$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa File: 2690E528BDD211EAA55BEE1AC4F9AE02.roa (raw, json) Hash identifier: Q5qRw/Wiir1YKZzUYqIvZE2HqIUSWvmqxpg0vYLEgQg= Subject key identifier: AB:5C:C8:68:85:C5:5A:CA:E3:A9:75:ED:4F:49:BB:B3:4D:87:5E:A2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 842F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa Signing time: Wed 06 Mar 2024 11:10:13 +0000 ROA not before: Wed 06 Mar 2024 11:10:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135207 IP address blocks: 103.123.48.0/23 maxlen: 24 103.215.148.0/24 maxlen: 24 103.215.149.0/24 maxlen: 24 103.215.150.0/24 maxlen: 24 103.215.151.0/24 maxlen: 24 2401:fe40::/48 maxlen: 48 2401:fe40:1::/48 maxlen: 48 2401:fe40:2::/48 maxlen: 48 2401:fe40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33839 (0x842f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 6 11:10:13 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65e84f14-f15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:ee:5b:dd:0b:c6:1e:ca:3b:40:9b:9b:b5: ad:cd:4b:29:b9:c5:38:c4:a3:91:a7:ae:ba:12:d5: 60:31:b3:1c:76:43:4d:96:ac:f3:24:6a:80:cb:79: 03:10:c2:d5:ed:86:6e:64:25:9b:27:f2:81:52:a1: 23:66:4d:b5:50:75:b8:bf:e5:a8:c9:c4:66:1c:bb: 1b:ed:b6:8c:2b:f8:cb:36:69:d7:1e:4e:7f:e8:c3: f9:0a:fc:f0:d7:a6:f4:65:b4:3c:ae:47:ad:51:8f: 5e:cd:cc:51:57:71:bf:3d:54:a8:96:f4:4f:73:27: ec:6e:23:49:b0:17:52:b8:0a:dc:c4:fb:65:d3:b5: 70:04:1f:16:56:5c:75:ac:83:47:2a:05:9d:5e:af: 35:5e:90:af:6b:2b:78:b0:bf:1e:63:d2:88:e9:11: a6:99:03:a8:3e:e0:3c:e5:b3:0c:08:09:fb:21:f4: f7:14:5f:d4:0e:42:4c:a5:2f:a9:b6:c9:ce:23:e6: ca:2e:59:5b:b1:a1:73:15:bd:36:91:51:11:55:bf: c8:a2:16:42:47:27:ad:f9:23:34:3b:44:4c:c2:67: f8:77:76:26:1d:5d:04:0a:26:13:2c:93:b3:6c:11: 8a:50:ea:93:f5:6a:cf:5a:27:5e:4c:35:c5:53:df: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:C8:68:85:C5:5A:CA:E3:A9:75:ED:4F:49:BB:B3:4D:87:5E:A2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2690E528BDD211EAA55BEE1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.48.0/23 103.215.148.0/22 IPv6: 2401:fe40::/46 Signature Algorithm: sha256WithRSAEncryption 9b:f0:46:52:4f:d7:0c:c0:54:cf:0e:ee:49:ea:f2:bc:f0:0f: 07:c8:00:0f:06:90:24:9e:22:35:2c:b3:3a:9b:c3:09:0e:1d: f7:ca:50:00:56:d6:2a:2e:cd:99:56:ef:3f:f1:2f:fd:d1:08: c4:92:62:a7:ed:d3:72:e0:e1:f8:0c:b3:fc:c3:2a:8c:9b:24: 4b:ec:fe:92:8d:02:c2:d3:8c:f6:29:7b:33:5e:66:a0:42:1d: 83:a9:93:c6:0d:9e:fd:d7:8d:02:8c:63:10:dc:7f:bb:8d:82: ee:05:bf:b7:b3:b8:3f:5f:93:0f:31:76:09:31:6a:39:1b:55: 90:23:19:85:bf:51:c3:02:3f:4a:85:93:2a:78:d8:22:7c:62: 42:17:85:76:fa:64:d8:da:b9:15:36:08:aa:f5:35:44:4b:be: 99:52:66:ec:79:dd:d6:72:e9:ed:35:88:71:1b:7e:2a:00:eb: 0a:88:51:cb:0d:85:d7:99:27:b6:d9:a1:72:e9:9d:73:60:c5: 3a:2d:cf:d9:30:bb:7f:0e:e6:5b:52:f2:d4:1f:76:50:bd:41: 58:98:57:0f:d5:17:25:fe:36:00:35:b1:8c:26:0f:9b:68:60: f7:1d:9b:d3:c4:a2:83:f0:38:c0:c1:21:f5:0a:72:42:bb:3a: ab:b7:97:2e -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIQvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMwNjExMTAxM1oXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVlODRmMTQtZjE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbX7lvdC8YeyjtAm5u1rc1LKbnFOMSjkaeuuhLVYDGzHHZDTZas8yRqgMt5 AxDC1e2GbmQlmyfygVKhI2ZNtVB1uL/lqMnEZhy7G+22jCv4yzZp1x5Of+jD+Qr8 8Nem9GW0PK5HrVGPXs3MUVdxvz1UqJb0T3Mn7G4jSbAXUrgK3MT7ZdO1cAQfFlZc dayDRyoFnV6vNV6Qr2sreLC/HmPSiOkRppkDqD7gPOWzDAgJ+yH09xRf1A5CTKUv qbbJziPmyi5ZW7GhcxW9NpFREVW/yKIWQkcnrfkjNDtETMJn+Hd2Jh1dBAomEyyT s2wRilDqk/Vqz1onXkw1xVPfv7kCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSrXMho hcVayuOpde1PSbuzTYdeojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI2OTBFNTI4 QkREMjExRUFBNTVCRUUxQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZ3swAwQCZ9eUMA8EAgACMAkDBwIkAf5AAAAwDQYJKoZI hvcNAQELBQADggEBAJvwRlJP1wzAVM8O7knq8rzwDwfIAA8GkCSeIjUsszqbwwkO HffKUABW1iouzZlW7z/xL/3RCMSSYqft03Lg4fgMs/zDKoybJEvs/pKNAsLTjPYp ezNeZqBCHYOpk8YNnv3XjQKMYxDcf7uNgu4Fv7ezuD9fkw8xdgkxajkbVZAjGYW/ UcMCP0qFkyp42CJ8YkIXhXb6ZNjauRU2CKr1NURLvplSZux53dZy6e01iHEbfioA 6wqIUcsNhdeZJ7bZoXLpnXNgxTotz9kwu38O5ltS8tQfdlC9QViYVw/VFyX+NgA1 sYwmD5toYPcdm9PEooPwOMDBIfUKckK7Oqu3ly4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org