jpiXHHOKyivqETRtgnm3/T1WDgw8xWsHK7GaVDjIIR/dYsKEM7eFEKevc NqbDxtYxOsCbIutGDWB9I5ckWGKpWl92NJzMOGKzSlU41nqfmi79fNJ0aqMaTdSq rLsMqDk31eW8x59GXha4j1fKyvdUPJFogLtOCkGrraTgicx9q/iZ0g9K5nPIJ8jH Z9AVM8aI0p38OORdTa861cBlY/NCIaUmFs6KHWUHtTunOLP2JZcZV4Frh3/7YakW R4lLJBCnwFN9qMOC6BLD0BpNl7T6+JNQJp13K/yvwR1SRO7/nrqbwE58C01RN+lv 9im2VtfOiNnMbYq7ZayxMHwOMwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBtA2jV+ AiNsjyWYUbh1SkLJSWYcMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjIxM0I0MTY1 MjY1MTFFQ0E4OUQzNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsPIwDQQCAAIwBwMFACQANyAwDQYJKoZIhvcNAQELBQAD ggEBAATttvLZikLMqbRXe3xN7Z5MZHFyv0CLyRnbZv3o4NhkHLgS71gDgsBqbiCO NAzzXaRH/08mfuD2mD4xyal00JJGjdqCQfedD/4C0J29qY8ZnFFstVk5XPTwDBiF /bxrJzcbmZJ6xKKjgc/QYRvfgVs1aGszUrnThKJIBxg7C7Ra4KND5KrSIXSvxGcg xu+kESirnNXc4nNbYs4J3lkr+scJZKkukHyxVXqbjslyhnFWCd904+grc+cHDk60 5Bd3tPRRiTMUkGdLwINNuElWz/B0MMvX2S30YGC3z/dMnOLQgVmwbMKCPp7zYCAG pH+PXx2tUqD/GFD/SngPDnLcebM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org