$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2626143C876F11ED84AE142EC4F9AE02.roa File: 2626143C876F11ED84AE142EC4F9AE02.roa (raw, json) Hash identifier: gbVetxQ+/bi0O8VdNTM3nGhp3BjZO6JkULzWwqiDsGw= Subject key identifier: CF:E8:33:CD:CB:E9:31:09:D3:39:05:5A:57:0B:F1:7B:7B:DD:7D:0F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A7B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2626143C876F11ED84AE142EC4F9AE02.roa Signing time: Wed 10 May 2023 16:15:00 +0000 ROA not before: Wed 10 May 2023 16:15:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133301 IP address blocks: 45.116.228.0/22 maxlen: 24 45.249.168.0/22 maxlen: 24 103.17.110.0/24 maxlen: 24 103.38.12.0/22 maxlen: 24 103.85.204.0/22 maxlen: 24 103.157.166.0/23 maxlen: 24 103.159.150.0/23 maxlen: 24 103.165.20.0/23 maxlen: 24 103.176.128.0/23 maxlen: 24 103.194.69.0/24 maxlen: 24 103.198.128.0/24 maxlen: 24 2001:df6:3880::/48 maxlen: 50 2001:df6:4400::/48 maxlen: 48 2406:a340::/32 maxlen: 34 2407:4840::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27259 (0x6a7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:15:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc303-7d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:52:5c:f2:39:76:0d:35:e5:14:10:2d:05: 67:c1:59:fc:ab:a1:8d:8f:e4:31:38:03:0a:fc:5b: aa:e3:36:3d:f7:41:30:77:88:34:4c:0b:6e:ac:a5: 50:6f:97:85:62:73:4e:8b:5e:f3:7b:8b:b4:14:4d: b0:71:08:fa:d7:d0:c5:68:a3:35:96:d8:1a:f0:58: e8:7c:36:6b:36:b1:2b:57:32:67:10:fd:bc:8d:4a: 3b:b2:e5:d2:a2:21:3e:82:95:6f:f4:a8:e3:6c:f9: 9c:aa:5b:be:91:37:d5:1f:8b:d2:e0:1e:c6:56:8a: fe:b6:60:70:7d:71:06:17:0f:0f:ea:68:79:df:4c: fb:82:29:7b:51:c9:25:0c:a2:63:31:cf:f0:df:46: de:c0:86:c7:f0:35:d2:1c:f1:a9:e4:64:be:8d:03: 6f:49:c4:8a:55:b4:af:5b:09:be:2f:1f:45:13:09: 9b:06:55:f9:84:70:eb:d3:03:64:9a:cc:20:20:70: 3d:f1:b0:b2:18:9d:d6:fc:ff:b1:cf:c4:9e:42:bb: 24:ba:4b:76:ac:8b:15:a1:10:dc:23:8b:91:cb:41: d7:6a:c2:82:29:62:bb:2f:63:ba:56:d3:67:0d:8e: d0:f5:2c:c4:b2:e4:0a:95:72:f7:0f:ed:7b:22:28: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:33:CD:CB:E9:31:09:D3:39:05:5A:57:0B:F1:7B:7B:DD:7D:0F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2626143C876F11ED84AE142EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.228.0/22 45.249.168.0/22 103.17.110.0/24 103.38.12.0/22 103.85.204.0/22 103.157.166.0/23 103.159.150.0/23 103.165.20.0/23 103.176.128.0/23 103.194.69.0/24 103.198.128.0/24 IPv6: 2001:df6:3880::/48 2001:df6:4400::/48 2406:a340::/32 2407:4840::/32 Signature Algorithm: sha256WithRSAEncryption 0c:6d:e4:ac:4e:0c:01:bb:3c:e0:6c:ef:3e:43:cc:43:57:28: 91:73:b5:5c:09:98:51:82:29:ec:6f:b4:bd:d0:3c:ae:c5:b3: 66:31:1d:e5:f6:2c:68:0a:5c:0e:1b:db:e1:6b:79:b9:1c:56: 5f:36:da:71:eb:45:24:73:25:e7:47:43:79:42:f7:3a:5e:cd: d7:96:ee:10:ce:f6:1c:3d:bb:44:50:f3:27:5b:6f:2b:e8:20: 85:0a:f1:11:c3:74:54:c2:9c:b2:5f:78:0e:4d:4d:86:e2:09: a5:77:1b:5a:40:ab:a8:4d:0f:4d:89:7a:d0:0a:4a:39:a2:e2: 60:cc:b0:16:9d:3d:0c:49:e9:ff:90:ee:33:53:f0:1a:9b:ce: 2b:7a:f2:59:14:3f:75:19:06:2f:3a:cd:66:70:d3:c5:42:21: b8:c3:0e:e8:69:6e:af:7f:1e:99:d3:e3:5d:8a:c5:02:38:66: 9e:a1:f0:cc:dd:bc:6b:48:13:8b:00:77:b1:6a:2c:b1:a4:db: 91:01:86:14:19:c6:41:ff:6d:7b:32:e7:bf:65:d7:b6:6f:6e: 6a:ca:76:0d:45:1e:74:65:65:76:4b:ab:bc:9f:cc:c4:87:19: 29:0c:07:ad:4b:6b:0b:34:e6:a2:c4:99:9b:44:67:95:47:f6: cd:c3:0c:fa -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgICanswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzMwMy03ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn39SXPI5dg015RQQLQVnwVn8q6GNj+QxOAMK/Fuq4zY990Ewd4g0TAturKVQ b5eFYnNOi17ze4u0FE2wcQj619DFaKM1ltga8FjofDZrNrErVzJnEP28jUo7suXS oiE+gpVv9KjjbPmcqlu+kTfVH4vS4B7GVor+tmBwfXEGFw8P6mh530z7gil7Uckl DKJjMc/w30bewIbH8DXSHPGp5GS+jQNvScSKVbSvWwm+Lx9FEwmbBlX5hHDr0wNk mswgIHA98bCyGJ3W/P+xz8SeQrskukt2rIsVoRDcI4uRy0HXasKCKWK7L2O6VtNn DY7Q9SzEsuQKlXL3D+17IigQcQIDAQABo4IC+jCCAvYwHQYDVR0OBBYEFM/oM83L 6TEJ0zkFWlcL8Xt73X0PMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjYyNjE0M0M4 NzZGMTFFRDg0QUUxNDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYMGCCsGAQUFBwEHAQH/ BHQwcjBIBAIAATBCAwQCLXTkAwQCLfmoAwQAZxFuAwQCZyYMAwQCZ1XMAwQBZ52m AwQBZ5+WAwQBZ6UUAwQBZ7CAAwQAZ8JFAwQAZ8aAMCYEAgACMCADBwAgAQ32OIAD BwAgAQ32RAADBQAkBqNAAwUAJAdIQDANBgkqhkiG9w0BAQsFAAOCAQEADG3krE4M Abs84GzvPkPMQ1cokXO1XAmYUYIp7G+0vdA8rsWzZjEd5fYsaApcDhvb4Wt5uRxW XzbacetFJHMl50dDeUL3Ol7N15buEM72HD27RFDzJ1tvK+gghQrxEcN0VMKcsl94 Dk1NhuIJpXcbWkCrqE0PTYl60ApKOaLiYMywFp09DEnp/5DuM1PwGpvOK3ryWRQ/ dRkGLzrNZnDTxUIhuMMO6Glur38emdPjXYrFAjhmnqHwzN28a0gTiwB3sWossaTb kQGGFBnGQf9tezLnv2XXtm9uasp2DUUedGVldkurvJ/MxIcZKQwHrUtrCzTmosSZ m0RnlUf2zcMM+g== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org