$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A13F66886B111ED8E341612C4F9AE02.roa File: 2A13F66886B111ED8E341612C4F9AE02.roa (raw, json) Hash identifier: eDCLf45kjy5Z1ZHRnbnJePd+qB5/NZCoPBlvrYnVANQ= Subject key identifier: 1D:21:92:37:D0:FF:D8:4B:5E:5E:27:2F:C6:68:D4:9C:BC:63:F4:43 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BD1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A13F66886B111ED8E341612C4F9AE02.roa Signing time: Wed 10 May 2023 16:21:31 +0000 ROA not before: Wed 10 May 2023 16:21:31 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135700 IP address blocks: 103.48.144.0/23 maxlen: 24 103.173.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27601 (0x6bd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:31 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc48a-868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:55:d3:60:7f:4b:60:7f:c2:89:eb:9a:6c: 0a:f9:8a:ef:ad:42:e0:ab:56:c1:76:8a:95:c5:7e: 12:18:5f:b0:55:a7:87:dc:0e:1d:5c:20:14:8e:8d: d2:78:ca:b0:24:cf:df:5b:15:70:89:0d:63:28:99: fb:b9:a4:23:2e:9b:cf:d1:7e:70:19:d8:47:95:cb: de:2a:7f:5e:ae:61:1e:22:6a:6d:ab:20:1a:11:26: 4a:95:64:39:9e:41:7c:00:bb:e6:5f:e8:a9:ca:75: e1:54:3f:ef:8f:1d:88:76:fb:c9:e7:e5:de:97:1a: 22:91:ec:5b:dc:5a:c1:ec:96:fa:65:45:72:04:94: ab:2b:f2:ee:69:bd:b9:ef:65:33:6c:db:67:ea:a7: 0f:d8:71:a4:b9:23:a9:da:26:11:44:fa:ed:c4:53: 88:f8:17:eb:dd:e9:5b:d9:0c:2b:c3:79:8f:25:cc: 21:45:9b:08:7a:6a:8f:e8:03:e2:01:88:1e:d2:57: 28:68:ec:93:c9:c7:ec:1a:c2:3a:06:7c:4f:60:63: d6:5a:2f:f7:27:e4:e6:62:cc:24:11:a8:11:e4:e1: 48:bd:91:5b:30:7b:ff:41:ce:3e:69:00:c4:39:87: 9c:19:8a:8f:64:d6:15:6b:65:78:08:89:8e:4d:fe: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:92:37:D0:FF:D8:4B:5E:5E:27:2F:C6:68:D4:9C:BC:63:F4:43 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A13F66886B111ED8E341612C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.144.0/23 103.173.146.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:d7:08:a7:2e:25:e2:07:09:73:d2:13:6b:15:83:b7:de:17: 8b:e9:06:9a:9e:67:79:71:be:a7:2d:b5:25:d1:32:98:3f:c4: 1f:78:c0:40:12:c6:48:37:39:62:21:6d:63:65:1c:93:2d:4d: 17:82:bf:61:5c:2f:65:4e:2d:7d:99:49:ce:5c:2b:39:9a:14: d2:9d:7d:4e:28:e8:a0:15:a7:a6:05:c7:03:0a:94:27:cd:35: 74:2b:b2:d9:fc:c8:01:3d:07:86:2d:19:f8:d7:5a:d0:68:50: 36:34:60:5b:51:68:49:fd:52:c1:9e:3c:b5:f2:eb:e6:26:5a: 15:22:fc:a3:05:cd:4e:41:b0:f8:fe:92:a2:d4:d7:70:5c:7f: 3b:93:96:df:a2:82:53:60:3f:cd:dc:1a:70:40:a4:6e:4d:13: 83:ed:cf:4b:58:ad:6c:74:03:86:98:4c:2d:d2:4d:ab:52:db: 8a:90:2c:4b:5c:fc:15:63:7d:3f:df:1d:e0:5a:d5:80:4d:65: 04:79:53:0b:67:8c:60:91:12:71:44:24:7d:78:61:0d:be:5d: 78:ae:77:73:87:ea:5a:12:4e:c9:1c:11:6c:03:1e:86:f7:cf: 2c:dd:df:59:a5:af:92:a6:1d:9d:0b:f5:fd:eb:74:7c:b7:41: c1:2b:27:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTMxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ4YS04NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAFV02B/S2B/wonrmmwK+YrvrULgq1bBdoqVxX4SGF+wVaeH3A4dXCAUjo3S eMqwJM/fWxVwiQ1jKJn7uaQjLpvP0X5wGdhHlcveKn9ermEeImptqyAaESZKlWQ5 nkF8ALvmX+ipynXhVD/vjx2IdvvJ5+Xelxoikexb3FrB7Jb6ZUVyBJSrK/Luab25 72UzbNtn6qcP2HGkuSOp2iYRRPrtxFOI+Bfr3elb2Qwrw3mPJcwhRZsIemqP6APi AYge0lcoaOyTycfsGsI6BnxPYGPWWi/3J+TmYswkEagR5OFIvZFbMHv/Qc4+aQDE OYecGYqPZNYVa2V4CImOTf6epwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB0hkjfQ /9hLXl4nL8Zo1Jy8Y/RDMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkExM0Y2Njg4 NkIxMTFFRDhFMzQxNjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnMJADBAFnrZIwDQYJKoZIhvcNAQELBQADggEBAD3XCKcu JeIHCXPSE2sVg7feF4vpBpqeZ3lxvqcttSXRMpg/xB94wEASxkg3OWIhbWNlHJMt TReCv2FcL2VOLX2ZSc5cKzmaFNKdfU4o6KAVp6YFxwMKlCfNNXQrstn8yAE9B4Yt GfjXWtBoUDY0YFtRaEn9UsGePLXy6+YmWhUi/KMFzU5BsPj+kqLU13BcfzuTlt+i glNgP83cGnBApG5NE4Ptz0tYrWx0A4aYTC3STatS24qQLEtc/BVjfT/fHeBa1YBN ZQR5UwtnjGCREnFEJH14YQ2+XXiud3OH6loSTskcEWwDHob3zyzd31mlr5KmHZ0L 9f3rdHy3QcErJ8Y= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org