$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35F7D5EEBCFB11EAB65E512FC4F9AE02.roa File: 35F7D5EEBCFB11EAB65E512FC4F9AE02.roa (raw, json) Hash identifier: twRiN1yaaj/tErjDHEKRirDqh1KkMCeYc7xKC37aMVs= Subject key identifier: 69:69:57:86:35:0A:85:AD:BD:1D:9B:AA:C0:45:F3:1F:0C:31:D4:0A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D58 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35F7D5EEBCFB11EAB65E512FC4F9AE02.roa Signing time: Wed 10 May 2023 16:28:51 +0000 ROA not before: Wed 10 May 2023 16:28:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138239 IP address blocks: 103.56.30.0/24 maxlen: 24 103.65.23.0/24 maxlen: 24 103.65.202.0/24 maxlen: 24 103.65.203.0/24 maxlen: 24 103.126.204.0/24 maxlen: 24 103.126.205.0/24 maxlen: 24 2404:1340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27992 (0x6d58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:28:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc643-62e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:61:4f:8d:16:1e:66:c3:a3:95:f3:1d:0c: fb:9b:78:3d:52:24:6a:5b:4c:8e:33:18:c5:0a:52: 0d:07:16:04:88:69:ab:d0:a5:b0:3b:e4:a5:88:9c: 44:e8:db:52:a4:c5:04:6a:84:22:68:6b:f3:01:83: 4c:ed:5b:3e:74:0f:b7:f8:94:28:a8:f8:76:d9:b8: 4a:73:50:a0:f4:72:c4:2a:0c:c1:85:06:48:e5:d4: 01:0e:31:7e:33:ed:c9:d7:dc:ad:da:52:cb:a7:93: 9a:ae:ce:d7:6a:11:f3:3b:2e:7c:a1:bf:7b:de:a1: 86:db:a5:a6:14:9c:50:db:84:84:6d:10:02:b2:81: 9e:82:e6:42:61:a8:e9:c1:e4:41:94:b3:02:ec:09: 42:7d:72:94:46:b5:c4:70:a7:d5:f2:49:17:22:71: f3:5a:75:d3:59:2d:b6:f6:7d:d5:76:76:80:ad:b2: 27:e7:b5:88:53:f7:1b:22:93:91:82:6a:7d:7c:40: d2:7e:12:2f:e6:a6:fc:58:0a:a5:be:9c:98:84:2f: e7:5a:a8:52:7d:5d:a4:36:b7:59:1a:90:1a:49:e9: c9:b7:5f:ab:c4:a1:eb:53:c5:e9:b0:c2:e1:dd:a4: bd:62:3d:bc:b5:1e:72:0c:75:83:48:fb:64:8d:40: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:57:86:35:0A:85:AD:BD:1D:9B:AA:C0:45:F3:1F:0C:31:D4:0A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35F7D5EEBCFB11EAB65E512FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.56.30.0/24 103.65.23.0/24 103.65.202.0/23 103.126.204.0/23 IPv6: 2404:1340::/32 Signature Algorithm: sha256WithRSAEncryption ba:54:1b:46:4a:00:25:2a:38:99:1c:22:53:55:c2:c7:c7:46: 4d:60:21:5c:37:1c:e7:ae:ca:bd:67:35:fa:d4:ad:fc:02:60: a3:2d:00:4f:1d:2c:74:e0:20:d0:87:c9:80:94:4c:90:79:0d: ab:9c:7b:49:7c:1d:00:d6:eb:83:ea:5c:fb:be:41:a8:65:b4: d2:2a:ca:69:5a:db:0d:9f:11:d1:0e:ff:cd:f7:06:96:52:e1: 7e:f3:96:1d:a2:a8:06:e4:1b:c6:68:ec:a9:44:14:be:a2:87: 04:78:51:54:4f:7e:81:ae:a7:03:b4:d9:a8:1c:c0:46:dd:e8: 52:59:71:2a:c1:61:b6:9d:f4:55:92:64:a0:65:c7:34:ed:ab: bd:a5:5e:79:ff:0b:95:4b:e6:a9:55:9c:66:72:43:00:e6:bd: 0c:94:1d:ed:60:cd:2c:32:52:3d:2e:1f:49:64:81:b8:70:81: 84:b5:30:48:34:fb:5a:a5:93:e9:d2:57:52:eb:57:82:6c:c8: 81:d5:ac:ba:98:05:07:34:94:fe:bb:30:e4:36:78:9d:e9:b6: 1c:9a:9b:05:fd:40:85:27:1a:e4:29:a9:25:5d:63:e9:44:e8: ec:7a:78:02:41:01:10:43:a2:35:2d:7d:fb:68:b1:43:f7:9a: 5b:fe:e7:a3 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICbVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyODUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY0My02MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TNhT40WHmbDo5XzHQz7m3g9UiRqW0yOMxjFClINBxYEiGmr0KWwO+SliJxE 6NtSpMUEaoQiaGvzAYNM7Vs+dA+3+JQoqPh22bhKc1Cg9HLEKgzBhQZI5dQBDjF+ M+3J19yt2lLLp5Oars7XahHzOy58ob973qGG26WmFJxQ24SEbRACsoGeguZCYajp weRBlLMC7AlCfXKURrXEcKfV8kkXInHzWnXTWS229n3VdnaArbIn57WIU/cbIpOR gmp9fEDSfhIv5qb8WAqlvpyYhC/nWqhSfV2kNrdZGpAaSenJt1+rxKHrU8XpsMLh 3aS9Yj28tR5yDHWDSPtkjUDWgwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGlpV4Y1 CoWtvR2bqsBF8x8MMdQKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzVGN0Q1RUVC Q0ZCMTFFQUI2NUU1MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBABnOB4DBABnQRcDBAFnQcoDBAFnfswwDQQCAAIwBwMFACQE E0AwDQYJKoZIhvcNAQELBQADggEBALpUG0ZKACUqOJkcIlNVwsfHRk1gIVw3HOeu yr1nNfrUrfwCYKMtAE8dLHTgINCHyYCUTJB5Dauce0l8HQDW64PqXPu+QahltNIq ymla2w2fEdEO/833BpZS4X7zlh2iqAbkG8Zo7KlEFL6ihwR4UVRPfoGupwO02agc wEbd6FJZcSrBYbad9FWSZKBlxzTtq72lXnn/C5VL5qlVnGZyQwDmvQyUHe1gzSwy Uj0uH0lkgbhwgYS1MEg0+1qlk+nSV1LrV4JsyIHVrLqYBQc0lP67MOQ2eJ3pthya mwX9QIUnGuQpqSVdY+lE6Ox6eAJBARBDojUtfftosUP3mlv+56M= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org