$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3999FFA8C15711ECB741506EC4F9AE02.roa File: 3999FFA8C15711ECB741506EC4F9AE02.roa (raw, json) Hash identifier: sYR8CQgcEp87HfUqwLqD3sjv2/PrFIER6prnHGal8uM= Subject key identifier: BF:7D:F4:D5:92:2C:1E:9B:33:D6:6B:3F:56:E9:17:D0:84:A3:F7:92 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7460 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3999FFA8C15711ECB741506EC4F9AE02.roa Signing time: Thu 22 Jun 2023 09:42:09 +0000 ROA not before: Thu 22 Jun 2023 09:42:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149616 IP address blocks: 103.186.46.0/24 maxlen: 24 103.186.47.0/24 maxlen: 24 2001:df2:99c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29792 (0x7460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 22 09:42:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64941770-e6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:d6:2b:a8:29:ed:74:62:d0:9f:9a:81:ea: 29:a8:b1:22:c8:19:94:52:75:ca:0a:38:b6:e1:f0: c8:59:db:05:16:61:d5:5e:09:7b:55:f8:59:e3:ca: ea:62:45:4c:7b:d3:ad:c2:4b:33:87:2e:ca:66:ea: b6:e3:f9:12:3e:65:51:06:c9:cd:f9:c7:be:d7:f7: b8:4f:28:1e:63:68:b9:1a:7e:a7:8f:4c:20:83:65: 01:77:89:71:2e:3b:83:cb:99:2c:c3:df:e5:6e:81: 84:3e:4f:da:eb:e1:d5:ce:46:57:b3:45:72:77:fe: 05:54:53:ed:ac:e7:67:2b:12:4e:56:aa:dd:21:56: 4d:66:52:e6:bd:80:e4:3a:2c:d1:3b:e5:53:68:43: 62:ba:b2:d4:eb:e7:1f:cb:ac:ae:ec:42:04:1b:0b: e5:5c:c1:07:a9:64:ab:a9:99:a6:01:8b:e1:fd:f5: 8e:85:73:6b:0e:d7:fc:98:96:66:83:ea:57:df:e6: d6:b3:d7:01:48:80:eb:7d:87:4c:17:b3:1e:5c:89: 54:e6:50:65:11:ef:62:2f:0b:4a:db:59:31:fb:70: 2f:89:d5:03:7e:bc:4d:17:65:f2:92:a3:e7:9c:88: ae:da:a8:77:ed:b1:8e:3d:ed:a7:95:fe:e0:ad:37: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7D:F4:D5:92:2C:1E:9B:33:D6:6B:3F:56:E9:17:D0:84:A3:F7:92 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3999FFA8C15711ECB741506EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.46.0/23 IPv6: 2001:df2:99c0::/48 Signature Algorithm: sha256WithRSAEncryption 26:ab:ca:49:15:b2:7d:0b:3f:f5:05:3b:e0:0f:d9:f0:90:47: 6a:0f:0b:8c:4c:99:8d:8f:60:0f:8c:1f:3b:ca:91:eb:21:eb: e3:51:23:6d:9d:7f:0f:c5:45:75:c2:71:17:2e:b2:1c:19:67: e8:42:4f:3a:f8:5d:4a:a9:5d:61:b8:2f:05:a2:d4:c1:98:77: fc:0c:67:19:ea:d6:3a:b0:4b:57:7e:41:20:a1:dd:b1:ae:be: 0b:89:59:e0:a6:36:e6:51:ff:94:04:f2:b5:72:3d:17:55:33: 29:25:c5:e0:4b:66:6c:e7:55:29:06:50:ae:d9:0f:83:94:e1: d1:fb:15:36:44:ec:89:5a:bf:15:84:df:91:00:06:9d:54:61: bc:bd:e0:f0:48:2d:02:1d:c3:ab:6b:43:44:a9:c1:e7:6f:0b: 39:ed:64:eb:88:82:74:3f:eb:7f:73:97:23:25:02:5d:63:c2: 67:a9:93:96:e5:ed:c2:ed:34:dc:f3:ab:d9:9b:1f:4f:f2:52: 21:31:bd:a8:9f:90:af:9e:d6:62:9b:91:d7:4b:cf:db:f2:42: c5:8c:24:16:6b:e7:05:a9:4b:e5:0c:d0:a1:9b:f6:67:8f:f6: 41:c8:2f:76:cb:65:c2:89:a8:49:dc:a3:f7:4a:a1:d0:44:49: f7:a8:36:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjIyMDk0MjA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0MTc3MC1lNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dbWK6gp7XRi0J+ageopqLEiyBmUUnXKCji24fDIWdsFFmHVXgl7VfhZ48rq YkVMe9Otwkszhy7KZuq24/kSPmVRBsnN+ce+1/e4TygeY2i5Gn6nj0wgg2UBd4lx LjuDy5ksw9/lboGEPk/a6+HVzkZXs0Vyd/4FVFPtrOdnKxJOVqrdIVZNZlLmvYDk OizRO+VTaENiurLU6+cfy6yu7EIEGwvlXMEHqWSrqZmmAYvh/fWOhXNrDtf8mJZm g+pX3+bWs9cBSIDrfYdMF7MeXIlU5lBlEe9iLwtK21kx+3AvidUDfrxNF2XykqPn nIiu2qh37bGOPe2nlf7grTeUSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL999NWS LB6bM9ZrP1bpF9CEo/eSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzk5OUZGQThD MTU3MTFFQ0I3NDE1MDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnui4wDwQCAAIwCQMHACABDfKZwDANBgkqhkiG9w0BAQsF AAOCAQEAJqvKSRWyfQs/9QU74A/Z8JBHag8LjEyZjY9gD4wfO8qR6yHr41EjbZ1/ D8VFdcJxFy6yHBln6EJPOvhdSqldYbgvBaLUwZh3/AxnGerWOrBLV35BIKHdsa6+ C4lZ4KY25lH/lATytXI9F1UzKSXF4EtmbOdVKQZQrtkPg5Th0fsVNkTsiVq/FYTf kQAGnVRhvL3g8EgtAh3Dq2tDRKnB528LOe1k64iCdD/rf3OXIyUCXWPCZ6mTluXt wu003POr2ZsfT/JSITG9qJ+Qr57WYpuR10vP2/JCxYwkFmvnBalL5QzQoZv2Z4/2 QcgvdstlwomoSdyj90qh0ERJ96g2yg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org