$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa File: 25ED0B4E3C6511EBAEF57659C4F9AE02.roa (raw, json) Hash identifier: dkNjqC2hgTHAKe5gwvbgGnuji5J8MxibIrhd//zCUXM= Subject key identifier: 26:17:FC:CB:B0:53:94:8D:60:53:CF:92:F5:FE:BD:9E:A0:87:B7:4E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A2C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:27 +0000 ROA not before: Wed 10 May 2023 16:13:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132947 IP address blocks: 103.155.206.0/24 maxlen: 24 103.155.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27180 (0x6a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2a7-5e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:e9:b9:d2:6b:5a:e5:82:f6:47:d9:4a:24: 93:8f:7f:c7:99:f1:14:17:78:6a:5a:03:ea:ef:55: 9c:71:ee:c7:1d:50:dd:85:63:f0:ed:80:9c:d0:03: ed:ba:07:3b:1b:62:f3:3b:c4:cb:82:27:4d:ef:fe: 20:40:ee:31:57:ad:01:f2:ca:5e:d0:86:38:f9:a2: 53:c6:32:2e:76:30:ec:21:00:7f:59:9c:aa:ab:48: cf:89:ad:96:76:a4:04:7a:66:aa:fc:85:5c:27:70: 10:d5:7b:e6:cb:f0:a7:68:76:85:01:9b:57:42:60: 2e:ed:26:a7:e9:ca:6a:ac:82:07:d9:ba:53:7c:fd: d7:a9:f0:12:dd:30:e6:ab:81:1d:17:62:c9:b6:fd: dc:68:76:9e:e2:d3:9e:87:e3:d9:d0:3e:4a:43:cd: 07:0d:1e:a0:79:aa:51:d2:29:bd:2f:22:04:6e:b2: 79:59:50:72:ca:35:01:4d:6a:22:08:7f:91:7a:5d: 45:61:e2:ea:f5:08:d8:c4:d4:b2:19:20:eb:61:3d: cc:57:d2:93:70:e1:31:86:13:ff:8b:24:03:d1:9f: b4:71:5b:57:cf:8d:2b:24:1a:1e:6d:dd:5a:b0:c3: 17:a9:ce:c6:14:51:9d:5f:40:0a:ab:59:ec:ee:18: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:FC:CB:B0:53:94:8D:60:53:CF:92:F5:FE:BD:9E:A0:87:B7:4E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ED0B4E3C6511EBAEF57659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.206.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:05:89:88:4f:e2:b9:1b:5f:1f:21:27:04:fa:4f:1f:5e:0c: ab:4e:b8:74:fa:37:3f:03:38:65:80:20:07:5f:8d:e5:10:5c: 84:a8:1d:03:45:a7:86:79:ea:de:1e:e2:63:64:91:b7:7d:3d: 74:d0:e9:fa:11:7a:34:e0:48:5f:df:8b:ce:43:72:9a:17:76: 3f:1e:f6:ba:9b:33:bd:55:d5:8e:30:8f:94:9f:7d:33:38:2f: 83:3a:4b:04:d5:88:3b:21:99:cd:72:fd:79:06:e1:aa:42:a4: df:48:6d:dd:c4:26:36:a5:3f:57:c3:ed:0d:c0:3a:e8:a3:24: ee:6d:da:9e:6b:35:ad:65:d1:8e:00:79:55:1a:bc:2f:52:a9: 77:44:80:a5:7d:c9:65:0b:24:2e:07:26:df:10:96:82:5f:3c: a8:63:de:f7:e1:ef:c5:11:f5:9e:ea:da:69:fa:1a:3b:29:03: 86:91:4d:5e:dc:dd:cc:22:61:72:3b:5b:48:9c:0c:eb:b7:61: 4c:55:a4:f6:a9:b1:f3:e4:5f:bf:c6:a4:93:10:3a:d6:c5:6e: 2a:7b:89:42:a5:35:e4:63:2d:82:7c:ba:1f:95:16:db:42:2e: ce:20:a2:23:6f:02:f8:a6:c9:ff:cf:70:dd:9b:a2:16:9b:f0: ab:f6:9a:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJhNy01ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2vpudJrWuWC9kfZSiSTj3/HmfEUF3hqWgPq71Wcce7HHVDdhWPw7YCc0APt ugc7G2LzO8TLgidN7/4gQO4xV60B8spe0IY4+aJTxjIudjDsIQB/WZyqq0jPia2W dqQEemaq/IVcJ3AQ1Xvmy/CnaHaFAZtXQmAu7San6cpqrIIH2bpTfP3XqfAS3TDm q4EdF2LJtv3caHae4tOeh+PZ0D5KQ80HDR6geapR0im9LyIEbrJ5WVByyjUBTWoi CH+Rel1FYeLq9QjYxNSyGSDrYT3MV9KTcOExhhP/iyQD0Z+0cVtXz40rJBoebd1a sMMXqc7GFFGdX0AKq1ns7hjKJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCYX/Muw U5SNYFPPkvX+vZ6gh7dOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjVFRDBCNEUz QzY1MTFFQkFFRjU3NjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm84wDQYJKoZIhvcNAQELBQADggEBAD4FiYhP4rkbXx8h JwT6Tx9eDKtOuHT6Nz8DOGWAIAdfjeUQXISoHQNFp4Z56t4e4mNkkbd9PXTQ6foR ejTgSF/fi85DcpoXdj8e9rqbM71V1Y4wj5SffTM4L4M6SwTViDshmc1y/XkG4apC pN9Ibd3EJjalP1fD7Q3AOuijJO5t2p5rNa1l0Y4AeVUavC9SqXdEgKV9yWULJC4H Jt8QloJfPKhj3vfh78UR9Z7q2mn6GjspA4aRTV7c3cwiYXI7W0icDOu3YUxVpPap sfPkX7/GpJMQOtbFbip7iUKlNeRjLYJ8uh+VFttCLs4goiNvAvimyf/PcN2bohab 8Kv2mqE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org