$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E96BCB8EE3311EDAD622940C4F9AE02.roa File: 2E96BCB8EE3311EDAD622940C4F9AE02.roa (raw, json) Hash identifier: IUM9TVfJiGwoPEZW8wZv45p7VtZJhfKUzIUh/DN53Xk= Subject key identifier: EC:F4:03:78:62:24:45:C5:BD:7F:AE:26:A9:56:C3:E0:81:6E:24:55 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6ED4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E96BCB8EE3311EDAD622940C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:54 +0000 ROA not before: Wed 10 May 2023 16:35:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141536 IP address blocks: 103.103.134.0/24 maxlen: 24 103.103.135.0/24 maxlen: 24 103.162.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28372 (0x6ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7ea-30d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:ce:d2:ab:d2:e6:5a:6a:40:70:f8:50:32: ee:62:68:d2:91:4b:b9:cd:5f:40:36:b2:5a:20:8a: 4e:33:6d:50:4d:4c:c2:2f:94:19:14:a9:0b:6f:1f: 52:a0:4d:ef:7d:65:eb:8a:47:b3:6c:bc:1a:4b:17: a2:2e:76:0b:56:80:06:39:69:a3:65:76:03:2d:95: 16:ba:cd:3b:f8:df:e8:db:fe:f2:bd:22:c0:28:d6: 59:77:87:a7:d3:4f:d5:ae:f6:90:bd:1c:53:a2:41: 33:0a:a5:2a:9b:a8:bb:51:a6:d4:81:89:7a:4e:6f: a8:d2:9d:7a:42:75:0d:56:36:b5:d1:56:34:8b:ca: 22:c1:43:58:d2:3f:f7:b2:18:1f:9b:4a:6c:ad:1e: 42:f8:f0:32:ef:db:37:79:31:19:23:33:cd:b2:d8: 6e:ff:92:94:8b:1b:6d:d4:05:cc:ea:e7:5a:8c:12: 2e:f0:b2:d4:32:c7:65:f1:48:d7:38:08:6d:65:33: 89:b7:cc:d0:28:ee:cf:1d:d0:ee:f7:11:34:db:42: b0:78:cc:c3:b7:22:95:a6:a4:36:b6:e8:94:4c:6e: 9e:07:b0:4d:10:92:43:8a:33:49:5a:21:41:7b:5e: a0:59:7e:82:2b:bc:6f:c0:a9:5a:80:09:1e:a1:4b: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F4:03:78:62:24:45:C5:BD:7F:AE:26:A9:56:C3:E0:81:6E:24:55 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E96BCB8EE3311EDAD622940C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.134.0/23 103.162.78.0/23 Signature Algorithm: sha256WithRSAEncryption 67:af:7a:83:c8:9e:86:6e:71:a8:1d:bb:ef:23:f0:5b:2b:97: 0b:22:2c:bd:d2:e8:62:18:a7:44:53:1c:cf:3f:e0:cf:eb:52: 15:34:e3:16:f0:f4:dd:36:29:53:dd:74:a2:cc:50:12:25:6b: 4f:ca:ea:fa:ce:a8:51:53:f8:96:8f:1f:79:5d:6d:b0:44:4c: 94:86:c7:5d:98:90:49:dd:a0:fc:c2:28:4b:03:8a:71:be:c1: cf:cb:cc:37:64:a1:df:b4:5f:06:fe:11:2a:a1:a1:9e:f0:72: 45:9d:22:6f:45:6d:b4:01:f9:6f:63:12:2e:93:dc:3d:f3:d8: 78:15:eb:c2:df:53:5b:56:ac:dc:73:de:1b:00:9f:6b:d3:66: 0f:20:75:b8:8d:9f:84:d3:ba:c1:a9:a1:1b:b9:86:c5:64:00: 89:be:73:5b:fc:7c:39:55:06:3f:70:2c:87:df:82:4c:33:26: 55:a1:6e:a2:43:7b:3c:5a:53:ec:0f:f3:d9:cd:20:32:53:90: 2d:ff:40:eb:51:28:b2:94:a5:3c:b4:d3:c5:ab:ab:a5:96:52: 64:8f:33:78:aa:f4:51:64:ad:8e:2e:9a:90:ec:31:ec:4b:a4: 13:bb:99:da:e0:63:92:95:41:ed:d2:3a:6c:c4:c0:2f:5d:b2: c7:59:9a:5e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdlYS0zMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEDO0qvS5lpqQHD4UDLuYmjSkUu5zV9ANrJaIIpOM21QTUzCL5QZFKkLbx9S oE3vfWXrikezbLwaSxeiLnYLVoAGOWmjZXYDLZUWus07+N/o2/7yvSLAKNZZd4en 00/VrvaQvRxTokEzCqUqm6i7UabUgYl6Tm+o0p16QnUNVja10VY0i8oiwUNY0j/3 shgfm0psrR5C+PAy79s3eTEZIzPNsthu/5KUixtt1AXM6udajBIu8LLUMsdl8UjX OAhtZTOJt8zQKO7PHdDu9xE020KweMzDtyKVpqQ2tuiUTG6eB7BNEJJDijNJWiFB e16gWX6CK7xvwKlagAkeoUsC5QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOz0A3hi JEXFvX+uJqlWw+CBbiRVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkU5NkJDQjhF RTMzMTFFREFENjIyOTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnZ4YDBAFnok4wDQYJKoZIhvcNAQELBQADggEBAGeveoPI noZucagdu+8j8FsrlwsiLL3S6GIYp0RTHM8/4M/rUhU04xbw9N02KVPddKLMUBIl a0/K6vrOqFFT+JaPH3ldbbBETJSGx12YkEndoPzCKEsDinG+wc/LzDdkod+0Xwb+ ESqhoZ7wckWdIm9FbbQB+W9jEi6T3D3z2HgV68LfU1tWrNxz3hsAn2vTZg8gdbiN n4TTusGpoRu5hsVkAIm+c1v8fDlVBj9wLIffgkwzJlWhbqJDezxaU+wP89nNIDJT kC3/QOtRKLKUpTy008Wrq6WWUmSPM3iq9FFkrY4umpDsMexLpBO7mdrgY5KVQe3S OmzEwC9dssdZml4= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:16 2024 by rpki-client on console-fra.rpki-client.org