$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F2F6DF8303011EDB7EB8078C4F9AE02.roa File: 2F2F6DF8303011EDB7EB8078C4F9AE02.roa (raw, json) Hash identifier: /P8dmUH91SsGcV/V+jDOiB/KIVBLutrOHzedh4HghK0= Subject key identifier: D6:A6:0C:A2:EF:43:F2:3B:9D:EE:BD:51:94:04:40:D5:BF:DB:C8:53 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B05 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F2F6DF8303011EDB7EB8078C4F9AE02.roa Signing time: Wed 10 May 2023 16:17:38 +0000 ROA not before: Wed 10 May 2023 16:17:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134254 IP address blocks: 43.243.172.0/22 maxlen: 24 103.226.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27397 (0x6b05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:17:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3a2-2504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:c4:9b:f8:94:34:5b:21:be:ea:fc:c3:ac: 86:29:d7:0c:d2:ec:a1:0b:d3:3f:5d:5d:b8:45:77: c0:10:12:92:66:56:48:0b:08:94:c2:8b:b7:03:22: b1:45:2c:02:03:cc:6d:cd:a4:87:cc:65:b5:d0:1e: 3f:71:27:b6:b3:4a:47:f3:0f:00:cf:1d:e1:8e:00: d5:13:99:09:55:87:e4:f2:ac:51:a7:1c:6b:87:b0: 0f:b8:a3:10:e3:dd:7a:87:bf:bd:9e:66:bc:69:e4: 91:77:1d:3a:0f:d2:26:ea:5a:57:a0:2b:b4:21:19: d5:be:b8:66:be:5d:fe:bc:b2:d8:18:14:40:e4:5d: 16:a3:9d:6a:19:90:cf:b8:44:d5:57:7a:37:60:27: 56:f0:ed:8f:f0:38:e7:7c:70:83:bc:c9:23:24:18: 52:8f:33:a1:31:ea:b0:e1:71:f6:18:39:5b:cf:f0: 70:fd:73:ae:84:1a:66:4a:6d:ca:4b:58:ac:56:91: 22:e2:66:fe:e4:69:a7:ce:9b:9c:89:b7:80:17:ab: 83:a4:70:38:73:3f:e1:30:82:c7:80:cf:9c:75:82: 6c:08:ad:57:b4:ba:b4:65:d1:93:c1:59:38:7a:6f: 51:dc:ca:d2:a9:03:c8:28:3f:43:74:b3:74:a4:27: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A6:0C:A2:EF:43:F2:3B:9D:EE:BD:51:94:04:40:D5:BF:DB:C8:53 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F2F6DF8303011EDB7EB8078C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.172.0/22 103.226.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:92:c7:ae:d3:63:f3:3c:bb:5a:cd:81:bb:8d:a9:c8:fc:78: ed:82:44:7c:34:c1:3d:7d:0f:e0:14:b9:a0:c7:bb:42:60:28: 84:dc:51:fc:12:a5:16:01:df:1b:8d:41:33:d1:a3:b4:1d:bc: 80:29:02:af:c5:b1:b7:82:c1:6e:64:9c:40:c5:18:8b:0d:1a: e9:4e:6f:b7:17:82:b7:69:67:0c:5f:f8:9a:cc:ef:d5:b1:a7: 86:c7:3c:ba:f5:e3:7e:b2:e0:21:c0:7b:93:7c:4f:3a:8b:65: b5:95:37:c5:fa:bc:a3:e0:99:6d:36:69:70:1c:ef:03:75:b4: 0d:28:8a:a2:dd:71:dd:0d:e6:7c:db:c8:01:e8:6c:a7:53:e1: cf:b7:a3:49:38:d7:54:d0:cd:d3:07:94:33:29:87:3c:bb:fe: 7b:8a:ec:7b:f0:43:f3:31:6b:65:ad:44:9c:4c:50:1a:3e:46: d7:3f:3a:4d:23:e5:20:29:8f:99:f3:48:63:03:0d:55:a3:2a: 31:17:02:b8:b3:63:9c:8a:37:e8:9d:91:55:59:c3:40:17:6c: ad:27:64:5d:49:67:84:cd:85:26:0d:50:a4:b3:6d:ed:0c:8e: 29:1c:eb:0a:fc:3b:7a:07:eb:4a:2f:8c:88:78:a8:f3:7c:c5: ad:1e:d3:ad -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICawUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNzM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNhMi0yNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGTEm/iUNFshvur8w6yGKdcM0uyhC9M/XV24RXfAEBKSZlZICwiUwou3AyKx RSwCA8xtzaSHzGW10B4/cSe2s0pH8w8Azx3hjgDVE5kJVYfk8qxRpxxrh7APuKMQ 4916h7+9nma8aeSRdx06D9Im6lpXoCu0IRnVvrhmvl3+vLLYGBRA5F0Wo51qGZDP uETVV3o3YCdW8O2P8DjnfHCDvMkjJBhSjzOhMeqw4XH2GDlbz/Bw/XOuhBpmSm3K S1isVpEi4mb+5GmnzpucibeAF6uDpHA4cz/hMILHgM+cdYJsCK1XtLq0ZdGTwVk4 em9R3MrSqQPIKD9DdLN0pCefJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNamDKLv Q/I7ne69UZQEQNW/28hTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkYyRjZERjgz MDMwMTFFREI3RUI4MDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr86wDBAJn4qgwDQYJKoZIhvcNAQELBQADggEBAFqSx67T Y/M8u1rNgbuNqcj8eO2CRHw0wT19D+AUuaDHu0JgKITcUfwSpRYB3xuNQTPRo7Qd vIApAq/FsbeCwW5knEDFGIsNGulOb7cXgrdpZwxf+JrM79Wxp4bHPLr1436y4CHA e5N8TzqLZbWVN8X6vKPgmW02aXAc7wN1tA0oiqLdcd0N5nzbyAHobKdT4c+3o0k4 11TQzdMHlDMphzy7/nuK7HvwQ/Mxa2WtRJxMUBo+Rtc/Ok0j5SApj5nzSGMDDVWj KjEXArizY5yKN+idkVVZw0AXbK0nZF1JZ4TNhSYNUKSzbe0Mjikc6wr8O3oH60ov jIh4qPN8xa0e060= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org