$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa File: 3D3260B2072811EDBA8A9D59C4F9AE02.roa (raw, json) Hash identifier: /j5bIlapfXdhx7GjEmfxZSJTZ0VEQpi2VVuHJ9g3/gk= Subject key identifier: DC:C2:E6:6B:4E:07:16:82:05:AA:DB:C7:8A:54:7A:B9:A0:60:AF:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70AB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:39 +0000 ROA not before: Wed 10 May 2023 16:44:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150010 IP address blocks: 103.145.228.0/24 maxlen: 24 103.145.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28843 (0x70ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9f7-5d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:0c:d6:cd:26:f1:01:9f:80:ce:62:d7:da: 82:ae:90:52:ba:d9:85:a3:9b:21:64:9f:79:d6:d2: 52:c5:0a:26:e7:b6:5b:5b:66:06:3d:53:ae:e6:bf: c5:27:4a:1d:33:4a:a5:3f:c2:46:6a:a0:f4:11:9d: 8f:29:1c:04:85:c4:8c:ba:49:b3:09:3d:c2:da:d2: 22:39:aa:ca:36:bd:89:13:db:f4:0b:6c:38:57:96: a6:b4:00:88:e7:08:32:a1:d3:89:83:01:ca:ec:e5: d0:1c:aa:ce:99:68:52:b9:97:c7:c0:13:84:54:4c: d6:82:d3:47:39:83:ea:c0:5f:7d:77:28:92:80:c6: 62:ca:fc:2d:a8:e6:a6:cb:7c:71:9d:4c:84:81:82: 31:b3:22:fb:b2:33:d2:0f:cd:9b:4d:c9:67:47:9f: d9:8d:d1:e1:cc:9c:13:6f:1c:1f:e0:5e:48:dd:23: ac:47:77:eb:78:06:02:2a:f0:31:87:3b:df:00:b1: ec:8c:28:15:d8:5d:82:96:33:f9:28:d2:ec:7c:ae: 76:7c:d1:50:7e:35:aa:b5:b3:2d:96:04:1a:6f:70: 14:05:f1:02:4d:c9:b6:30:03:ad:97:6c:f0:06:4d: 7a:ec:9a:18:12:0d:ad:10:f1:1b:b7:2d:e3:28:5f: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:E6:6B:4E:07:16:82:05:AA:DB:C7:8A:54:7A:B9:A0:60:AF:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.228.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:87:7a:96:c8:34:0d:2b:06:ec:89:85:58:e3:70:e1:cb:c5: 56:de:46:93:c9:df:b0:49:35:3f:b8:5f:75:a3:05:55:49:d5: 15:2f:2e:18:91:4f:d3:9f:4b:30:75:65:00:75:a0:ca:ec:06: c5:68:10:56:1b:0f:b5:10:33:1d:28:a2:49:d6:36:9d:aa:db: 98:85:e9:42:ce:59:5b:24:36:b1:7e:41:ba:d9:cb:bc:f5:de: ff:2e:75:4c:79:77:18:b2:cc:f9:e5:ed:ec:f8:75:6e:23:73: 02:ae:02:73:0d:39:08:b8:ac:28:3f:b7:cf:75:f9:26:b5:17: c5:55:0c:30:7a:fe:46:a7:f7:c4:d3:8f:06:78:66:58:ac:33: 9a:8f:80:a2:20:64:54:d2:40:14:b4:47:98:b6:4a:54:aa:d7: 52:2c:82:f6:25:dd:7c:76:14:82:51:43:63:cc:db:58:55:1f: 15:09:c0:5a:f0:71:7d:4b:e2:e2:56:52:91:bb:8a:5d:ac:00: b1:84:09:33:00:fd:b8:3c:90:84:e3:1a:8c:1b:2f:c9:75:82: 1b:02:19:0f:fe:9d:d6:1b:88:e8:8c:b8:21:47:af:47:54:bf: e7:59:e5:23:d9:3c:25:dc:e3:aa:c3:3a:47:8e:24:4b:15:5b: a7:45:c8:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlmNy01ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZoM1s0m8QGfgM5i19qCrpBSutmFo5shZJ951tJSxQom57ZbW2YGPVOu5r/F J0odM0qlP8JGaqD0EZ2PKRwEhcSMukmzCT3C2tIiOarKNr2JE9v0C2w4V5amtACI 5wgyodOJgwHK7OXQHKrOmWhSuZfHwBOEVEzWgtNHOYPqwF99dyiSgMZiyvwtqOam y3xxnUyEgYIxsyL7sjPSD82bTclnR5/ZjdHhzJwTbxwf4F5I3SOsR3freAYCKvAx hzvfALHsjCgV2F2CljP5KNLsfK52fNFQfjWqtbMtlgQab3AUBfECTcm2MAOtl2zw Bk167JoYEg2tEPEbty3jKF/39QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNzC5mtO BxaCBarbx4pUermgYK+VMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0QzMjYwQjIw NzI4MTFFREJBOEE5RDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkeQwDQYJKoZIhvcNAQELBQADggEBAByHepbINA0rBuyJ hVjjcOHLxVbeRpPJ37BJNT+4X3WjBVVJ1RUvLhiRT9OfSzB1ZQB1oMrsBsVoEFYb D7UQMx0ooknWNp2q25iF6ULOWVskNrF+QbrZy7z13v8udUx5dxiyzPnl7ez4dW4j cwKuAnMNOQi4rCg/t891+Sa1F8VVDDB6/kan98TTjwZ4ZlisM5qPgKIgZFTSQBS0 R5i2SlSq11IsgvYl3Xx2FIJRQ2PM21hVHxUJwFrwcX1L4uJWUpG7il2sALGECTMA /bg8kITjGowbL8l1ghsCGQ/+ndYbiOiMuCFHr0dUv+dZ5SPZPCXc46rDOkeOJEsV W6dFyMI= -----END CERTIFICATE-----Generated at Thu Apr 25 22:33:52 2024 by rpki-client on console-fra.rpki-client.org