$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa File: 3B453790B0C311EC87CC1D3AC4F9AE02.roa (raw, json) Hash identifier: hVBYnfw5scEm8PeU2NSPcMhLHj0hYE7olwJDj+3Hq+M= Subject key identifier: 4A:28:4E:6E:DB:EE:01:DF:94:F8:5C:CE:A4:5C:CA:6E:C4:02:97:F1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 709B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa Signing time: Wed 10 May 2023 16:44:22 +0000 ROA not before: Wed 10 May 2023 16:44:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149608 IP address blocks: 103.184.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28827 (0x709b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9e6-99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:41:3d:17:c7:cf:e0:45:ac:77:ea:5d:eb: c3:96:7a:0f:a5:9f:61:5f:3e:05:da:1e:94:2a:da: 4f:e9:35:0c:76:d4:90:82:4a:3c:93:ec:fc:ac:49: f3:c5:32:e8:1d:50:5c:c2:aa:d1:9a:a0:a5:82:bf: da:c1:3f:c7:d5:2f:0e:8e:68:f7:a6:64:e2:f3:cc: cf:4c:f5:0f:8f:6b:d8:03:fe:35:12:91:9b:08:64: fe:eb:46:fa:91:33:51:ca:c8:09:41:97:12:3f:2b: 9e:34:cc:3a:a0:6c:be:57:a8:0a:6f:52:cf:49:34: 65:0c:db:3e:35:8b:3c:20:a2:0b:5e:1f:de:49:59: 7b:90:ca:50:80:d3:01:45:31:88:3b:2f:97:02:69: 8a:cc:7c:bd:2e:b5:42:ba:d5:32:99:f4:73:cb:e5: 19:75:fa:8b:bc:92:d5:bf:bd:6a:3d:69:6a:33:da: 61:63:55:16:90:b2:92:9c:4f:63:b6:0c:02:f8:9e: 50:be:61:0d:9e:89:78:9c:d5:35:30:f2:f4:c9:23: 17:4a:d0:88:60:a9:10:8d:58:47:7f:1a:5d:af:70: cb:3d:d6:10:e2:a8:89:4c:7f:1b:10:7d:6b:7b:f1: fd:ce:e6:c3:8b:13:7f:59:ff:ad:1b:82:b8:b0:86: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:4E:6E:DB:EE:01:DF:94:F8:5C:CE:A4:5C:CA:6E:C4:02:97:F1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B453790B0C311EC87CC1D3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.103.0/24 Signature Algorithm: sha256WithRSAEncryption 14:9c:e2:66:f8:5c:4d:7c:0d:c8:fc:78:a5:0e:07:84:57:e9: de:21:53:d2:21:fc:ce:d5:66:dd:42:0a:40:40:b5:d7:ed:3c: d7:13:18:d3:c7:ff:4c:48:eb:bb:5e:55:51:75:53:3a:d7:d6: 5d:10:c3:42:ba:21:e2:ef:5a:b0:ae:43:11:c4:c1:c6:f1:ba: 78:51:90:3d:3d:d4:7e:72:45:37:fa:61:15:03:60:8f:ac:76: 79:e4:f2:4c:96:5b:76:86:b1:97:66:85:e6:cc:71:93:48:13: 17:6c:ab:63:19:70:bb:dd:69:9e:c2:24:e4:9a:24:bb:fc:b0: 8f:67:cc:29:58:24:b9:a6:8e:65:18:db:e0:ef:d5:52:02:2b: 15:86:da:e0:8b:a1:97:1c:ca:06:b4:f0:0e:3d:b0:73:e5:c6: b2:d4:3a:56:6c:f7:cd:b7:97:0e:a0:2c:db:48:91:0a:48:cf: 38:4a:e3:54:23:5f:b8:b0:27:77:c0:7b:a2:bd:6e:a1:3c:a5: cd:11:14:3e:3e:b3:04:d0:8b:26:f6:aa:32:5e:c4:b2:6b:48: 44:12:a3:69:ef:6d:fe:80:4c:0b:10:48:67:42:74:b7:76:ad: 66:fb:4d:f8:8c:bb:86:f9:ff:17:a1:e8:4d:01:4f:e1:07:f2: 8b:d4:95:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzllNi05OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU9BPRfHz+BFrHfqXevDlnoPpZ9hXz4F2h6UKtpP6TUMdtSQgko8k+z8rEnz xTLoHVBcwqrRmqClgr/awT/H1S8Ojmj3pmTi88zPTPUPj2vYA/41EpGbCGT+60b6 kTNRysgJQZcSPyueNMw6oGy+V6gKb1LPSTRlDNs+NYs8IKILXh/eSVl7kMpQgNMB RTGIOy+XAmmKzHy9LrVCutUymfRzy+UZdfqLvJLVv71qPWlqM9phY1UWkLKSnE9j tgwC+J5QvmENnol4nNU1MPL0ySMXStCIYKkQjVhHfxpdr3DLPdYQ4qiJTH8bEH1r e/H9zubDixN/Wf+tG4K4sIZ5oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEooTm7b 7gHflPhczqRcym7EApfxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0I0NTM3OTBC MEMzMTFFQzg3Q0MxRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnuGcwDQYJKoZIhvcNAQELBQADggEBABSc4mb4XE18Dcj8 eKUOB4RX6d4hU9Ih/M7VZt1CCkBAtdftPNcTGNPH/0xI67teVVF1UzrX1l0Qw0K6 IeLvWrCuQxHEwcbxunhRkD091H5yRTf6YRUDYI+sdnnk8kyWW3aGsZdmhebMcZNI Exdsq2MZcLvdaZ7CJOSaJLv8sI9nzClYJLmmjmUY2+Dv1VICKxWG2uCLoZccyga0 8A49sHPlxrLUOlZs9823lw6gLNtIkQpIzzhK41QjX7iwJ3fAe6K9bqE8pc0RFD4+ swTQiyb2qjJexLJrSEQSo2nvbf6ATAsQSGdCdLd2rWb7TfiMu4b5/xeh6E0BT+EH 8ovUldM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org