$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa File: 3727DA0042AF11ECBA3A677CC4F9AE02.roa (raw, json) Hash identifier: KlpQ6UZFCltStZgElfR2XjoPprDxOKActCXUTvxMsek= Subject key identifier: 82:18:F4:2E:5B:DF:37:8D:42:23:70:AD:F4:C8:88:82:71:F2:BC:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 846B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa Signing time: Mon 11 Mar 2024 07:26:04 +0000 ROA not before: Mon 11 Mar 2024 07:26:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147209 IP address blocks: 103.175.140.0/23 maxlen: 24 2400:1a60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33899 (0x846b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 11 07:26:04 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65eeb20c-642c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:14:68:72:68:a3:d5:92:4f:6a:d4:4e:e0: d2:d0:9c:e7:a3:35:95:7b:d2:91:8b:fe:74:c4:35: 52:bb:ef:bf:a0:19:7e:6e:62:d7:a7:11:fc:e2:f7: 9b:e4:16:f1:91:72:a3:65:66:5b:ba:f5:1e:e0:fe: 84:f9:3d:35:b2:4d:d4:bf:95:13:ea:d5:aa:9a:da: 1d:62:30:ad:c3:11:f1:cb:79:6c:b8:b4:39:e5:49: 4a:38:c0:24:ef:81:14:fa:ca:4b:29:ee:e0:8e:f1: 9e:0c:a3:a9:df:be:93:0c:48:c5:88:68:31:ef:8d: 13:1d:a0:c9:e5:ba:b3:7e:4c:8e:7f:35:eb:86:ab: d7:8f:04:a7:6b:22:3e:f0:be:a5:6c:99:9b:09:e7: 8c:68:e9:0a:38:27:57:34:bc:85:0f:1b:de:c6:ba: 07:2a:56:73:6c:09:a4:1d:ea:45:cd:1d:1e:86:51: bf:8a:05:66:40:c2:a7:d7:ed:22:4c:10:c8:6d:fb: 47:c2:e2:c9:aa:ed:d3:77:71:13:25:cd:fd:a8:07: 65:2d:ef:4d:85:08:62:e9:59:79:45:e1:22:e5:8f: 11:a2:a9:62:fb:c9:9e:b4:59:9b:3f:db:0c:79:88: 91:69:a4:2b:f5:27:90:77:c7:06:83:b7:c9:36:0d: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:F4:2E:5B:DF:37:8D:42:23:70:AD:F4:C8:88:82:71:F2:BC:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.140.0/23 IPv6: 2400:1a60::/32 Signature Algorithm: sha256WithRSAEncryption b6:d2:34:dd:ff:a6:20:79:3d:67:93:cd:e3:2e:6e:d2:30:d4: fe:03:94:3e:3c:b2:e2:ce:90:a6:39:c2:6c:20:0b:dd:ee:5b: f5:71:47:16:a0:e6:dd:c9:e6:fd:7f:62:8d:b1:fa:d8:cb:ca: 5e:63:86:9c:c9:d3:4d:6a:b3:72:1a:40:0e:44:40:d7:a0:c5: e3:1b:42:65:17:37:64:24:ba:3d:f1:c9:1e:f4:f4:5b:c0:e3: 4b:f0:6c:fe:79:bd:b3:da:f6:8e:34:b7:06:a3:12:0a:98:15: b5:64:58:1a:37:97:2c:71:f6:a4:44:76:6a:bf:1d:65:4f:9b: b2:3e:bb:e3:c7:5b:70:c4:f7:10:35:5f:d9:d2:7f:6d:8d:33: c2:26:18:7c:7c:bf:b9:66:bf:73:d7:37:a6:c9:f6:98:28:51: e7:58:c6:d7:21:b2:1f:9e:ee:d7:60:f8:e1:ae:91:06:36:0e: ee:55:0a:ef:6d:c9:fe:11:36:e1:73:5e:21:f5:53:2e:f0:54: 4f:8f:8b:7b:cd:f7:31:c6:34:3f:c9:25:84:f6:7b:80:38:ac: dc:8f:c9:fa:46:63:c4:e6:36:cd:91:3c:4b:df:e8:ca:83:f8: 75:3f:07:99:d8:1c:a0:13:0f:af:98:f3:64:60:8c:6b:32:ea: 4b:fb:70:3a -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAIRrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMxMTA3MjYwNFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVlZWIyMGMtNjQyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHtFGhyaKPVkk9q1E7g0tCc56M1lXvSkYv+dMQ1Urvvv6AZfm5i16cR/OL3 m+QW8ZFyo2VmW7r1HuD+hPk9NbJN1L+VE+rVqpraHWIwrcMR8ct5bLi0OeVJSjjA JO+BFPrKSynu4I7xngyjqd++kwxIxYhoMe+NEx2gyeW6s35Mjn8164ar148Ep2si PvC+pWyZmwnnjGjpCjgnVzS8hQ8b3sa6BypWc2wJpB3qRc0dHoZRv4oFZkDCp9ft IkwQyG37R8Liyart03dxEyXN/agHZS3vTYUIYulZeUXhIuWPEaKpYvvJnrRZmz/b DHmIkWmkK/UnkHfHBoO3yTYNEmMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSCGPQu W983jUIjcK30yIiCcfK8EzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM3MjdEQTAw NDJBRjExRUNCQTNBNjc3Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ6+MMA0EAgACMAcDBQAkABpgMA0GCSqGSIb3DQEBCwUA A4IBAQC20jTd/6YgeT1nk83jLm7SMNT+A5Q+PLLizpCmOcJsIAvd7lv1cUcWoObd yeb9f2KNsfrYy8peY4acydNNarNyGkAOREDXoMXjG0JlFzdkJLo98cke9PRbwONL 8Gz+eb2z2vaONLcGoxIKmBW1ZFgaN5cscfakRHZqvx1lT5uyPrvjx1twxPcQNV/Z 0n9tjTPCJhh8fL+5Zr9z1zemyfaYKFHnWMbXIbIfnu7XYPjhrpEGNg7uVQrvbcn+ ETbhc14h9VMu8FRPj4t7zfcxxjQ/ySWE9nuAOKzcj8n6RmPE5jbNkTxL3+jKg/h1 PweZ2BygEw+vmPNkYIxrMupL+3A6 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org