$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E1A70E5F3511EC9ED20D29C4F9AE02.roa File: 40E1A70E5F3511EC9ED20D29C4F9AE02.roa (raw, json) Hash identifier: JXp7Nnta1UxWs0d3XDX2342wo2LY49XxqYFM38UeQLw= Subject key identifier: 25:1A:43:A1:E5:1D:CE:52:8E:B0:84:7F:CD:15:E1:B4:91:5C:12:81 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FD2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E1A70E5F3511EC9ED20D29C4F9AE02.roa Signing time: Wed 10 May 2023 16:40:38 +0000 ROA not before: Wed 10 May 2023 16:40:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146942 IP address blocks: 103.172.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28626 (0x6fd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:40:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc905-658c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:56:ab:76:f7:32:8d:54:08:d3:a0:75:eb: 03:38:36:6a:90:e9:b7:17:0b:f5:43:1a:74:22:01: fd:4b:86:91:48:fc:12:3d:20:f1:f3:5a:cf:f7:38: 05:23:bd:b3:27:86:94:47:36:e1:be:9f:36:90:14: 13:9a:ff:61:c2:2f:c4:a4:26:31:fe:17:8b:16:75: 34:11:9e:af:9d:0d:e6:d3:5a:c8:12:a9:5a:22:af: d0:ac:e9:f7:22:f6:d3:47:5d:3e:8e:ff:ec:26:10: 75:25:25:12:91:c5:96:06:a0:21:ab:e2:18:ce:d9: 6c:20:9e:e0:c0:80:f3:c2:02:5e:e6:f8:63:76:c2: 40:b8:8f:bf:9d:42:c9:e9:bf:3b:32:6b:1e:46:1d: 59:84:41:ab:c2:7d:87:30:06:33:11:8c:4f:29:c8: 3a:75:be:27:d4:ef:5d:f1:74:d1:ca:e2:dc:5e:3f: 06:cd:07:e7:dd:6b:2a:6c:4e:26:ed:88:df:9c:6a: 0c:f0:93:3c:2a:a3:2e:cb:3a:64:82:73:01:df:5b: 9b:a9:aa:86:73:92:cb:97:88:10:e4:ad:8e:82:93: cd:f3:a8:dd:dc:d3:9c:d0:d6:9e:27:1d:48:f5:2f: 5a:60:df:a0:a3:69:df:fe:64:c3:50:09:bf:7e:86: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1A:43:A1:E5:1D:CE:52:8E:B0:84:7F:CD:15:E1:B4:91:5C:12:81 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E1A70E5F3511EC9ED20D29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.152.0/23 Signature Algorithm: sha256WithRSAEncryption b9:76:1e:22:5b:92:e2:01:8f:2a:28:0f:ae:f2:f3:2e:3e:13: 45:27:06:5b:78:7a:9d:95:5e:63:4b:4f:e6:35:9d:6d:57:eb: ff:80:8a:b6:95:73:6a:fd:90:a6:8e:a2:cb:a5:95:e5:a4:02: 3a:77:ae:73:83:37:d4:00:2e:af:db:64:8c:1d:38:8e:d4:1b: 6c:28:65:6a:13:a0:73:9b:69:45:8c:48:69:43:0b:8c:8c:db: 31:33:8c:a5:5b:28:6e:a8:a1:1c:71:ef:4e:03:30:00:e1:41: 52:ce:bd:f1:50:75:62:3b:16:ba:aa:09:9b:4e:5c:8a:a6:05: a6:9e:f0:7c:53:05:e0:5f:13:3a:b3:3c:68:7a:03:24:af:78: f0:c1:76:64:50:75:db:5e:2a:00:7e:14:57:32:83:47:a1:28: ba:ff:8a:e3:a0:c5:06:fb:30:c7:3f:e2:2d:c9:fc:f3:ca:9b: 39:ba:57:b7:f0:43:6c:1c:b5:d8:60:39:7f:b8:65:da:31:7c: 9b:2d:74:2d:cd:7b:ae:b9:d1:a0:69:18:24:1c:ba:0f:e2:83: 82:6e:6b:b8:a8:93:4c:fd:ec:fc:16:ae:ea:56:0c:90:d5:1b: cd:dd:7f:bc:ca:3f:21:33:95:e0:c2:ad:e9:e6:cc:e0:c2:f8: b4:90:63:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICb9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MDM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzkwNS02NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4pWq3b3Mo1UCNOgdesDODZqkOm3Fwv1Qxp0IgH9S4aRSPwSPSDx81rP9zgF I72zJ4aURzbhvp82kBQTmv9hwi/EpCYx/heLFnU0EZ6vnQ3m01rIEqlaIq/QrOn3 IvbTR10+jv/sJhB1JSUSkcWWBqAhq+IYztlsIJ7gwIDzwgJe5vhjdsJAuI+/nULJ 6b87MmseRh1ZhEGrwn2HMAYzEYxPKcg6db4n1O9d8XTRyuLcXj8GzQfn3WsqbE4m 7YjfnGoM8JM8KqMuyzpkgnMB31ubqaqGc5LLl4gQ5K2OgpPN86jd3NOc0NaeJx1I 9S9aYN+go2nf/mTDUAm/foa75QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUaQ6Hl Hc5SjrCEf80V4bSRXBKBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDBFMUE3MEU1 RjM1MTFFQzlFRDIwRDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrJgwDQYJKoZIhvcNAQELBQADggEBALl2HiJbkuIBjyoo D67y8y4+E0UnBlt4ep2VXmNLT+Y1nW1X6/+AiraVc2r9kKaOosulleWkAjp3rnOD N9QALq/bZIwdOI7UG2woZWoToHObaUWMSGlDC4yM2zEzjKVbKG6ooRxx704DMADh QVLOvfFQdWI7FrqqCZtOXIqmBaae8HxTBeBfEzqzPGh6AySvePDBdmRQddteKgB+ FFcyg0ehKLr/iuOgxQb7MMc/4i3J/PPKmzm6V7fwQ2wctdhgOX+4ZdoxfJstdC3N e6650aBpGCQcug/ig4Jua7iok0z97PwWrupWDJDVG83df7zKPyEzleDCrenmzODC +LSQY+A= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org