$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3838168C78F411EC83E56014C4F9AE02.roa File: 3838168C78F411EC83E56014C4F9AE02.roa (raw, json) Hash identifier: EMl5UHN5uPAgFHTpLv9FAxiW3z17MdfAaANu1442m6I= Subject key identifier: F6:CD:27:A1:3E:CD:3C:C5:21:3C:C2:E8:E3:43:61:3C:3B:06:06:FA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 700B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3838168C78F411EC83E56014C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:42 +0000 ROA not before: Wed 10 May 2023 16:41:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147273 IP address blocks: 103.148.164.0/24 maxlen: 24 103.159.201.0/24 maxlen: 24 2001:df5:f680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28683 (0x700b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc946-92ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:54:e0:b7:52:28:db:11:4a:b2:38:45:1e: a4:ea:ce:51:9d:09:ba:72:e8:ee:28:23:f1:71:6e: d9:83:f0:63:be:32:e2:f1:eb:ba:66:6e:35:91:6f: 9a:8a:83:6b:f7:fe:98:01:24:89:6a:7b:86:07:32: 22:25:28:a0:ec:4c:9a:4f:a3:0d:04:be:e2:e3:bd: d1:c5:bb:e9:32:98:d2:fe:66:1c:2c:13:cb:ce:2c: 82:36:bd:de:fd:d3:70:47:da:21:1d:9a:b8:35:08: 6a:d3:83:90:aa:22:79:c2:53:b8:98:11:92:70:1a: fb:d7:5f:8e:7e:3b:a0:e4:1b:26:f4:cd:6b:b1:0f: a5:b7:d8:3b:a2:51:77:33:e5:6d:eb:80:da:9f:a6: 59:f0:31:3b:b8:d2:a1:e5:11:64:29:3e:37:1e:59: 01:e3:a1:49:0c:ea:e5:7c:4c:2b:6e:6c:08:18:35: eb:32:53:08:96:9a:a3:47:3a:c7:d8:c5:85:fc:b3: e9:53:51:1d:4e:b5:76:26:29:38:82:36:d2:ae:c3: ab:9b:de:dc:bf:38:e4:7d:d6:3a:f5:4e:84:a1:32: 73:ce:73:40:02:6e:55:19:e9:e3:41:99:2f:2b:9b: 15:b1:46:81:cb:ef:5f:11:7c:a3:75:66:fd:9e:44: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CD:27:A1:3E:CD:3C:C5:21:3C:C2:E8:E3:43:61:3C:3B:06:06:FA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3838168C78F411EC83E56014C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.164.0/24 103.159.201.0/24 IPv6: 2001:df5:f680::/48 Signature Algorithm: sha256WithRSAEncryption 1f:5e:e8:af:6f:23:e1:b9:27:1f:63:2e:9a:64:4b:84:f3:58: 76:a9:18:a7:90:48:b0:1b:34:7c:0f:8e:a8:7a:63:ea:1d:7f: f8:08:bb:2a:24:82:f3:aa:49:9f:83:e8:c8:c2:da:b4:2d:d7: 24:ab:82:c8:67:0c:e0:39:51:fe:82:eb:99:89:d0:40:13:76: b3:34:90:1e:81:a5:af:88:55:36:cd:7c:d7:9e:db:9e:a8:0c: ca:ca:11:f4:54:80:a2:17:36:38:8d:ac:99:e1:27:f9:5e:c3: e7:0f:77:d8:f8:e1:90:aa:36:1b:84:88:a5:45:65:b9:55:2f: b6:aa:f0:94:9a:2b:6a:db:20:27:7a:ce:4d:7e:9f:f6:32:40: 74:45:4c:e7:b9:86:57:d8:4f:f1:f6:20:7a:61:8d:16:02:c0: b8:17:67:d2:3f:73:12:81:75:ca:3f:50:fa:65:0b:82:02:ec: e0:b3:70:6b:c5:aa:64:e9:95:ea:73:a5:12:46:d9:fd:a8:58: 50:69:94:4f:a2:05:56:06:62:f5:ec:78:67:b6:ce:7a:e5:67: e2:c1:1c:dd:dd:8c:09:67:ac:c2:60:78:35:bd:cd:15:69:3c: 34:62:c0:ab:91:34:9c:bd:f6:c8:4b:c4:5e:c5:39:fb:67:f2: c8:ce:99:af -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICcAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk0Ni05MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ohU4LdSKNsRSrI4RR6k6s5RnQm6cujuKCPxcW7Zg/BjvjLi8eu6Zm41kW+a ioNr9/6YASSJanuGBzIiJSig7EyaT6MNBL7i473RxbvpMpjS/mYcLBPLziyCNr3e /dNwR9ohHZq4NQhq04OQqiJ5wlO4mBGScBr711+Ofjug5Bsm9M1rsQ+lt9g7olF3 M+Vt64Dan6ZZ8DE7uNKh5RFkKT43HlkB46FJDOrlfEwrbmwIGDXrMlMIlpqjRzrH 2MWF/LPpU1EdTrV2Jik4gjbSrsOrm97cvzjkfdY69U6EoTJzznNAAm5VGenjQZkv K5sVsUaBy+9fEXyjdWb9nkRyZQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPbNJ6E+ zTzFITzC6ONDYTw7Bgb6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzgzODE2OEM3 OEY0MTFFQzgzRTU2MDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnlKQDBABnn8kwDwQCAAIwCQMHACABDfX2gDANBgkqhkiG 9w0BAQsFAAOCAQEAH17or28j4bknH2MummRLhPNYdqkYp5BIsBs0fA+OqHpj6h1/ +Ai7KiSC86pJn4PoyMLatC3XJKuCyGcM4DlR/oLrmYnQQBN2szSQHoGlr4hVNs18 157bnqgMysoR9FSAohc2OI2smeEn+V7D5w932PjhkKo2G4SIpUVluVUvtqrwlJor atsgJ3rOTX6f9jJAdEVM57mGV9hP8fYgemGNFgLAuBdn0j9zEoF1yj9Q+mULggLs 4LNwa8WqZOmV6nOlEkbZ/ahYUGmUT6IFVgZi9ex4Z7bOeuVn4sEc3d2MCWeswmB4 Nb3NFWk8NGLAq5E0nL32yEvEXsU5+2fyyM6Zrw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org