$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EBCD3AA85B11EDB8C4FB20C4F9AE02.roa File: 28EBCD3AA85B11EDB8C4FB20C4F9AE02.roa (raw, json) Hash identifier: YvQMqeO0TGAs497jV6rBJj6zrvaVB5JpN2iTUjkWD1k= Subject key identifier: EA:27:D7:70:9E:0C:8E:25:A6:63:3B:11:98:99:6B:91:12:92:0A:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 712C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EBCD3AA85B11EDB8C4FB20C4F9AE02.roa Signing time: Wed 10 May 2023 16:46:57 +0000 ROA not before: Wed 10 May 2023 16:46:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150632 IP address blocks: 103.81.108.0/23 maxlen: 24 2001:df1:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28972 (0x712c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca81-3780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:e8:9b:9b:08:b3:85:a0:77:0b:21:b7:ac: de:80:cc:73:30:76:ca:a8:12:d7:ac:35:1c:c5:ab: e0:8e:04:ed:5a:ab:21:bb:45:5a:80:10:fe:50:da: f7:ed:22:a6:16:82:02:04:87:22:a7:59:79:4b:b9: 5b:73:00:89:31:a9:86:76:7b:af:65:af:8e:13:06: 45:ca:b9:17:32:32:33:ca:6c:0e:a4:76:ea:69:01: 8c:b0:b9:27:a0:b3:9b:43:2c:3e:47:74:5a:ee:04: 60:cc:06:90:6d:98:88:68:f8:2f:50:9d:a9:4f:1f: 14:49:67:12:8f:8f:ce:aa:8b:a8:7e:3a:83:c3:7b: 69:1f:bc:d7:f1:d0:5a:0f:d7:77:b8:64:75:3c:4b: 28:e0:f6:90:3f:be:6c:4d:93:a6:b3:64:28:22:d8: 9e:ac:8e:87:5e:70:bf:5e:79:a3:9f:02:ed:de:c2: f0:55:31:12:0c:5c:a3:0b:91:42:73:91:bc:d8:d9: 55:12:de:d9:fe:2d:10:8d:ce:58:36:68:90:4c:b4: a3:cd:3a:f2:3c:fa:02:b1:d9:82:05:e1:93:57:de: e5:43:31:57:76:95:b6:a1:be:0e:54:8c:ce:fa:b3: 91:d3:cb:c0:81:b3:cb:41:37:52:4a:41:13:8b:63: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:D7:70:9E:0C:8E:25:A6:63:3B:11:98:99:6B:91:12:92:0A:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EBCD3AA85B11EDB8C4FB20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.108.0/23 IPv6: 2001:df1:f640::/48 Signature Algorithm: sha256WithRSAEncryption 57:6f:72:5d:de:28:6f:ba:dc:41:73:9d:c9:9e:44:fe:74:a5: 9f:bc:a8:f8:8b:a2:15:13:d0:8b:bc:b7:4a:1f:05:d5:d8:87: fe:0b:72:a0:6a:8b:5d:ed:db:44:bd:eb:a0:57:dc:e0:2c:2d: 94:00:71:a3:d7:10:f4:d9:b3:4f:c4:6f:fe:69:91:14:72:ad: c3:40:de:b4:3a:59:e9:63:79:c0:9b:bc:50:cc:00:44:3d:85: 3f:c4:af:1b:db:2a:d2:12:1c:55:86:67:2e:b7:c9:6c:db:bf: 0e:36:0a:ab:f7:9b:ca:61:98:db:a9:30:44:ff:fd:4d:fd:3f: 8f:77:6d:33:cc:87:92:95:80:fb:4b:92:61:84:52:eb:0e:89: 86:7f:6c:0b:55:a0:62:86:d5:85:11:7c:f7:54:fb:b5:3e:c8: 15:d0:18:c0:62:80:8d:4b:00:d2:a2:f2:63:98:0b:67:6d:1f: 7e:45:57:ac:c8:15:36:a2:95:c7:a4:9e:e5:7a:98:92:45:84: 6d:6e:80:10:a7:e3:7f:8e:d9:fd:0f:4e:03:c4:64:93:b9:e0: 1f:40:43:3d:e7:05:53:88:fd:f1:18:94:fd:b4:7d:14:48:ba: 35:d9:a4:a4:a4:1a:02:7a:cf:f9:1a:f3:8e:b6:f6:83:f3:05: f4:00:56:9a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjU3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E4MS0zNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0vom5sIs4Wgdwsht6zegMxzMHbKqBLXrDUcxavgjgTtWqshu0VagBD+UNr3 7SKmFoICBIcip1l5S7lbcwCJMamGdnuvZa+OEwZFyrkXMjIzymwOpHbqaQGMsLkn oLObQyw+R3Ra7gRgzAaQbZiIaPgvUJ2pTx8USWcSj4/OqouofjqDw3tpH7zX8dBa D9d3uGR1PEso4PaQP75sTZOms2QoItierI6HXnC/XnmjnwLt3sLwVTESDFyjC5FC c5G82NlVEt7Z/i0Qjc5YNmiQTLSjzTryPPoCsdmCBeGTV97lQzFXdpW2ob4OVIzO +rOR08vAgbPLQTdSSkETi2O9MwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOon13Ce DI4lpmM7EZiZa5ESkgqyMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjhFQkNEM0FB ODVCMTFFREI4QzRGQjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnUWwwDwQCAAIwCQMHACABDfH2QDANBgkqhkiG9w0BAQsF AAOCAQEAV29yXd4ob7rcQXOdyZ5E/nSln7yo+IuiFRPQi7y3Sh8F1diH/gtyoGqL Xe3bRL3roFfc4CwtlABxo9cQ9NmzT8Rv/mmRFHKtw0DetDpZ6WN5wJu8UMwARD2F P8SvG9sq0hIcVYZnLrfJbNu/DjYKq/ebymGY26kwRP/9Tf0/j3dtM8yHkpWA+0uS YYRS6w6Jhn9sC1WgYobVhRF891T7tT7IFdAYwGKAjUsA0qLyY5gLZ20ffkVXrMgV NqKVx6Se5XqYkkWEbW6AEKfjf47Z/Q9OA8Rkk7ngH0BDPecFU4j98RiU/bR9FEi6 NdmkpKQaAnrP+Rrzjrb2g/MF9ABWmg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org