$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa File: 2D812ABA2A8111ECA6F7183CC4F9AE02.roa (raw, json) Hash identifier: ZhPk4u/93uIEFMnVfZyufPiI58Pe/yp6QWT5cDLAcy0= Subject key identifier: 42:C8:FD:62:C0:EF:1B:6D:42:0A:FC:3E:1B:97:28:3F:97:5C:D8:5E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F22 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa Signing time: Wed 10 May 2023 16:37:21 +0000 ROA not before: Wed 10 May 2023 16:37:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141843 IP address blocks: 103.167.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28450 (0x6f22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc840-526d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:72:31:00:eb:7c:8e:9b:f4:e0:41:04:b9: a7:95:b0:f2:77:25:cb:cc:a6:8b:6c:ad:9d:8e:7e: 13:c4:49:c1:5e:6e:e4:fe:34:90:97:3b:31:45:e4: cd:b8:ac:ef:83:65:07:23:03:56:48:5a:28:18:d5: 53:01:2c:de:68:77:12:61:61:b4:eb:8b:25:8a:d4: fa:39:38:9e:16:99:c0:79:d0:47:6e:99:b1:27:bd: 03:ea:00:90:30:a4:79:41:5e:69:13:f4:0e:ca:11: 08:fa:ac:0a:4c:a2:a1:1c:40:d0:75:ec:b5:bf:2e: ce:f6:f4:7a:8c:14:61:1e:93:58:51:6c:4d:3c:c2: dc:00:92:89:6e:27:a3:12:0a:9b:79:e0:f7:a9:83: 98:8b:65:fd:77:3c:9b:8a:d7:32:66:14:9d:85:34: 69:55:dd:57:35:0a:65:89:88:24:54:96:b4:01:47: bb:ab:db:15:be:71:a3:9e:a5:5a:64:66:45:28:92: 71:1c:dd:bf:10:a5:dc:58:03:44:a1:13:ca:87:05: f4:64:12:e1:e5:5e:ad:4a:53:43:06:9c:e2:15:62: da:1f:4c:c9:2c:88:5b:ae:9b:79:5d:2d:89:e4:44: 0c:db:a4:0c:82:06:0c:13:42:96:1a:17:d3:0a:6c: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C8:FD:62:C0:EF:1B:6D:42:0A:FC:3E:1B:97:28:3F:97:5C:D8:5E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D812ABA2A8111ECA6F7183CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.223.0/24 Signature Algorithm: sha256WithRSAEncryption 04:91:a7:85:a4:82:54:60:e1:f7:73:a0:20:67:6e:d2:51:92: 41:2d:d1:e7:c4:6f:77:c7:74:c7:de:95:71:58:f5:97:71:03: bf:9a:47:5c:34:bb:1d:f1:33:c6:33:47:04:aa:57:f8:8e:0f: ad:ee:65:76:8e:de:ba:a1:75:f9:2a:a0:58:bf:5d:01:f2:0a: fe:d2:2d:fa:30:57:9b:d5:5a:28:80:b8:3a:1d:64:d1:05:c3: 1d:25:fc:91:69:66:2c:8c:da:ce:c4:d6:9e:49:6b:d4:d5:12: 37:1a:43:8f:97:39:ab:7c:3f:a8:14:ff:b8:98:ae:bf:00:10: aa:f7:9c:a1:da:19:9f:e1:1e:23:1e:bb:36:5d:d5:b5:6b:3e: d9:91:49:00:75:73:5e:f0:15:36:95:96:de:3c:ba:eb:02:82: cb:55:c6:cf:b1:ea:ac:35:d9:5c:36:6d:70:bd:0a:f2:63:1d: a5:04:cb:98:66:ec:ea:a4:ce:37:1d:4b:6f:c7:b2:4e:28:67: c9:ae:e5:fb:a7:ed:89:ca:cf:3f:c3:b6:d2:cd:4f:8e:af:32: ab:7d:7c:7e:45:6c:2b:e0:bf:45:b5:d9:68:d9:c7:f1:93:65: 92:ed:b9:d9:ca:bb:17:ea:00:e1:3e:5d:75:be:29:a0:1e:e9: e5:1c:05:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzIxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg0MC01MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1S9yMQDrfI6b9OBBBLmnlbDydyXLzKaLbK2djn4TxEnBXm7k/jSQlzsxReTN uKzvg2UHIwNWSFooGNVTASzeaHcSYWG064slitT6OTieFpnAedBHbpmxJ70D6gCQ MKR5QV5pE/QOyhEI+qwKTKKhHEDQdey1vy7O9vR6jBRhHpNYUWxNPMLcAJKJbiej EgqbeeD3qYOYi2X9dzybitcyZhSdhTRpVd1XNQpliYgkVJa0AUe7q9sVvnGjnqVa ZGZFKJJxHN2/EKXcWANEoRPKhwX0ZBLh5V6tSlNDBpziFWLaH0zJLIhbrpt5XS2J 5EQM26QMggYME0KWGhfTCmzkbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFELI/WLA 7xttQgr8PhuXKD+XXNheMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkQ4MTJBQkEy QTgxMTFFQ0E2RjcxODNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnp98wDQYJKoZIhvcNAQELBQADggEBAASRp4WkglRg4fdz oCBnbtJRkkEt0efEb3fHdMfelXFY9ZdxA7+aR1w0ux3xM8YzRwSqV/iOD63uZXaO 3rqhdfkqoFi/XQHyCv7SLfowV5vVWiiAuDodZNEFwx0l/JFpZiyM2s7E1p5Ja9TV EjcaQ4+XOat8P6gU/7iYrr8AEKr3nKHaGZ/hHiMeuzZd1bVrPtmRSQB1c17wFTaV lt48uusCgstVxs+x6qw12Vw2bXC9CvJjHaUEy5hm7OqkzjcdS2/Hsk4oZ8mu5fun 7YnKzz/DttLNT46vMqt9fH5FbCvgv0W12WjZx/GTZZLtudnKuxfqAOE+XXW+KaAe 6eUcBd8= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:15 2024 by rpki-client on console-ams.rpki-client.org