$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa File: 3D77F7F2F26311EAACBFDA5CC4F9AE02.roa (raw, json) Hash identifier: 8cuJnVbYIfFnAfcbJHFf0vyX9jamk7uv/GkupgiA5kU= Subject key identifier: 73:13:EE:F3:7D:9F:5E:5A:D7:85:25:A8:FA:58:B4:DA:A1:FF:5B:49 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AA9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa Signing time: Wed 10 May 2023 16:15:51 +0000 ROA not before: Wed 10 May 2023 16:15:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133690 IP address blocks: 103.154.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27305 (0x6aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:15:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc337-321e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:43:7d:a2:e4:25:8c:7a:50:23:3f:bb:cd: cf:43:55:7e:20:d5:19:e2:09:7d:b7:2a:a1:a8:05: 80:0a:b9:cf:ab:a5:93:ac:a1:eb:cc:96:ba:e1:fc: fb:b3:79:cf:13:3c:46:72:de:8a:14:4a:ec:37:df: 51:21:f0:77:fa:61:61:42:00:30:48:bb:83:c5:08: 58:dc:19:f4:39:4d:f8:e6:15:0a:00:5f:47:40:21: 2d:9f:db:66:e6:f2:ba:3b:c5:63:86:a4:ca:7b:88: b2:4a:ef:f8:96:c5:d9:49:14:25:b6:2a:d2:0d:8d: 11:8f:41:ca:93:89:b8:f5:5e:3d:23:02:91:45:2b: d8:11:e5:2f:9d:80:77:2d:a5:07:6e:a6:3a:2a:3c: a2:21:8b:1e:e9:36:06:0b:81:09:48:36:82:9d:57: b3:39:83:46:2f:93:d4:9e:5d:94:33:45:18:de:7c: 78:08:ce:b2:b9:33:48:fb:f1:85:ca:c5:3d:9e:ec: 61:17:1f:90:54:3a:28:bd:34:b8:99:2b:66:b4:29: 68:7d:f8:4b:3b:0c:aa:82:69:e2:fd:74:68:6a:7f: 2f:91:48:2e:a2:ec:27:90:9f:af:68:21:d4:ab:40: 15:4f:4f:cb:86:b1:e3:7c:7f:06:f9:2f:6d:f4:ef: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:EE:F3:7D:9F:5E:5A:D7:85:25:A8:FA:58:B4:DA:A1:FF:5B:49 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D77F7F2F26311EAACBFDA5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.56.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:9a:8a:fe:bb:da:a3:7a:d0:49:6a:31:48:a4:ed:83:0b:5a: fe:54:29:de:96:c3:02:09:9c:9e:21:c0:1c:0a:65:fb:a8:ff: fb:95:da:fb:bf:ef:b2:f5:fc:ee:d5:11:03:8e:fa:68:71:3d: ea:c7:2b:20:17:2b:45:a1:ff:e0:61:c4:4e:e8:ce:f8:29:d0: ed:5a:8d:af:8f:8e:61:56:dc:8c:c0:05:bd:0e:77:e7:49:7e: 3f:5a:90:c6:3b:8c:41:d7:2d:65:da:5d:8d:ae:15:49:4c:ff: 59:ba:c6:2a:d2:3d:c7:b0:71:0e:42:18:9b:32:d9:b6:11:98: 1a:35:d2:e7:45:48:4b:cb:ed:ef:de:f7:aa:18:ba:f6:6c:a1: 5c:89:a2:f1:13:d3:e4:a5:42:d7:de:dc:01:fc:9a:40:e2:2b: 45:a6:a7:13:93:7a:3a:7d:7d:a6:2c:bb:d3:5c:4e:cd:4e:48: 29:c2:a9:20:21:3e:36:f8:cd:82:29:3f:dc:8b:37:47:9e:31: ac:0d:80:8d:1b:df:f6:34:66:f0:66:fc:d2:14:98:f5:57:81: 26:38:cf:1d:f3:9f:f2:87:8e:c7:0e:07:a5:aa:d0:67:9e:0f: 10:aa:b1:09:2c:00:20:99:00:17:e5:dc:ea:99:a7:6f:e2:c3: b3:97:f6:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzMzNy0zMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSZDfaLkJYx6UCM/u83PQ1V+INUZ4gl9tyqhqAWACrnPq6WTrKHrzJa64fz7 s3nPEzxGct6KFErsN99RIfB3+mFhQgAwSLuDxQhY3Bn0OU345hUKAF9HQCEtn9tm 5vK6O8VjhqTKe4iySu/4lsXZSRQltirSDY0Rj0HKk4m49V49IwKRRSvYEeUvnYB3 LaUHbqY6KjyiIYse6TYGC4EJSDaCnVezOYNGL5PUnl2UM0UY3nx4CM6yuTNI+/GF ysU9nuxhFx+QVDoovTS4mStmtCloffhLOwyqgmni/XRoan8vkUguouwnkJ+vaCHU q0AVT0/LhrHjfH8G+S9t9O940wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHMT7vN9 n15a14UlqPpYtNqh/1tJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0Q3N0Y3RjJG MjYzMTFFQUFDQkZEQTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmjgwDQYJKoZIhvcNAQELBQADggEBAGqaiv672qN60Elq MUik7YMLWv5UKd6WwwIJnJ4hwBwKZfuo//uV2vu/77L1/O7VEQOO+mhxPerHKyAX K0Wh/+BhxE7ozvgp0O1aja+PjmFW3IzABb0Od+dJfj9akMY7jEHXLWXaXY2uFUlM /1m6xirSPcewcQ5CGJsy2bYRmBo10udFSEvL7e/e96oYuvZsoVyJovET0+SlQtfe 3AH8mkDiK0WmpxOTejp9faYsu9NcTs1OSCnCqSAhPjb4zYIpP9yLN0eeMawNgI0b 3/Y0ZvBm/NIUmPVXgSY4zx3zn/KHjscOB6Wq0GeeDxCqsQksACCZABfl3OqZp2/i w7OX9j0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org