$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa File: 3EBE33A68F6811EEAE1CA63DC4F9AE02.roa (raw, json) Hash identifier: oHf6ObCioGX3+2QNe0rapMZuAQII2nJzbQTGruw/xKs= Subject key identifier: 1F:03:D4:47:96:D9:F1:99:12:29:82:B5:35:AC:5C:F3:48:D5:EC:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F1F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa Signing time: Thu 30 Nov 2023 10:07:19 +0000 ROA not before: Thu 30 Nov 2023 10:07:19 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141555 IP address blocks: 103.163.148.0/23 maxlen: 24 2001:df1:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32543 (0x7f1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 30 10:07:19 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65685ed6-5e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:f7:f6:75:81:e4:f5:9f:e5:e2:1d:38:74: 35:db:38:09:cd:a1:f6:5a:8c:fa:aa:bd:b9:f0:53: 3e:94:e8:54:09:fa:f0:c2:72:33:18:a2:fb:0c:50: ae:1e:08:49:fd:e8:31:f3:5c:94:cd:72:16:71:72: a8:5c:79:08:2c:3a:2f:9f:f5:1b:d6:75:70:6f:c5: 9e:9e:41:21:18:5d:42:80:8b:d6:4b:a5:5c:74:5a: 58:77:b7:a3:cf:64:6f:8f:43:78:0d:5f:6c:cf:a9: 7c:63:b4:80:5a:6d:cb:da:d1:03:84:1e:8a:6f:05: f1:73:3b:82:48:af:23:4f:0f:2d:e6:84:a8:39:1b: 39:c6:4b:06:fd:1e:a3:05:3e:4d:e5:c9:82:b3:59: 12:8e:ca:14:f6:cd:95:dd:bc:7c:24:4a:82:4c:a3: 5d:24:ca:c8:8f:80:21:13:e0:37:37:dd:9a:bd:ac: 0d:07:02:63:f5:cf:ff:44:62:65:1d:e1:c9:99:ad: fa:81:5b:e0:01:ca:b5:ef:8a:55:70:17:35:02:ae: 7a:d6:72:00:46:37:2a:87:ce:76:87:18:4a:3d:14: 6f:d5:2e:26:36:b5:66:64:60:67:ba:80:0b:ca:c1: cd:90:6e:82:fa:f1:db:bb:63:22:29:03:b2:92:9a: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:D4:47:96:D9:F1:99:12:29:82:B5:35:AC:5C:F3:48:D5:EC:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.148.0/23 IPv6: 2001:df1:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption 34:9d:2d:9f:00:11:72:8f:e2:8e:53:60:ec:de:fa:77:71:a4: 61:96:13:a0:49:42:e3:37:73:78:ff:af:cb:9b:66:a0:39:4b: 49:e2:04:be:98:3b:eb:7b:8e:f9:0e:80:ae:9b:0b:e6:b5:e1: ea:8f:f4:56:e0:d1:ac:fc:c4:fd:c1:d9:28:eb:1f:18:21:76: c5:d6:58:b1:11:7b:04:fd:9e:be:f1:75:57:38:e6:bb:f8:0b: 7e:27:e6:d3:5a:df:6a:1b:5e:87:6a:24:49:4a:93:3a:91:07: 2a:53:f2:8e:f1:c8:75:c7:13:4d:96:42:68:e4:0d:bc:15:4e: 85:2d:f7:9f:57:63:e6:26:99:b6:3f:4d:71:67:a3:ca:5e:7f: f2:a2:20:ca:b2:69:44:20:ae:2a:3e:68:07:2f:9d:04:6b:a6: e2:db:f6:1e:1f:1a:77:74:ea:8a:1b:32:e8:21:4c:52:41:86: 26:64:f1:a5:3f:47:9c:45:39:8a:37:a9:49:15:62:1c:37:4c: 61:fe:ec:eb:64:71:b7:e4:96:f7:f8:4f:c6:a9:0b:fb:ee:23: f1:11:b1:7e:d9:e7:48:66:fc:e6:17:b3:34:7d:d1:5c:6e:89: 85:49:ed:0e:24:41:82:5f:5a:93:99:98:df:04:8d:de:b1:60: 6f:21:94:49 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTMwMTAwNzE5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4NWVkNi01ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrz39nWB5PWf5eIdOHQ12zgJzaH2Woz6qr258FM+lOhUCfrwwnIzGKL7DFCu HghJ/egx81yUzXIWcXKoXHkILDovn/Ub1nVwb8WenkEhGF1CgIvWS6VcdFpYd7ej z2Rvj0N4DV9sz6l8Y7SAWm3L2tEDhB6KbwXxczuCSK8jTw8t5oSoORs5xksG/R6j BT5N5cmCs1kSjsoU9s2V3bx8JEqCTKNdJMrIj4AhE+A3N92avawNBwJj9c//RGJl HeHJma36gVvgAcq174pVcBc1Aq561nIARjcqh852hxhKPRRv1S4mNrVmZGBnuoAL ysHNkG6C+vHbu2MiKQOykpr0KQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB8D1EeW 2fGZEimCtTWsXPNI1ezJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0VCRTMzQTY4 RjY4MTFFRUFFMUNBNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFno5QwDwQCAAIwCQMHACABDfE7wDANBgkqhkiG9w0BAQsF AAOCAQEANJ0tnwARco/ijlNg7N76d3GkYZYToElC4zdzeP+vy5tmoDlLSeIEvpg7 63uO+Q6ArpsL5rXh6o/0VuDRrPzE/cHZKOsfGCF2xdZYsRF7BP2evvF1Vzjmu/gL fifm01rfahteh2okSUqTOpEHKlPyjvHIdccTTZZCaOQNvBVOhS33n1dj5iaZtj9N cWejyl5/8qIgyrJpRCCuKj5oBy+dBGum4tv2Hh8ad3Tqihsy6CFMUkGGJmTxpT9H nEU5ijepSRViHDdMYf7s62Rxt+SW9/hPxqkL++4j8RGxftnnSGb85hezNH3RXG6J hUntDiRBgl9ak5mY3wSN3rFgbyGUSQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org