$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa File: 2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa (raw, json) Hash identifier: a9uY8Bs3DNMDnjHDd4wsiRK3b3BJ6STOEj2X11cl35w= Subject key identifier: E1:AC:9B:8E:D3:41:5C:09:A8:C2:DD:E2:3A:7A:C7:93:4D:5C:21:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CE5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa Signing time: Wed 01 Nov 2023 07:41:39 +0000 ROA not before: Wed 01 Nov 2023 07:41:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136698 IP address blocks: 103.83.8.0/22 maxlen: 24 103.147.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31973 (0x7ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 1 07:41:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65420133-adb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:2f:1a:de:85:9e:62:b3:63:2c:dd:7f:d6: 3f:69:2f:86:e3:be:2f:19:c8:b9:bc:d3:94:6e:59: 94:f9:e9:fd:98:b3:e0:5c:96:44:15:40:8a:25:74: ce:59:ef:1f:7f:17:34:fc:06:8c:3d:5c:0c:04:8e: 39:5c:7e:59:d4:31:bf:a9:7b:01:5b:a3:9d:81:86: 83:10:60:f9:77:75:88:51:37:66:e7:33:b2:08:ae: 40:34:2f:bf:ed:77:42:71:87:31:20:fb:36:dd:38: f2:c4:87:43:cc:f7:23:20:83:62:62:cf:2a:f3:53: 00:be:2e:93:01:7f:15:dd:92:97:f4:67:dc:cb:b1: 66:e5:23:ff:16:30:fe:5e:5f:c9:da:07:2c:04:d6: 6f:e0:fd:e7:29:ef:c7:39:05:6f:11:5a:65:22:23: 33:42:1d:c1:c7:39:4e:98:c0:43:fb:1e:2d:39:45: 4e:02:83:32:59:27:c8:62:e1:7f:ca:75:e0:5f:c3: cd:13:0f:99:88:89:1e:6a:79:01:62:87:29:7a:84: 7f:38:42:68:5d:4e:ee:f6:fe:39:0f:99:7b:76:6d: dd:7d:01:1d:22:76:ca:da:9a:c4:18:5a:4d:93:8e: 82:2d:ed:44:3c:51:9e:1a:3c:48:43:db:ee:70:aa: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AC:9B:8E:D3:41:5C:09:A8:C2:DD:E2:3A:7A:C7:93:4D:5C:21:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B17B8B0787D11EEAFFD2A4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.8.0/22 103.147.94.0/23 Signature Algorithm: sha256WithRSAEncryption 21:cd:fe:fe:4f:fa:6e:7b:17:2d:db:8f:94:c4:12:4a:c2:15: 02:7e:f8:02:42:26:e6:0d:97:f5:dc:26:f5:6c:f2:a4:bb:64: 0a:56:38:ac:3c:8e:de:a4:ce:13:e6:fc:da:cc:bb:27:a5:69: e1:91:0d:38:68:4b:70:8a:4d:64:62:ef:96:1e:2e:c6:6f:b9: 55:4c:d1:16:e8:ad:96:93:13:38:88:a5:83:ff:2b:3c:db:7f: 9a:47:70:ba:fd:6c:f9:21:b9:fc:22:b1:6e:0c:24:04:37:37: 7c:69:70:3c:f4:ae:95:d3:20:81:9d:e4:a0:79:48:42:37:53: fb:0d:e8:39:39:83:97:82:fd:d5:de:2f:6f:bf:96:53:1b:d5: 3c:7c:15:ce:04:34:0e:cf:63:7e:3b:75:54:8a:a4:a6:f9:b7: ce:e4:43:9d:4e:5c:d4:90:a7:61:ba:16:e5:82:bc:5c:02:eb: be:24:b1:67:29:35:a7:28:6c:40:bf:dd:32:01:2f:26:c7:a5: 48:e9:63:4a:1b:68:8a:32:84:ba:f6:59:9e:11:bd:e3:8f:fd: 64:cc:45:20:be:89:4b:97:70:50:a3:62:a2:90:cc:c8:cb:03: 7c:1a:c7:fc:31:43:e7:5f:20:f7:5e:b4:d0:f1:cc:d7:32:fa: 5d:ba:e4:45 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICfOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTAxMDc0MTM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQyMDEzMy1hZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpIvGt6FnmKzYyzdf9Y/aS+G474vGci5vNOUblmU+en9mLPgXJZEFUCKJXTO We8ffxc0/AaMPVwMBI45XH5Z1DG/qXsBW6OdgYaDEGD5d3WIUTdm5zOyCK5ANC+/ 7XdCcYcxIPs23TjyxIdDzPcjIINiYs8q81MAvi6TAX8V3ZKX9Gfcy7Fm5SP/FjD+ Xl/J2gcsBNZv4P3nKe/HOQVvEVplIiMzQh3BxzlOmMBD+x4tOUVOAoMyWSfIYuF/ ynXgX8PNEw+ZiIkeankBYocpeoR/OEJoXU7u9v45D5l7dm3dfQEdInbK2prEGFpN k46CLe1EPFGeGjxIQ9vucKohOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOGsm47T QVwJqMLd4jp6x5NNXCF6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkIxN0I4QjA3 ODdEMTFFRUFGRkQyQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnUwgDBAFnk14wDQYJKoZIhvcNAQELBQADggEBACHN/v5P +m57Fy3bj5TEEkrCFQJ++AJCJuYNl/XcJvVs8qS7ZApWOKw8jt6kzhPm/NrMuyel aeGRDThoS3CKTWRi75YeLsZvuVVM0RborZaTEziIpYP/Kzzbf5pHcLr9bPkhufwi sW4MJAQ3N3xpcDz0rpXTIIGd5KB5SEI3U/sN6Dk5g5eC/dXeL2+/llMb1Tx8Fc4E NA7PY347dVSKpKb5t87kQ51OXNSQp2G6FuWCvFwC674ksWcpNacobEC/3TIBLybH pUjpY0obaIoyhLr2WZ4RveOP/WTMRSC+iUuXcFCjYqKQzMjLA3wax/wxQ+dfIPde tNDxzNcy+l265EU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org