$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DE1CDE201B311ED84DA7964C4F9AE02.roa File: 3DE1CDE201B311ED84DA7964C4F9AE02.roa (raw, json) Hash identifier: gXGgJwLbyk0UnedZ/qfrn8uYIj8pV1hGsJZzcKXCC14= Subject key identifier: 79:7B:99:C4:BE:93:EC:F5:8F:3F:59:7F:5F:74:9E:66:6D:CA:79:DA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B25 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DE1CDE201B311ED84DA7964C4F9AE02.roa Signing time: Wed 10 May 2023 16:18:14 +0000 ROA not before: Wed 10 May 2023 16:18:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134315 IP address blocks: 103.148.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27429 (0x6b25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3c6-03c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:61:42:17:ca:c0:ee:b3:8d:8c:3b:79:0b: 2c:f9:4c:2d:a6:8e:85:69:84:ef:54:22:f1:80:b3: 26:ec:02:a7:bd:63:c4:8e:fe:be:b3:a4:0b:1e:33: eb:90:6d:1e:af:39:6c:8d:ce:fd:80:0f:d6:41:84: 8b:c6:45:c7:42:85:ac:ec:d0:a9:89:06:0d:b4:94: 17:c2:aa:14:1b:10:6c:56:f4:d3:76:a2:ec:8e:cf: 76:e6:b7:f2:ff:13:f9:ab:bb:ed:99:19:11:53:dc: f8:d6:b9:7b:66:08:0e:53:65:b1:b8:7c:32:a6:9a: c3:d7:d3:99:e1:d3:12:ac:79:86:63:8a:b9:e2:8a: cb:30:cf:95:aa:05:49:55:66:55:70:ef:28:fc:a5: f6:0a:91:5c:02:27:89:e9:d3:2e:67:86:cb:98:ba: 2c:43:5c:e3:37:ce:75:cd:fa:8e:5b:e8:c2:93:57: 2a:1a:f2:53:a9:7a:89:cb:1b:56:32:54:fb:3d:da: 9b:d5:58:b5:d0:cb:3b:3c:f0:85:f6:52:5a:ba:4e: 03:38:4f:f5:68:e0:19:cc:54:d2:88:86:d3:9e:2c: 12:df:72:13:9d:eb:7d:ce:7e:a7:93:e1:ba:8b:92: c8:5c:0d:b1:f0:db:58:ba:59:d8:6a:fc:ca:1e:18: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:99:C4:BE:93:EC:F5:8F:3F:59:7F:5F:74:9E:66:6D:CA:79:DA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DE1CDE201B311ED84DA7964C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.66.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:81:81:d9:d6:09:b6:f0:17:82:71:ee:eb:6b:7e:43:eb:4c: e5:58:c7:eb:77:84:dd:45:60:63:a9:ab:3f:38:86:b3:c5:60: 48:98:4e:47:16:f3:46:9c:f8:e5:d6:7c:db:2b:0f:02:10:ba: 36:4a:8f:e0:45:d5:87:a8:3a:73:2a:e8:ff:aa:0e:69:f6:d8: b2:c7:7d:b0:19:05:d9:e2:c6:7c:97:c6:cf:e4:fc:82:af:d5: c3:d9:1c:b8:07:aa:25:b1:2a:17:23:36:db:0e:60:ee:30:73: 4e:04:c4:f3:a4:94:25:8a:0a:c6:f4:34:d9:66:c8:45:53:60: 51:3e:8d:ae:f0:c5:ac:a9:03:05:9c:c7:0c:6a:3c:5d:ec:6e: f9:52:84:92:e6:e4:e1:50:92:c2:b7:60:6b:2a:5b:e4:cd:50: e9:14:9a:76:1b:d5:b9:7e:98:d6:df:52:f3:94:86:3d:df:94: 75:f5:aa:fd:87:7d:c7:c3:ed:11:58:8e:bf:15:7e:74:8b:5f: cb:ef:cd:4f:a3:32:05:12:a8:0e:3f:e2:68:2d:55:1e:22:76: 0c:41:61:31:c2:04:f8:b7:1a:2f:2a:10:af:51:19:d2:d2:fa: 1e:52:74:d7:b0:cf:26:9f:15:06:45:72:fe:b4:a5:36:14:ba: 22:48:a4:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICayUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNjNi0wM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDFhQhfKwO6zjYw7eQss+Uwtpo6FaYTvVCLxgLMm7AKnvWPEjv6+s6QLHjPr kG0erzlsjc79gA/WQYSLxkXHQoWs7NCpiQYNtJQXwqoUGxBsVvTTdqLsjs925rfy /xP5q7vtmRkRU9z41rl7ZggOU2WxuHwypprD19OZ4dMSrHmGY4q54orLMM+VqgVJ VWZVcO8o/KX2CpFcAieJ6dMuZ4bLmLosQ1zjN851zfqOW+jCk1cqGvJTqXqJyxtW MlT7Pdqb1Vi10Ms7PPCF9lJauk4DOE/1aOAZzFTSiIbTniwS33ITnet9zn6nk+G6 i5LIXA2x8NtYulnYavzKHhjtzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHl7mcS+ k+z1jz9Zf190nmZtynnaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0RFMUNERTIw MUIzMTFFRDg0REE3OTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlEIwDQYJKoZIhvcNAQELBQADggEBAEyBgdnWCbbwF4Jx 7utrfkPrTOVYx+t3hN1FYGOpqz84hrPFYEiYTkcW80ac+OXWfNsrDwIQujZKj+BF 1YeoOnMq6P+qDmn22LLHfbAZBdnixnyXxs/k/IKv1cPZHLgHqiWxKhcjNtsOYO4w c04ExPOklCWKCsb0NNlmyEVTYFE+ja7wxaypAwWcxwxqPF3sbvlShJLm5OFQksK3 YGsqW+TNUOkUmnYb1bl+mNbfUvOUhj3flHX1qv2HfcfD7RFYjr8VfnSLX8vvzU+j MgUSqA4/4mgtVR4idgxBYTHCBPi3Gi8qEK9RGdLS+h5SdNewzyafFQZFcv60pTYU uiJIpGA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org