$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B7137A0D37311EDBB6E2438C4F9AE02.roa File: 2B7137A0D37311EDBB6E2438C4F9AE02.roa (raw, json) Hash identifier: ocgeqLYn49cvxjhtuDyVo7qAQbXKwbQ9rXAI04VxYHU= Subject key identifier: A4:76:5E:C9:08:23:91:A4:F2:E1:08:8F:8E:BF:94:55:5A:D7:4C:BA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7114 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B7137A0D37311EDBB6E2438C4F9AE02.roa Signing time: Wed 10 May 2023 16:46:31 +0000 ROA not before: Wed 10 May 2023 16:46:31 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150599 IP address blocks: 103.117.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28948 (0x7114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:31 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca66-604f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:45:43:b3:66:a1:58:f2:8e:43:12:c4:d1:38: 48:37:21:af:ab:10:8a:bd:7a:be:9e:85:5d:11:fc: e7:0a:12:30:74:16:45:2c:82:13:ac:87:2c:c1:3e: 92:4a:51:57:da:d8:3e:1b:a0:0d:b4:5e:0f:02:1f: 5a:7f:9f:95:08:e8:d5:6c:9a:0c:3d:d3:c1:51:74: ca:e5:8b:e3:e4:33:7b:c2:82:5f:d7:dc:24:db:b1: 4f:1d:a9:84:39:02:53:2e:5f:21:b3:a8:bd:88:a4: d9:e8:14:dd:fe:35:24:04:b8:9f:4f:f6:2d:99:8e: d8:e8:47:c5:cb:d5:f9:85:23:77:85:1f:85:0a:74: 3c:12:13:4a:c1:53:dd:5f:64:18:3f:83:96:19:d8: f8:90:ff:a8:3c:7c:a4:a7:e2:13:48:83:db:49:92: 81:0f:64:70:70:e3:c3:02:a4:49:1a:8a:00:7a:4b: cd:0f:56:2e:1a:2a:f7:fd:b5:e8:04:24:1a:f6:0a: e9:ac:e6:f9:79:b2:6c:e8:ca:68:67:c1:60:57:bf: 1e:fb:8a:21:8d:bb:df:56:71:9d:24:72:c4:12:56: e6:37:fb:b3:b1:6a:c2:70:1e:b1:52:6b:fd:9f:4c: 30:42:b2:a3:5a:fd:f0:c2:37:3f:08:96:6e:e1:ef: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:76:5E:C9:08:23:91:A4:F2:E1:08:8F:8E:BF:94:55:5A:D7:4C:BA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B7137A0D37311EDBB6E2438C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.44.0/23 Signature Algorithm: sha256WithRSAEncryption 03:31:c3:f2:e6:30:41:27:4c:dd:74:a2:cb:80:ed:dd:9f:6a: 0f:db:a3:bf:46:5b:9c:34:3f:b1:be:60:41:ba:27:46:01:85: 55:53:23:dd:01:23:c9:a6:e0:43:5a:e3:41:d9:0e:e7:d9:72: 7b:da:f9:8e:ef:31:ed:80:2a:a1:6f:33:15:3c:e7:56:b5:f9: 57:dd:fd:6a:d5:c8:a4:a9:c7:10:48:c4:f3:a8:5b:64:45:d9: 33:bc:92:6a:4e:0c:98:ab:c6:43:2a:58:b1:e6:4a:61:7b:c1: f5:c4:a2:17:fe:bc:22:44:46:ba:1d:d1:70:2a:90:04:3c:e5: 29:9c:27:fa:01:8e:6d:15:04:5f:da:48:4c:da:32:4b:a5:11: cf:20:cf:62:47:6f:20:82:1d:0b:36:2e:78:4a:45:e5:c3:40: 10:9a:d7:b5:ed:4d:23:22:e8:fc:2b:1e:b4:87:a3:c9:d4:b0: 39:74:75:63:4c:e6:94:a1:4e:71:16:92:b3:65:e3:ac:ff:05: 0e:65:ca:7b:21:cf:81:ba:91:44:8a:fc:3c:c7:93:f3:cf:72: ed:b9:17:43:5c:59:42:e6:a2:14:00:40:f1:76:76:ba:d4:26: 2d:46:3b:bf:43:36:2d:44:38:b6:ca:d0:db:0a:9a:bd:e9:bd: d8:ff:c6:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjMxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E2Ni02MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30VDs2ahWPKOQxLE0ThINyGvqxCKvXq+noVdEfznChIwdBZFLIITrIcswT6S SlFX2tg+G6ANtF4PAh9af5+VCOjVbJoMPdPBUXTK5Yvj5DN7woJf19wk27FPHamE OQJTLl8hs6i9iKTZ6BTd/jUkBLifT/YtmY7Y6EfFy9X5hSN3hR+FCnQ8EhNKwVPd X2QYP4OWGdj4kP+oPHykp+ITSIPbSZKBD2RwcOPDAqRJGooAekvND1YuGir3/bXo BCQa9grprOb5ebJs6MpoZ8FgV78e+4ohjbvfVnGdJHLEElbmN/uzsWrCcB6xUmv9 n0wwQrKjWv3wwjc/CJZu4e/CvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKR2XskI I5Gk8uEIj46/lFVa10y6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkI3MTM3QTBE MzczMTFFREJCNkUyNDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFndSwwDQYJKoZIhvcNAQELBQADggEBAAMxw/LmMEEnTN10 osuA7d2fag/bo79GW5w0P7G+YEG6J0YBhVVTI90BI8mm4ENa40HZDufZcnva+Y7v Me2AKqFvMxU851a1+Vfd/WrVyKSpxxBIxPOoW2RF2TO8kmpODJirxkMqWLHmSmF7 wfXEohf+vCJERrod0XAqkAQ85SmcJ/oBjm0VBF/aSEzaMkulEc8gz2JHbyCCHQs2 LnhKReXDQBCa17XtTSMi6PwrHrSHo8nUsDl0dWNM5pShTnEWkrNl46z/BQ5lynsh z4G6kUSK/DzHk/PPcu25F0NcWULmohQAQPF2drrUJi1GO79DNi1EOLbK0NsKmr3p vdj/xsQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org