$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22BC0F504BC311EDA997EF19C4F9AE02.roa File: 22BC0F504BC311EDA997EF19C4F9AE02.roa (raw, json) Hash identifier: kqmGjcyfGfibwU5F4alEJ8fgJZ1AyDSkevnbrJx7JAk= Subject key identifier: DD:DA:90:10:1E:0A:00:F8:15:0F:F1:6B:3C:BC:16:01:31:2E:CC:8B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70EE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22BC0F504BC311EDA997EF19C4F9AE02.roa Signing time: Wed 10 May 2023 16:45:52 +0000 ROA not before: Wed 10 May 2023 16:45:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150095 IP address blocks: 103.68.26.0/24 maxlen: 24 2400:b2e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28910 (0x70ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:45:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca3f-29f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9e:a8:0a:17:54:d5:dd:a7:44:b3:24:32:16: ac:b1:a4:f9:38:04:01:36:70:6c:6f:54:49:27:af: 3b:46:9a:ec:69:19:ec:24:d4:69:74:85:46:cc:49: 36:73:3a:f9:35:79:12:7f:1a:8c:d8:8c:82:13:67: 43:df:75:7c:26:4f:30:4f:14:6f:0c:6d:bd:57:ed: 0e:bb:61:72:67:ba:74:8a:6a:1b:63:03:c5:ff:46: 3f:d3:6f:0e:ef:5b:53:df:b2:b3:c3:0f:77:21:04: be:d6:16:ba:c9:bc:4e:56:d1:bf:e6:3d:f0:53:08: 1d:53:e4:34:12:11:f2:27:ba:2e:fe:db:0e:82:9c: 4c:4f:2b:36:b9:20:62:95:04:98:ae:3f:f6:74:50: e1:ee:f6:41:e1:5a:c2:4b:18:65:71:3d:bc:d0:a8: fe:76:06:ca:71:48:53:70:5d:12:fb:cc:81:fe:96: 7f:f3:12:69:28:e0:e6:f6:b9:c4:94:f8:8e:d5:4d: 6b:72:fb:a8:e8:51:aa:30:09:11:8b:36:b9:f8:d0: af:f1:51:a3:b5:aa:16:47:4a:73:62:36:10:61:d6: e1:5c:a1:ad:13:91:14:f1:c1:41:bd:d1:a7:8a:bf: a2:ab:98:c2:45:35:46:13:9f:79:f5:7c:db:5f:b7: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:90:10:1E:0A:00:F8:15:0F:F1:6B:3C:BC:16:01:31:2E:CC:8B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/22BC0F504BC311EDA997EF19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.26.0/24 IPv6: 2400:b2e0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:cf:69:68:be:e1:93:43:70:e2:fb:8d:20:b2:6e:98:78:bc: 80:12:35:3e:25:4b:6d:89:50:f0:36:ec:84:1f:9a:7f:f2:d0: 23:b7:25:44:d3:41:3b:72:f1:a2:e1:d4:2c:82:72:56:6c:8b: c2:6f:25:be:85:38:28:0b:0d:92:d6:af:60:15:1e:bd:0d:24: fc:1b:f0:81:43:9e:23:80:11:54:21:e8:38:0e:8a:50:d3:03: 10:44:a0:d1:72:d3:2b:a1:9d:ae:c5:9d:fb:52:35:dd:e4:15: 45:eb:47:b4:7e:89:d5:28:f4:a6:e9:2f:80:6d:27:10:88:2d: 60:2f:a1:91:88:03:48:2c:2f:63:91:d1:0d:b2:c3:6f:24:bc: 3f:36:5a:1e:4f:68:eb:2d:49:2c:3b:77:85:bf:0f:22:36:84: 7d:8a:00:e9:25:80:a9:39:ae:73:45:2a:a9:84:e0:aa:17:21: b8:4e:cd:23:94:a3:96:e1:89:57:76:70:1e:5d:66:33:6e:d9: c0:1c:9d:92:f3:d7:1a:f7:51:ea:54:3a:6c:bf:63:17:12:ec: ae:dd:fb:de:bb:04:e0:51:96:b3:ed:a3:f4:ef:74:53:a2:ef: a3:0f:cf:e3:3a:e5:1f:5a:9d:bf:aa:de:dd:c3:8c:e5:03:2e: ab:de:f2:51 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICcO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2EzZi0yOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8J6oChdU1d2nRLMkMhassaT5OAQBNnBsb1RJJ687RprsaRnsJNRpdIVGzEk2 czr5NXkSfxqM2IyCE2dD33V8Jk8wTxRvDG29V+0Ou2FyZ7p0imobYwPF/0Y/028O 71tT37Kzww93IQS+1ha6ybxOVtG/5j3wUwgdU+Q0EhHyJ7ou/tsOgpxMTys2uSBi lQSYrj/2dFDh7vZB4VrCSxhlcT280Kj+dgbKcUhTcF0S+8yB/pZ/8xJpKODm9rnE lPiO1U1rcvuo6FGqMAkRiza5+NCv8VGjtaoWR0pzYjYQYdbhXKGtE5EU8cFBvdGn ir+iq5jCRTVGE5959XzbX7d1mwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFN3akBAe CgD4FQ/xazy8FgExLsyLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjJCQzBGNTA0 QkMzMTFFREE5OTdFRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnRBowDQQCAAIwBwMFACQAsuAwDQYJKoZIhvcNAQELBQAD ggEBAIvPaWi+4ZNDcOL7jSCybph4vIASNT4lS22JUPA27IQfmn/y0CO3JUTTQTty 8aLh1CyCclZsi8JvJb6FOCgLDZLWr2AVHr0NJPwb8IFDniOAEVQh6DgOilDTAxBE oNFy0yuhna7FnftSNd3kFUXrR7R+idUo9KbpL4BtJxCILWAvoZGIA0gsL2OR0Q2y w28kvD82Wh5PaOstSSw7d4W/DyI2hH2KAOklgKk5rnNFKqmE4KoXIbhOzSOUo5bh iVd2cB5dZjNu2cAcnZLz1xr3UepUOmy/YxcS7K7d+967BOBRlrPto/TvdFOi76MP z+M65R9anb+q3t3DjOUDLqve8lE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org