$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3117A6D4CA1511ECA7D45938C4F9AE02.roa File: 3117A6D4CA1511ECA7D45938C4F9AE02.roa (raw, json) Hash identifier: sMFLEA3vK8M2wdcFeU2/+KNWmQlVEEw31MAxWbk7Tq4= Subject key identifier: 0E:11:ED:D5:2D:20:79:AC:B2:A0:D6:17:B2:A3:A5:E0:97:4F:D0:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EDD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3117A6D4CA1511ECA7D45938C4F9AE02.roa Signing time: Wed 10 May 2023 16:36:04 +0000 ROA not before: Wed 10 May 2023 16:36:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141548 IP address blocks: 103.162.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28381 (0x6edd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:36:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7f3-4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:a2:69:f2:bf:a4:05:ba:3b:a7:8a:bd:12: 3f:75:3d:44:91:bc:7c:0b:33:4f:42:50:82:c5:19: 05:5f:7e:67:3a:ff:69:12:b6:7e:a0:57:60:aa:f0: 54:26:ca:78:9e:2e:34:c6:b6:ee:83:71:35:40:f7: e5:13:ea:30:c0:23:c2:0b:07:50:77:81:58:6a:8b: ff:8b:1b:27:78:1a:3e:96:46:9e:9c:d8:81:f1:80: 8d:db:11:a5:8b:b5:15:85:a2:aa:c9:6c:48:09:ae: 85:a2:73:93:f6:83:9b:be:1b:8b:95:cb:16:0a:f1: 57:82:58:e4:2b:38:90:ec:83:c4:46:b3:25:04:52: 86:25:bc:18:1a:cf:ad:a4:ec:45:86:9c:05:86:b2: aa:cb:f4:b8:0c:52:f1:12:c4:e6:7c:54:55:70:d2: 2d:31:3f:7a:5f:25:b6:ec:49:48:f4:7f:b6:f6:75: fb:91:d7:80:9e:a4:b3:1f:ca:50:24:42:64:9f:dd: a6:03:db:9e:65:43:1e:5f:5d:18:05:b6:b3:31:9b: aa:b2:8a:c3:34:38:f4:34:34:a5:2e:ca:b5:a0:87: 1b:e9:24:b6:b4:aa:11:79:43:b0:b2:74:78:be:04: 84:4a:a0:b1:89:0c:70:a2:4b:1d:d9:ee:ef:b6:3c: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:ED:D5:2D:20:79:AC:B2:A0:D6:17:B2:A3:A5:E0:97:4F:D0:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3117A6D4CA1511ECA7D45938C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.224.0/23 Signature Algorithm: sha256WithRSAEncryption 09:da:f2:75:99:1c:42:47:ee:aa:20:ee:da:9c:30:5d:c9:76: 77:ab:01:8c:b8:d2:e4:32:9f:f6:c8:7b:06:6d:28:ed:86:ee: 66:3f:ff:27:d1:fb:19:bf:e8:68:fe:46:e2:1f:d8:55:3d:4d: 10:22:79:06:5e:2e:25:17:b6:bb:1b:bb:0f:dc:e0:0e:79:d4: f5:55:3c:37:8f:79:62:ba:88:4f:0c:61:9c:0e:24:2b:74:98: 81:9c:f1:f3:15:98:11:71:69:35:d1:b8:4c:46:5b:be:7e:6d: 92:d2:1d:70:af:d5:b6:bd:c9:3b:09:6c:8f:13:df:cb:93:52: 90:82:65:65:de:cb:15:df:5d:4b:90:16:2c:93:ff:8e:9e:65: c9:3f:12:b0:19:e8:1e:79:65:fc:83:59:2c:cd:a9:b4:84:6e: 3f:03:ea:d2:2f:4c:28:3f:e6:43:e8:35:78:fa:b4:14:47:be: 80:c0:59:f8:49:5b:f0:29:d1:ac:b7:67:40:31:92:47:c3:e1: 2a:1e:97:0b:ee:08:ca:10:7b:80:d8:e2:85:c3:c4:85:9d:19: 9c:f8:01:a9:4d:66:00:ca:c9:6b:bc:8b:87:18:63:0c:e9:cb: 39:42:f0:98:3b:72:15:df:a0:10:68:f8:63:7d:c0:f4:7a:21: d9:94:9e:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdmMy00YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0yiafK/pAW6O6eKvRI/dT1Ekbx8CzNPQlCCxRkFX35nOv9pErZ+oFdgqvBU Jsp4ni40xrbug3E1QPflE+owwCPCCwdQd4FYaov/ixsneBo+lkaenNiB8YCN2xGl i7UVhaKqyWxICa6FonOT9oObvhuLlcsWCvFXgljkKziQ7IPERrMlBFKGJbwYGs+t pOxFhpwFhrKqy/S4DFLxEsTmfFRVcNItMT96XyW27ElI9H+29nX7kdeAnqSzH8pQ JEJkn92mA9ueZUMeX10YBbazMZuqsorDNDj0NDSlLsq1oIcb6SS2tKoReUOwsnR4 vgSESqCxiQxwoksd2e7vtjxwOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA4R7dUt IHmssqDWF7KjpeCXT9CVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzExN0E2RDRD QTE1MTFFQ0E3RDQ1OTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnouAwDQYJKoZIhvcNAQELBQADggEBAAna8nWZHEJH7qog 7tqcMF3JdnerAYy40uQyn/bIewZtKO2G7mY//yfR+xm/6Gj+RuIf2FU9TRAieQZe LiUXtrsbuw/c4A551PVVPDePeWK6iE8MYZwOJCt0mIGc8fMVmBFxaTXRuExGW75+ bZLSHXCv1ba9yTsJbI8T38uTUpCCZWXeyxXfXUuQFiyT/46eZck/ErAZ6B55ZfyD WSzNqbSEbj8D6tIvTCg/5kPoNXj6tBRHvoDAWfhJW/Ap0ay3Z0AxkkfD4Soelwvu CMoQe4DY4oXDxIWdGZz4AalNZgDKyWu8i4cYYwzpyzlC8Jg7chXfoBBo+GN9wPR6 IdmUnkA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org