$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/409B0BF0E44A11ED9BF02C16C4F9AE02.roa File: 409B0BF0E44A11ED9BF02C16C4F9AE02.roa (raw, json) Hash identifier: jYTu2SNMfrRHv2GnIcptdUKfFcPCV5DLfZHk69M1fAI= Subject key identifier: 4B:E8:80:86:BA:00:30:D8:76:2B:AD:5F:FA:F2:07:C3:A2:BD:E3:37 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E56 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/409B0BF0E44A11ED9BF02C16C4F9AE02.roa Signing time: Wed 10 May 2023 16:33:35 +0000 ROA not before: Wed 10 May 2023 16:33:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141148 IP address blocks: 103.77.154.0/24 maxlen: 24 103.77.155.0/24 maxlen: 24 103.216.145.0/24 maxlen: 24 103.216.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28246 (0x6e56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:35 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc75f-7b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:8f:c8:91:35:0d:6a:56:67:2f:9e:9f:df: 3d:13:fe:24:e0:01:aa:4b:78:fb:22:12:88:d9:ff: f7:33:c2:06:78:96:3d:ec:35:d0:55:ee:e8:57:e1: 5e:c0:6c:78:ab:03:73:bc:d7:55:aa:c2:83:56:03: 7a:63:3d:89:81:48:27:60:9f:90:d3:df:2e:78:24: 34:a0:00:df:b4:79:c6:db:ff:fc:92:07:4c:7b:e9: bf:4b:a5:5b:4b:c1:3e:ef:84:cc:01:59:e6:7f:84: d5:28:7c:5f:63:97:5b:77:be:8c:fe:28:fc:d8:47: 2d:cf:f0:b5:a8:74:af:f3:3e:24:84:34:38:ce:e3: 70:1f:c3:4a:ce:50:f9:45:48:ef:8b:18:f3:e9:c3: b4:d0:4c:6c:33:ec:a0:43:b3:f1:de:ad:6a:43:67: 1c:ca:fa:08:a2:7f:bb:ab:af:72:27:a0:b5:54:17: 87:fe:e6:8d:ef:bc:1d:22:ae:62:aa:71:c3:04:cb: b5:23:12:3c:4c:2c:c0:17:a8:6a:1b:5c:87:b8:28: 64:2e:a3:e7:f0:7a:cd:29:4c:dd:19:d1:ac:c9:7d: 62:76:8d:9f:63:5e:bd:6b:a5:8d:b6:a0:19:ab:81: 85:69:64:2b:c5:55:91:cd:f3:f0:01:5f:88:34:92: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E8:80:86:BA:00:30:D8:76:2B:AD:5F:FA:F2:07:C3:A2:BD:E3:37 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/409B0BF0E44A11ED9BF02C16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.154.0/23 103.216.145.0-103.216.146.255 Signature Algorithm: sha256WithRSAEncryption 50:3a:db:78:67:54:15:93:d9:13:71:2c:cd:77:68:5d:3f:30: 8c:df:13:91:32:76:07:cf:e1:29:cc:41:37:b2:87:d5:96:59: 65:6c:50:ce:21:4e:e7:a2:14:7c:e8:b8:8e:cb:49:08:d9:05: c1:3f:d8:64:f8:48:22:21:37:b0:05:db:2a:2d:d9:bf:84:13: 15:74:4d:7e:3a:05:80:cb:0e:88:f2:0b:4a:d7:38:2a:55:43: d0:22:3a:ca:b9:e3:c7:ab:e9:3e:8d:85:be:09:87:c3:cb:fa: 90:9c:d2:a2:8e:16:25:70:3a:20:40:a2:53:24:2c:aa:6a:08: a4:76:11:84:d0:4b:53:1e:45:fb:46:57:47:0b:21:08:18:42: 3e:e2:65:9f:2b:2a:1d:b9:07:0b:2f:a5:14:08:b0:7e:6c:80: dd:69:9e:c4:7e:ac:5e:70:b7:9c:e8:88:66:d1:a2:8c:3c:2a: c2:95:6d:f6:6c:36:27:05:02:38:8d:3c:11:02:7d:e4:b6:82: 01:56:9d:b9:be:cc:6b:40:92:36:b2:9c:4c:1e:89:41:0c:66: 5e:94:73:68:10:98:ff:15:b9:72:c5:34:06:ff:a8:39:db:1e: f2:dd:13:98:80:7e:59:a0:d4:1e:ba:53:a0:09:71:7c:b8:21: 28:3c:21:d8 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICblYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc1Zi03YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KSPyJE1DWpWZy+en989E/4k4AGqS3j7IhKI2f/3M8IGeJY97DXQVe7oV+Fe wGx4qwNzvNdVqsKDVgN6Yz2JgUgnYJ+Q098ueCQ0oADftHnG2//8kgdMe+m/S6Vb S8E+74TMAVnmf4TVKHxfY5dbd76M/ij82Ectz/C1qHSv8z4khDQ4zuNwH8NKzlD5 RUjvixjz6cO00ExsM+ygQ7Px3q1qQ2ccyvoIon+7q69yJ6C1VBeH/uaN77wdIq5i qnHDBMu1IxI8TCzAF6hqG1yHuChkLqPn8HrNKUzdGdGsyX1ido2fY169a6WNtqAZ q4GFaWQrxVWRzfPwAV+INJLPuwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFEvogIa6 ADDYdiutX/ryB8OiveM3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDA5QjBCRjBF NDRBMTFFRDlCRjAyQzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAFnTZowDAMEAGfYkQMEAGfYkjANBgkqhkiG9w0BAQsFAAOC AQEAUDrbeGdUFZPZE3EszXdoXT8wjN8TkTJ2B8/hKcxBN7KH1ZZZZWxQziFO56IU fOi4jstJCNkFwT/YZPhIIiE3sAXbKi3Zv4QTFXRNfjoFgMsOiPILStc4KlVD0CI6 yrnjx6vpPo2FvgmHw8v6kJzSoo4WJXA6IECiUyQsqmoIpHYRhNBLUx5F+0ZXRwsh CBhCPuJlnysqHbkHCy+lFAiwfmyA3WmexH6sXnC3nOiIZtGijDwqwpVt9mw2JwUC OI08EQJ95LaCAVadub7Ma0CSNrKcTB6JQQxmXpRzaBCY/xW5csU0Bv+oOdse8t0T mIB+WaDUHrpToAlxfLghKDwh2A== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:18 2024 by rpki-client on console-fra.rpki-client.org