$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E03982E06C911EB9CB18983C4F9AE02.roa File: 2E03982E06C911EB9CB18983C4F9AE02.roa (raw, json) Hash identifier: f/Yfx9Qu7fRsAadSievLPF3XkB2MrP6RZkIQHW8GJGs= Subject key identifier: 98:01:B4:F5:22:79:BC:14:83:B2:44:37:E2:26:95:B0:C3:AC:91:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C29 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E03982E06C911EB9CB18983C4F9AE02.roa Signing time: Wed 10 May 2023 16:23:12 +0000 ROA not before: Wed 10 May 2023 16:23:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135847 IP address blocks: 103.141.54.0/23 maxlen: 24 103.181.238.0/23 maxlen: 24 2001:df1:a840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27689 (0x6c29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4ef-48a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:91:89:97:c3:bf:ce:f8:90:55:f6:e8:7d: 06:ae:6a:9d:3f:a4:1b:4f:68:c5:b5:92:d2:75:29: 0f:80:47:ee:4b:13:05:8a:6b:c6:67:a2:df:11:da: aa:2b:89:a4:87:d1:d8:9b:06:a9:da:c4:d6:48:42: 51:44:c8:21:52:4b:76:ca:ab:52:3a:af:f8:49:3f: e1:a5:2d:53:d9:8f:7a:17:2d:85:80:a5:21:a1:65: d9:75:b1:ce:e0:a5:9e:09:ad:59:df:54:e4:b7:f6: 90:ce:a4:86:b7:5f:65:1a:47:51:6e:49:55:85:d4: a0:af:7e:7a:5e:0d:7c:23:89:b0:8b:e1:9a:d0:16: 59:ca:f0:1a:46:ed:5e:6a:eb:fe:7a:17:04:6c:0f: 96:25:b3:13:b5:ce:44:d7:87:7f:7e:aa:15:79:69: 65:0b:5f:97:5c:88:3e:c0:f8:a8:ef:9e:88:08:64: d3:61:9a:f2:2b:70:44:2a:b8:7f:2b:ff:58:c4:48: 1c:26:9c:27:19:2e:b5:1a:2a:52:0a:41:67:52:85: 07:b8:43:76:17:3f:d3:e4:3a:be:62:b7:c3:b0:8b: b9:f6:16:81:74:2c:d9:42:a4:45:95:15:5f:f3:06: d8:e5:1c:40:74:83:e6:ac:5f:19:24:ad:f1:08:5b: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:01:B4:F5:22:79:BC:14:83:B2:44:37:E2:26:95:B0:C3:AC:91:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E03982E06C911EB9CB18983C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.54.0/23 103.181.238.0/23 IPv6: 2001:df1:a840::/48 Signature Algorithm: sha256WithRSAEncryption 97:bf:f5:10:3d:0c:f9:72:37:e6:16:db:b7:11:79:7b:7c:06: e0:11:8e:14:12:bb:23:bd:96:43:a5:d7:6d:91:cd:7b:79:03: 99:ac:17:b9:8c:9a:6d:3c:9e:56:1c:43:ca:a7:96:dc:fa:97: e4:28:9f:49:73:2d:03:30:53:3a:18:eb:e7:12:c1:2b:44:94: 92:0c:81:4d:a2:07:82:3b:af:1a:5c:19:50:45:4b:b4:61:cd: 38:df:5d:a5:df:95:da:86:e0:96:22:30:0e:8f:5c:c0:bc:a4: 41:8f:5d:8c:c0:6f:ea:20:f1:ac:05:30:04:34:a0:61:e3:1d: 1d:37:27:03:81:66:67:32:91:87:56:bb:18:bd:f8:93:72:ef: dc:ee:e8:3f:85:97:29:b7:b4:86:9e:3e:ad:8e:fc:0b:28:79: 2d:b7:3d:61:c1:7d:3e:c2:9a:37:a0:ea:a7:be:04:7c:ee:13: 9e:36:27:91:07:be:28:b2:f1:36:ce:bb:9d:d5:1e:14:17:a6: 87:bd:12:e4:79:64:84:fd:60:62:3f:f3:75:0c:72:39:95:58: 2b:17:bf:06:e7:38:0c:ee:fc:18:2c:c0:9c:c6:55:9e:db:f3: c9:39:3a:b5:ca:21:b2:4d:5f:ad:1f:4e:ab:37:13:a1:21:be: 59:81:4b:b3 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRlZi00OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17qRiZfDv874kFX26H0GrmqdP6QbT2jFtZLSdSkPgEfuSxMFimvGZ6LfEdqq K4mkh9HYmwap2sTWSEJRRMghUkt2yqtSOq/4ST/hpS1T2Y96Fy2FgKUhoWXZdbHO 4KWeCa1Z31Tkt/aQzqSGt19lGkdRbklVhdSgr356Xg18I4mwi+Ga0BZZyvAaRu1e auv+ehcEbA+WJbMTtc5E14d/fqoVeWllC1+XXIg+wPio756ICGTTYZryK3BEKrh/ K/9YxEgcJpwnGS61GipSCkFnUoUHuEN2Fz/T5Dq+YrfDsIu59haBdCzZQqRFlRVf 8wbY5RxAdIPmrF8ZJK3xCFuvSwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJgBtPUi ebwUg7JEN+ImlbDDrJGxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkUwMzk4MkUw NkM5MTFFQjlDQjE4OTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnjTYDBAFnte4wDwQCAAIwCQMHACABDfGoQDANBgkqhkiG 9w0BAQsFAAOCAQEAl7/1ED0M+XI35hbbtxF5e3wG4BGOFBK7I72WQ6XXbZHNe3kD mawXuYyabTyeVhxDyqeW3PqX5CifSXMtAzBTOhjr5xLBK0SUkgyBTaIHgjuvGlwZ UEVLtGHNON9dpd+V2obgliIwDo9cwLykQY9djMBv6iDxrAUwBDSgYeMdHTcnA4Fm ZzKRh1a7GL34k3Lv3O7oP4WXKbe0hp4+rY78Cyh5Lbc9YcF9PsKaN6Dqp74EfO4T njYnkQe+KLLxNs67ndUeFBemh70S5HlkhP1gYj/zdQxyOZVYKxe/Buc4DO78GCzA nMZVntvzyTk6tcohsk1frR9OqzcToSG+WYFLsw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org