$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa File: 27FC3CBA1F6911EC82CDB07AC4F9AE02.roa (raw, json) Hash identifier: ItRhYXgPBUVRR+I+U95eDAAkZkBc2j+UDvoDM+Y7J8k= Subject key identifier: AC:44:C3:B1:A3:DC:DD:99:17:58:F6:56:AB:73:41:0D:5F:E1:98:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F9A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa Signing time: Wed 10 May 2023 16:39:34 +0000 ROA not before: Wed 10 May 2023 16:39:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146860 IP address blocks: 103.168.202.0/23 maxlen: 24 2001:df1:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28570 (0x6f9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:39:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8c6-bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:cb:a8:ab:29:b9:65:bc:77:c3:1e:b0:6b: e8:1d:8b:32:c3:6f:81:7d:98:b9:33:ce:90:5b:0f: c5:b6:48:ce:50:9e:c7:fb:25:d2:41:e9:7e:ac:79: c6:5d:7d:f8:d4:8c:bf:09:4f:a8:1a:b6:27:81:61: f0:f5:b6:72:f5:a2:33:c3:88:c0:be:38:c8:7d:55: a9:ae:09:c9:79:e1:07:e4:06:9f:70:81:b5:6c:de: b4:57:26:0c:52:f3:63:24:1a:da:0f:a4:21:02:7a: 2a:d6:01:14:83:4e:35:7a:3b:17:32:44:a4:60:7a: 75:e6:da:69:db:9c:66:42:32:57:d0:89:bc:ad:f3: 39:07:ac:41:13:5d:a0:11:ca:79:9e:fb:1f:40:26: c6:69:a7:6f:5b:f1:a3:61:bf:7f:0b:95:64:63:aa: 88:09:28:73:d8:05:6f:8e:14:eb:2c:bc:5a:52:15: d0:bc:8e:21:0f:82:ea:72:ea:d1:2c:da:73:72:48: ad:b1:40:0a:b9:26:0d:96:40:b6:cf:ef:d2:32:04: 9b:b2:d7:4a:46:a1:f5:dc:3f:0c:5e:bb:de:4e:5c: df:3f:b9:1c:2e:48:b5:dc:3f:b1:38:ac:c0:4d:37: b6:80:b4:b7:77:de:bb:16:69:69:bf:c8:7a:82:bc: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:C3:B1:A3:DC:DD:99:17:58:F6:56:AB:73:41:0D:5F:E1:98:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.202.0/23 IPv6: 2001:df1:4d40::/48 Signature Algorithm: sha256WithRSAEncryption a3:02:3c:0b:61:19:ca:50:ff:0a:76:24:1d:3d:79:76:a8:a8: 33:00:9d:93:1f:59:21:35:7f:96:56:2a:8b:d1:21:5c:b7:f7: 56:32:ca:84:26:1a:e6:89:89:6c:39:ce:55:68:42:df:7e:91: de:e1:10:83:fc:f8:89:c9:c2:d9:0c:d8:3f:d8:d7:f6:8a:1b: 1a:90:52:8c:19:51:4b:72:cc:8d:be:63:58:24:9e:c9:5b:8c: 7e:63:64:0b:3d:62:a2:b8:e1:5c:f5:c1:10:0d:72:93:c4:46: 89:15:1e:a0:1b:db:5c:95:aa:9b:ad:0f:53:6d:10:b9:7f:00: 01:02:13:86:7b:4b:5e:d4:d9:f0:f9:4f:5a:34:cf:d6:13:6c: 81:43:1d:7a:69:ec:22:22:88:69:f7:b1:f3:4d:4d:e1:ee:77: f7:df:fb:d4:80:c4:37:9d:85:eb:11:fa:f0:09:e9:6b:00:f9: e4:71:7d:34:60:9f:3a:c3:6f:89:97:93:fb:1c:21:12:c5:41: 0c:15:2a:0f:ed:5a:32:bb:15:60:45:24:c1:8a:52:f6:21:ea: 5a:88:ab:cf:ea:4c:68:3e:71:e7:cc:ce:6a:f2:b5:20:29:95: db:2b:f6:60:92:84:8e:83:44:07:e9:a4:64:91:b7:45:70:1f: d6:65:e4:b8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhjNi1iYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskbLqKspuWW8d8MesGvoHYsyw2+BfZi5M86QWw/FtkjOUJ7H+yXSQel+rHnG XX341Iy/CU+oGrYngWHw9bZy9aIzw4jAvjjIfVWprgnJeeEH5AafcIG1bN60VyYM UvNjJBraD6QhAnoq1gEUg041ejsXMkSkYHp15tpp25xmQjJX0Im8rfM5B6xBE12g Ecp5nvsfQCbGaadvW/GjYb9/C5VkY6qICShz2AVvjhTrLLxaUhXQvI4hD4LqcurR LNpzckitsUAKuSYNlkC2z+/SMgSbstdKRqH13D8MXrveTlzfP7kcLki13D+xOKzA TTe2gLS3d967Fmlpv8h6grxPaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKxEw7Gj 3N2ZF1j2VqtzQQ1f4ZiCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjdGQzNDQkEx RjY5MTFFQzgyQ0RCMDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqMowDwQCAAIwCQMHACABDfFNQDANBgkqhkiG9w0BAQsF AAOCAQEAowI8C2EZylD/CnYkHT15dqioMwCdkx9ZITV/llYqi9EhXLf3VjLKhCYa 5omJbDnOVWhC336R3uEQg/z4icnC2QzYP9jX9oobGpBSjBlRS3LMjb5jWCSeyVuM fmNkCz1iorjhXPXBEA1yk8RGiRUeoBvbXJWqm60PU20QuX8AAQIThntLXtTZ8PlP WjTP1hNsgUMdemnsIiKIafex801N4e5399/71IDEN52F6xH68AnpawD55HF9NGCf OsNviZeT+xwhEsVBDBUqD+1aMrsVYEUkwYpS9iHqWoirz+pMaD5x58zOavK1ICmV 2yv2YJKEjoNEB+mkZJG3RXAf1mXkuA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org