$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa File: 2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa (raw, json) Hash identifier: IssVVfcLqPt6Lh5T/9HpqBWBhbAiMZqPIsSPXBLzOMI= Subject key identifier: 57:1D:68:3F:58:98:D8:8F:A5:E1:BB:7E:82:6B:E1:0A:C1:D1:1B:4D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7066 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa Signing time: Wed 10 May 2023 16:43:24 +0000 ROA not before: Wed 10 May 2023 16:43:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149537 IP address blocks: 103.182.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28774 (0x7066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:43:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9ac-9231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:1b:c5:4b:13:2b:83:59:e7:d7:97:e9:13: cb:e9:ba:a2:71:f0:70:f3:14:ea:04:ee:ad:05:4a: d7:b4:ba:c5:3a:62:7a:cc:3b:3a:54:e7:42:ca:b1: dc:5b:9b:d1:0a:b7:b3:9d:e3:8b:9e:58:83:3f:61: 13:26:94:fe:1e:42:54:62:a8:52:23:83:a9:cf:77: f8:ec:c2:1b:81:de:33:f8:90:d1:fb:ae:c5:87:03: aa:e3:0b:c9:34:1c:77:7d:a0:e2:77:4f:66:c8:2b: 0b:8c:29:24:2e:39:ba:d4:34:7e:23:2f:bf:49:39: 54:68:21:0e:f7:00:74:b2:b9:4d:7d:ab:9c:38:72: 62:06:af:c8:f8:36:7e:a6:8b:95:c5:e0:d6:37:05: 5a:7f:ea:21:1a:9a:18:74:e4:f3:29:a0:cf:82:23: 87:f8:3d:40:19:ef:72:68:28:86:1c:cc:64:54:73: 09:a4:e0:fd:b2:47:4f:68:2a:a4:00:cd:25:4d:e7: fe:38:74:29:33:ff:13:c1:cc:0a:66:8b:76:7e:f0: 20:31:52:aa:d9:3b:7b:ed:ae:1d:11:79:58:2d:1a: f1:c2:e3:d6:ea:68:c8:2f:1c:59:ec:c1:bd:6f:29: 51:62:63:90:f4:67:68:f8:00:5a:6e:10:fc:d9:fd: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1D:68:3F:58:98:D8:8F:A5:E1:BB:7E:82:6B:E1:0A:C1:D1:1B:4D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:cd:c9:39:0e:e9:df:f3:26:a8:15:95:88:3b:6d:0f:3d:81: 3b:2d:3f:62:f2:81:e9:02:b9:e1:1e:93:c5:22:7f:f7:0c:a0: ed:5c:cc:d7:4a:cc:30:2b:7d:44:21:f8:43:3d:38:66:03:3e: b1:1d:49:55:b8:a9:4c:f1:f5:f3:42:3b:a7:a0:2a:b1:ba:c9: c4:a0:83:0d:63:0e:19:f3:d8:17:cd:53:47:ab:a4:32:a6:51: 03:36:ad:53:38:2c:6d:c2:f7:7f:a5:33:b3:e4:46:66:d9:9a: db:b7:87:c0:25:31:17:0f:40:15:a9:fb:e9:c6:23:ff:a0:ff: 03:43:d5:da:3c:56:94:97:d9:69:ad:1a:27:2b:13:8d:7b:c5: 8a:d8:fa:d4:f8:31:5d:40:dd:cd:7d:65:91:ef:34:1e:39:7a: 6c:68:42:80:7b:e2:4f:55:58:61:d9:8d:f0:16:3a:95:ca:3b: bd:49:6c:0b:24:b4:c9:eb:87:eb:b6:a0:3a:7f:06:27:1a:5a: 62:e0:21:4c:2f:b3:f2:8d:95:cf:da:ac:8c:0f:b0:07:92:b5: c2:43:a3:aa:cb:b5:23:e8:c2:4e:3f:1d:df:e7:41:a0:c1:08: 87:e0:76:f3:32:d1:f9:76:2f:95:61:48:24:f6:e1:74:6a:3e: c5:5a:13:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlhYy05MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufAbxUsTK4NZ59eX6RPL6bqicfBw8xTqBO6tBUrXtLrFOmJ6zDs6VOdCyrHc W5vRCrezneOLnliDP2ETJpT+HkJUYqhSI4Opz3f47MIbgd4z+JDR+67FhwOq4wvJ NBx3faDid09myCsLjCkkLjm61DR+Iy+/STlUaCEO9wB0srlNfaucOHJiBq/I+DZ+ pouVxeDWNwVaf+ohGpoYdOTzKaDPgiOH+D1AGe9yaCiGHMxkVHMJpOD9skdPaCqk AM0lTef+OHQpM/8TwcwKZot2fvAgMVKq2Tt77a4dEXlYLRrxwuPW6mjILxxZ7MG9 bylRYmOQ9Gdo+ABabhD82f2ryQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFcdaD9Y mNiPpeG7foJr4QrB0RtNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkUyM0I2RDZB NUU3MTFFQzlGQTlBRDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnttowDQYJKoZIhvcNAQELBQADggEBAJzNyTkO6d/zJqgV lYg7bQ89gTstP2LygekCueEek8Uif/cMoO1czNdKzDArfUQh+EM9OGYDPrEdSVW4 qUzx9fNCO6egKrG6ycSggw1jDhnz2BfNU0erpDKmUQM2rVM4LG3C93+lM7PkRmbZ mtu3h8AlMRcPQBWp++nGI/+g/wND1do8VpSX2WmtGicrE417xYrY+tT4MV1A3c19 ZZHvNB45emxoQoB74k9VWGHZjfAWOpXKO71JbAsktMnrh+u2oDp/BicaWmLgIUwv s/KNlc/arIwPsAeStcJDo6rLtSPowk4/Hd/nQaDBCIfgdvMy0fl2L5VhSCT24XRq PsVaE5c= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org