$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F405B8282AA11ED918F1D1AC4F9AE02.roa File: 2F405B8282AA11ED918F1D1AC4F9AE02.roa (raw, json) Hash identifier: y+pU0a4OS0tHpq6CzJ7LDmglC/qYVBasqTAd3vJGN70= Subject key identifier: AB:BC:5D:96:96:84:39:2D:54:A5:9A:EC:9A:88:F1:D6:9C:3A:77:1D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 711D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F405B8282AA11ED918F1D1AC4F9AE02.roa Signing time: Wed 10 May 2023 16:46:40 +0000 ROA not before: Wed 10 May 2023 16:46:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150610 IP address blocks: 103.57.116.0/23 maxlen: 24 2001:df1:b840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28957 (0x711d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca70-36e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:df:e6:d6:84:b5:1a:f1:28:21:a5:76:04: 4e:a2:f3:ca:26:9a:8c:04:dd:3e:9f:87:15:cc:6c: 29:52:ba:3a:c4:b8:68:ce:9e:44:67:3d:f9:54:cd: 65:f4:9b:a7:03:7c:3d:42:11:9e:0a:d6:55:59:2a: d0:22:df:83:dc:21:c6:32:43:a0:1b:be:a9:3f:d8: 3c:c2:b5:37:de:a1:5c:33:a9:0b:10:ff:a7:57:05: c9:10:3b:ee:88:5f:fd:08:9f:9d:ad:e2:54:47:22: 3c:16:53:bd:31:47:3e:36:e0:c4:f4:d5:6e:1e:53: af:cf:71:12:70:94:71:46:01:42:a0:7f:18:91:58: a5:63:88:df:39:ab:7d:cc:94:e5:5f:d7:fd:2a:f3: 82:46:8e:09:de:a5:60:3a:f8:e9:2b:4c:d0:c9:8e: cf:96:2b:c7:05:4f:88:52:de:0f:d1:84:cb:d9:f2: 89:5b:60:b7:23:25:29:90:95:16:37:5a:4b:c5:17: 36:63:be:79:63:2f:f1:0e:ca:c4:48:8c:4b:22:1f: 9a:66:15:5e:07:60:8c:ff:41:e5:e5:80:6d:71:0f: 34:34:b1:e0:22:be:ac:1d:82:52:ae:a0:9a:1c:ca: 30:26:8c:a4:cd:8b:b4:da:84:79:b8:cd:ee:eb:0f: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BC:5D:96:96:84:39:2D:54:A5:9A:EC:9A:88:F1:D6:9C:3A:77:1D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F405B8282AA11ED918F1D1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.116.0/23 IPv6: 2001:df1:b840::/48 Signature Algorithm: sha256WithRSAEncryption 70:a8:d1:1a:0f:b2:6c:c3:23:fe:4c:dd:96:45:63:4e:5d:f1: c7:37:54:9a:09:68:53:6c:52:d7:59:9e:06:ff:4b:54:ab:65: e1:7e:19:0b:a7:35:15:70:56:15:09:5b:51:eb:dd:e7:c1:20: 06:31:a1:23:64:a1:13:f5:60:20:ca:56:c7:52:86:71:4f:23: b0:91:72:08:06:9f:26:19:95:b3:80:82:ce:e0:33:ca:16:e1: ff:a4:42:16:0b:57:e3:ea:25:12:89:b6:7e:da:bd:6f:20:0c: 95:6f:6e:e5:31:e8:ed:2b:9d:9a:1c:3b:bb:2c:f1:c0:df:c2: af:33:05:80:5a:57:40:ec:53:4d:b7:fb:9d:aa:ee:fa:5c:c7: c3:4c:bf:b6:7f:9e:8f:97:da:07:5b:24:05:9a:a7:fa:0f:6c: 3e:90:78:85:0a:43:f8:ef:42:76:95:d6:7e:74:99:4d:e5:60: 49:eb:50:22:89:e1:26:7b:d6:d4:f0:82:a4:9e:31:d8:7a:f6: 35:05:eb:50:6d:2a:bb:e3:97:b1:cd:10:8b:78:a2:26:8c:6f: 95:3d:5b:6a:85:25:f4:cc:06:a5:eb:ca:23:be:0e:e4:58:9e: 17:24:f1:a8:79:8a:d4:8d:7c:b9:4a:d4:ed:4f:f8:91:13:80: e0:95:bc:42 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E3MC0zNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvATf5taEtRrxKCGldgROovPKJpqMBN0+n4cVzGwpUro6xLhozp5EZz35VM1l 9JunA3w9QhGeCtZVWSrQIt+D3CHGMkOgG76pP9g8wrU33qFcM6kLEP+nVwXJEDvu iF/9CJ+dreJURyI8FlO9MUc+NuDE9NVuHlOvz3EScJRxRgFCoH8YkVilY4jfOat9 zJTlX9f9KvOCRo4J3qVgOvjpK0zQyY7PlivHBU+IUt4P0YTL2fKJW2C3IyUpkJUW N1pLxRc2Y755Yy/xDsrESIxLIh+aZhVeB2CM/0Hl5YBtcQ80NLHgIr6sHYJSrqCa HMowJoykzYu02oR5uM3u6w8LHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKu8XZaW hDktVKWa7JqI8dacOncdMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkY0MDVCODI4 MkFBMTFFRDkxOEYxRDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnOXQwDwQCAAIwCQMHACABDfG4QDANBgkqhkiG9w0BAQsF AAOCAQEAcKjRGg+ybMMj/kzdlkVjTl3xxzdUmgloU2xS11meBv9LVKtl4X4ZC6c1 FXBWFQlbUevd58EgBjGhI2ShE/VgIMpWx1KGcU8jsJFyCAafJhmVs4CCzuAzyhbh /6RCFgtX4+olEom2ftq9byAMlW9u5THo7Sudmhw7uyzxwN/CrzMFgFpXQOxTTbf7 naru+lzHw0y/tn+ej5faB1skBZqn+g9sPpB4hQpD+O9CdpXWfnSZTeVgSetQIonh JnvW1PCCpJ4x2Hr2NQXrUG0qu+OXsc0Qi3iiJoxvlT1baoUl9MwGpevKI74O5Fie FyTxqHmK1I18uUrU7U/4kROA4JW8Qg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org