$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254989F283F311EC92D5DD85C4F9AE02.roa File: 254989F283F311EC92D5DD85C4F9AE02.roa (raw, json) Hash identifier: esZzXgud3g4xF0jLBNyF5YlI7DQpQfTTRXYHWtNY8X4= Subject key identifier: B6:75:50:06:1A:CA:AA:74:BE:C3:D2:A5:7C:0E:DF:5C:C4:A5:D3:7E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7037 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254989F283F311EC92D5DD85C4F9AE02.roa Signing time: Wed 10 May 2023 16:42:32 +0000 ROA not before: Wed 10 May 2023 16:42:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149224 IP address blocks: 103.180.210.0/24 maxlen: 24 103.180.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28727 (0x7037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc978-a216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:35:c4:fc:1b:79:dd:d2:4d:68:a3:95:93: 0c:3a:26:29:ca:ed:22:cc:f3:25:e5:7e:d5:c5:cc: 53:63:8d:61:0d:88:21:ed:cc:96:f7:5f:f6:9e:fb: ad:5c:f5:81:be:d3:35:df:0e:a3:f4:fd:71:24:66: f4:5a:ae:a9:23:de:91:07:f3:c4:c2:a9:ca:bb:0e: 1f:b5:86:ff:ca:a2:8b:87:e4:55:7a:fb:0f:20:80: 76:a3:c5:cb:d4:e1:25:8d:74:7e:3e:87:74:55:b1: 33:41:36:ac:d1:2d:94:f2:95:91:e5:51:e1:76:f1: 75:e5:9f:7b:23:53:89:45:66:89:bf:f2:9c:30:29: 63:50:89:59:d9:73:e4:99:5e:2e:e8:14:92:83:c9: 86:e5:d5:b0:a5:7f:d0:a4:49:d6:e7:ec:4a:1a:b9: 84:56:1a:b5:46:f7:e0:6e:57:e0:36:4e:65:5d:d0: c8:02:6c:91:aa:38:64:7f:e6:6a:67:76:e4:b2:a3: c9:ae:a4:96:de:ca:a3:af:da:e6:e3:b6:c8:66:76: 95:53:a6:65:80:38:ae:23:5f:3d:6d:69:4f:4a:bc: 27:1f:9d:29:d1:2a:a8:d3:18:2c:bb:72:22:78:dc: 40:07:0e:12:e1:00:30:37:47:46:61:7e:09:b0:44: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:75:50:06:1A:CA:AA:74:BE:C3:D2:A5:7C:0E:DF:5C:C4:A5:D3:7E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/254989F283F311EC92D5DD85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.210.0/23 Signature Algorithm: sha256WithRSAEncryption 11:92:bd:f8:92:56:98:f8:25:dc:ab:af:a1:62:49:31:dd:59: 74:b8:a4:34:b3:b3:31:aa:24:f3:90:c2:b8:90:93:04:2c:a5: a3:98:66:09:71:b7:06:5f:52:b9:fd:62:50:21:30:11:ef:30: d0:6e:da:21:00:cc:ec:8c:75:06:ac:ee:9b:da:ea:cc:25:e1: f9:d3:f0:0e:df:04:83:32:71:79:6c:0c:ab:92:ce:7d:4c:a8: 15:93:54:62:1a:6d:2d:92:04:dd:a1:8b:f1:44:18:c5:cd:cd: 2b:e9:31:c7:49:6a:22:c9:b8:81:e2:d9:f1:8d:51:46:05:56: f4:f3:7a:02:dd:a2:4d:37:aa:a6:f2:77:e7:dd:46:f8:30:1a: ba:12:45:e0:89:b3:97:b5:6c:6d:0a:b2:da:9e:56:ac:03:e5: 02:56:c0:88:60:09:1d:31:e3:28:e1:e6:ca:ca:d7:9b:2e:0a: e8:e6:05:42:62:30:d5:85:09:48:91:c4:66:19:8d:7f:4e:d4: 5c:2a:f6:1d:a8:7e:02:45:f7:e6:13:e9:b6:ba:d4:dc:d9:00: ea:5f:74:98:74:cb:f8:9d:ed:a3:2f:22:bf:d5:f5:e4:21:c0: 5f:ff:c1:90:48:f7:a3:98:5d:88:b7:68:67:6b:88:35:ac:45: d9:72:9e:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk3OC1hMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+o1xPwbed3STWijlZMMOiYpyu0izPMl5X7VxcxTY41hDYgh7cyW91/2nvut XPWBvtM13w6j9P1xJGb0Wq6pI96RB/PEwqnKuw4ftYb/yqKLh+RVevsPIIB2o8XL 1OEljXR+Pod0VbEzQTas0S2U8pWR5VHhdvF15Z97I1OJRWaJv/KcMCljUIlZ2XPk mV4u6BSSg8mG5dWwpX/QpEnW5+xKGrmEVhq1RvfgblfgNk5lXdDIAmyRqjhkf+Zq Z3bksqPJrqSW3sqjr9rm47bIZnaVU6ZlgDiuI189bWlPSrwnH50p0Sqo0xgsu3Ii eNxABw4S4QAwN0dGYX4JsERd2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZ1UAYa yqp0vsPSpXwO31zEpdN+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjU0OTg5RjI4 M0YzMTFFQzkyRDVERDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntNIwDQYJKoZIhvcNAQELBQADggEBABGSvfiSVpj4Jdyr r6FiSTHdWXS4pDSzszGqJPOQwriQkwQspaOYZglxtwZfUrn9YlAhMBHvMNBu2iEA zOyMdQas7pva6swl4fnT8A7fBIMycXlsDKuSzn1MqBWTVGIabS2SBN2hi/FEGMXN zSvpMcdJaiLJuIHi2fGNUUYFVvTzegLdok03qqbyd+fdRvgwGroSReCJs5e1bG0K stqeVqwD5QJWwIhgCR0x4yjh5srK15suCujmBUJiMNWFCUiRxGYZjX9O1Fwq9h2o fgJF9+YT6ba61NzZAOpfdJh0y/id7aMvIr/V9eQhwF//wZBI96OYXYi3aGdriDWs Rdlynsg= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:14 2024 by rpki-client on console-ams.rpki-client.org