$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa File: 31F0D71414DE11EEAB46A86DC4F9AE02.roa (raw, json) Hash identifier: rZBwbt7qU5e7Ho6teGmgIy3ka6xA5uhhXT4P2syBVRI= Subject key identifier: 38:87:63:93:20:A9:15:D2:52:A1:E5:7A:89:63:C3:0F:17:AF:5A:0A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CAE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa Signing time: Fri 27 Oct 2023 09:23:00 +0000 ROA not before: Fri 27 Oct 2023 09:23:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135709 IP address blocks: 103.159.217.0/24 maxlen: 24 2406:dd40:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31918 (0x7cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 27 09:23:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=653b8173-d6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:78:c4:9e:6c:45:b4:8f:57:38:e4:ec:9e: aa:80:a6:2a:ed:c3:15:f5:9d:5e:3c:22:54:ad:f9: 61:c8:ab:95:0b:eb:76:9c:dc:90:9c:83:d4:a9:21: 9a:52:58:ef:a5:ba:a8:f5:06:77:89:f1:0e:b8:6e: ae:89:c5:a8:91:01:f3:31:e2:57:df:69:9d:11:06: d0:79:d2:a0:12:8e:46:f6:dd:de:5f:84:e5:35:45: 95:ca:73:5f:65:dd:86:f5:a6:95:62:c1:60:f9:45: 8c:b4:9c:28:d0:06:8b:ad:91:d2:8c:6e:f9:a1:69: 28:30:d1:6e:a0:d2:88:e9:f2:2e:94:6f:42:3a:f3: 77:9c:91:4f:f5:fb:8c:a4:03:b9:c5:4f:2d:53:78: 93:9b:30:3b:3f:9d:17:de:7b:76:f5:57:c8:e3:f6: 76:bf:f6:3c:61:8f:34:7f:ee:75:47:8f:83:ca:5a: 96:c8:c9:cb:e4:c4:79:a7:c4:2b:03:47:32:2f:b1: 67:c5:bb:13:9b:f5:ca:64:46:67:2b:f9:79:c2:e2: af:02:57:41:19:1f:76:e2:4e:59:f6:a3:b8:17:3d: 63:3f:a2:29:b6:ba:0e:2b:1f:ab:69:c6:4c:f8:77: a9:b5:a9:3d:bb:22:2b:fe:0b:ea:e2:8a:48:2d:51: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:87:63:93:20:A9:15:D2:52:A1:E5:7A:89:63:C3:0F:17:AF:5A:0A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31F0D71414DE11EEAB46A86DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.217.0/24 IPv6: 2406:dd40:2000::/35 Signature Algorithm: sha256WithRSAEncryption 8a:d6:9f:1e:ae:7e:1b:ea:99:53:1b:11:c1:ef:9e:24:a1:d5: db:16:a6:23:66:76:36:f5:6b:13:47:86:7c:06:2d:fc:51:5c: bb:36:76:05:e4:ee:5a:d6:36:45:06:79:b7:e3:e8:98:cd:96: 18:aa:64:19:d9:c6:fd:d3:af:9a:d6:2a:00:5d:ef:28:93:c1: d9:c5:14:25:91:c7:eb:25:e7:20:9a:11:e9:0e:90:ed:84:2a: 46:bb:c8:d8:04:eb:d4:c9:71:d8:a3:a0:5d:78:7f:79:81:61: c4:8b:06:9f:f4:1e:35:7b:28:72:86:d6:83:e7:ca:27:d9:12: 4d:d3:85:e5:9f:b2:e3:96:73:09:e5:0e:50:18:52:e5:70:c0: bf:2b:6b:b5:c7:ce:8c:c6:75:7e:5f:c0:dd:3d:3f:27:20:f2: 84:4a:c9:84:c1:49:52:d9:a2:c4:0a:7d:32:04:05:3a:07:71: ed:6a:31:57:f9:c5:ec:93:7d:b3:31:7c:7d:d4:3a:a4:fd:fd: 25:d5:5a:df:83:3e:75:02:e7:64:cb:00:c1:d6:b2:3a:18:e4: d5:a7:ee:f3:29:5a:88:08:cf:49:a2:55:f4:7f:a1:66:93:f7: da:ee:59:10:06:dc:8d:38:f1:14:46:36:07:46:57:1f:93:0f: c7:b7:eb:3c -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICfK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDI3MDkyMzAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNiODE3My1kNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWF4xJ5sRbSPVzjk7J6qgKYq7cMV9Z1ePCJUrflhyKuVC+t2nNyQnIPUqSGa Uljvpbqo9QZ3ifEOuG6uicWokQHzMeJX32mdEQbQedKgEo5G9t3eX4TlNUWVynNf Zd2G9aaVYsFg+UWMtJwo0AaLrZHSjG75oWkoMNFuoNKI6fIulG9COvN3nJFP9fuM pAO5xU8tU3iTmzA7P50X3nt29VfI4/Z2v/Y8YY80f+51R4+DylqWyMnL5MR5p8Qr A0cyL7FnxbsTm/XKZEZnK/l5wuKvAldBGR924k5Z9qO4Fz1jP6IptroOKx+racZM +Heptak9uyIr/gvq4opILVG7lQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDiHY5Mg qRXSUqHleoljww8Xr1oKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzFGMEQ3MTQx NERFMTFFRUFCNDZBODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnn9kwDgQCAAIwCAMGBSQG3UAgMA0GCSqGSIb3DQEBCwUA A4IBAQCK1p8ern4b6plTGxHB754kodXbFqYjZnY29WsTR4Z8Bi38UVy7NnYF5O5a 1jZFBnm34+iYzZYYqmQZ2cb906+a1ioAXe8ok8HZxRQlkcfrJecgmhHpDpDthCpG u8jYBOvUyXHYo6BdeH95gWHEiwaf9B41eyhyhtaD58on2RJN04Xln7LjlnMJ5Q5Q GFLlcMC/K2u1x86MxnV+X8DdPT8nIPKESsmEwUlS2aLECn0yBAU6B3HtajFX+cXs k32zMXx91Dqk/f0l1Vrfgz51AudkywDB1rI6GOTVp+7zKVqICM9JolX0f6Fmk/fa 7lkQBtyNOPEURjYHRlcfkw/Ht+s8 -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:17 2024 by rpki-client on console-fra.rpki-client.org