$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23B576C8931011EDB92FFC5FC4F9AE02.roa File: 23B576C8931011EDB92FFC5FC4F9AE02.roa (raw, json) Hash identifier: sY+QIG2LstDA7JVC2gWaQ/JtlWZsivrl9PznNH+b9kw= Subject key identifier: DB:A2:5B:68:1A:05:A4:A3:DC:31:63:B7:5A:93:EB:F8:B0:34:2F:33 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E3B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23B576C8931011EDB92FFC5FC4F9AE02.roa Signing time: Wed 10 May 2023 16:33:07 +0000 ROA not before: Wed 10 May 2023 16:33:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140177 IP address blocks: 103.169.79.0/24 maxlen: 24 103.210.126.0/24 maxlen: 24 2001:df1:3840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28219 (0x6e3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc742-59a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:d7:96:14:9f:6c:d3:c2:b6:d1:99:92:72: 3c:a1:cc:8d:04:8e:97:b8:c7:d5:d1:ac:b9:54:be: 6b:98:58:db:e6:36:2c:1d:a2:97:28:40:7d:31:8d: 8f:88:72:8d:67:ae:da:8e:48:be:66:96:72:48:fe: 39:0a:6b:6c:38:9e:9f:63:76:e5:45:a7:c2:66:7f: c1:5c:c5:63:df:d3:82:03:c5:ca:08:e6:07:6d:22: 42:b4:e1:75:c6:05:c9:0a:cf:65:8f:05:5e:01:55: a6:4f:fa:27:05:75:2d:12:5f:83:97:b5:60:1e:cf: fd:7e:41:6f:9a:26:cc:f7:16:1a:42:6d:26:58:90: 66:70:44:ee:f6:0b:ca:35:21:9a:c2:7c:70:ad:65: 4b:d8:09:70:ae:61:29:2c:3f:43:a7:e5:84:6b:9d: ca:eb:b1:24:f6:ff:15:6e:c6:7c:84:fd:2a:3a:bb: 74:a0:65:2d:31:ae:38:aa:e3:f7:aa:f8:80:89:85: 48:df:1d:fe:bc:ea:c8:d7:b5:77:56:2d:d4:91:76: 74:c9:e8:f1:64:9a:59:3c:33:65:c3:37:d0:31:c4: 7a:b7:e8:44:95:ed:8c:ea:f4:b4:2b:74:ad:a0:5b: 3d:ae:7c:d7:8c:ac:90:92:61:ad:9f:61:9e:cc:00: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:5B:68:1A:05:A4:A3:DC:31:63:B7:5A:93:EB:F8:B0:34:2F:33 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/23B576C8931011EDB92FFC5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.79.0/24 103.210.126.0/24 IPv6: 2001:df1:3840::/48 Signature Algorithm: sha256WithRSAEncryption 6b:0a:cd:4f:2d:c0:16:c0:6e:e3:98:16:95:56:9e:73:9e:9a: c7:45:47:ea:c2:c3:4d:be:61:fe:9a:f3:80:76:73:28:6b:e3: 67:19:b6:df:4a:5c:99:e5:d4:e0:41:86:70:a2:c6:70:44:ba: 0f:b0:96:7d:e1:8d:75:da:cc:73:61:90:66:95:9c:33:77:64: f9:fb:ae:9e:af:91:2e:6b:a4:ec:94:1c:b9:2f:de:e6:7f:f6: 08:4f:39:a6:b8:ea:f3:cd:f6:70:c2:f9:75:61:86:cb:e4:83: a5:d7:37:c6:a5:f3:10:de:21:0c:b9:cf:4c:1f:73:b1:5c:bb: 8c:4f:c2:b2:0a:ee:63:98:4d:f6:2d:ae:c5:4e:12:41:d1:33: 8c:93:4d:fd:d2:c4:29:4e:0d:94:54:e8:86:c5:d5:c0:ec:2d: 43:3c:29:ba:50:1a:6c:b6:fd:33:9b:1e:f9:aa:3c:46:db:e2: 11:82:2e:ab:62:df:e4:e6:af:fc:45:b1:03:e7:1f:4c:6e:83: dd:83:98:3c:70:30:40:9b:2d:b4:14:b9:63:40:fa:87:d1:e4: 8c:5a:29:ed:6c:38:4b:0f:95:90:c2:9f:11:c4:55:7d:e9:b7: 96:63:f6:58:db:ed:4b:85:ff:fe:40:8b:20:1d:68:4e:55:f4: e4:47:6c:44 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc0Mi01OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGLXlhSfbNPCttGZknI8ocyNBI6XuMfV0ay5VL5rmFjb5jYsHaKXKEB9MY2P iHKNZ67ajki+ZpZySP45CmtsOJ6fY3blRafCZn/BXMVj39OCA8XKCOYHbSJCtOF1 xgXJCs9ljwVeAVWmT/onBXUtEl+Dl7VgHs/9fkFvmibM9xYaQm0mWJBmcETu9gvK NSGawnxwrWVL2AlwrmEpLD9Dp+WEa53K67Ek9v8VbsZ8hP0qOrt0oGUtMa44quP3 qviAiYVI3x3+vOrI17V3Vi3UkXZ0yejxZJpZPDNlwzfQMcR6t+hEle2M6vS0K3St oFs9rnzXjKyQkmGtn2GezAAWYQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNuiW2ga BaSj3DFjt1qT6/iwNC8zMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjNCNTc2Qzg5 MzEwMTFFREI5MkZGQzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnqU8DBABn0n4wDwQCAAIwCQMHACABDfE4QDANBgkqhkiG 9w0BAQsFAAOCAQEAawrNTy3AFsBu45gWlVaec56ax0VH6sLDTb5h/przgHZzKGvj Zxm230pcmeXU4EGGcKLGcES6D7CWfeGNddrMc2GQZpWcM3dk+fuunq+RLmuk7JQc uS/e5n/2CE85prjq8832cML5dWGGy+SDpdc3xqXzEN4hDLnPTB9zsVy7jE/Csgru Y5hN9i2uxU4SQdEzjJNN/dLEKU4NlFTohsXVwOwtQzwpulAabLb9M5se+ao8Rtvi EYIuq2Lf5Oav/EWxA+cfTG6D3YOYPHAwQJsttBS5Y0D6h9HkjFop7Ww4Sw+VkMKf EcRVfem3lmP2WNvtS4X//kCLIB1oTlX05EdsRA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org