$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E2E112891F11EEB4248666C4F9AE02.roa File: 40E2E112891F11EEB4248666C4F9AE02.roa (raw, json) Hash identifier: OlLRYOP8oxL7fuhYi1hEtXLruCfnaQd9Fao8rmzAxIo= Subject key identifier: 87:D2:0E:EB:BB:88:F9:2C:5C:87:9F:1B:3E:11:01:60:20:38:72:E5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7E93 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E2E112891F11EEB4248666C4F9AE02.roa Signing time: Wed 22 Nov 2023 10:13:47 +0000 ROA not before: Wed 22 Nov 2023 10:13:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151715 IP address blocks: 202.47.166.0/23 maxlen: 24 2001:df3:24c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32403 (0x7e93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 22 10:13:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=655dd45b-61a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:8b:ae:03:b7:e8:42:d1:e8:52:fb:bb:82: 08:bc:30:25:aa:8a:20:9e:df:65:68:22:bb:61:04: d2:b7:d0:7e:c4:3d:40:68:10:5f:db:b9:cb:63:d7: 95:71:a2:8e:27:bf:c4:df:41:a7:3c:c0:91:cb:22: 11:d6:66:a2:c3:65:54:c5:a4:35:8e:31:0d:c8:a6: c9:aa:71:13:9a:86:bf:2b:d5:f2:0b:fe:96:cc:5c: 89:d1:ec:dd:62:a6:d9:e3:91:36:2b:02:52:d6:59: 50:37:0f:d4:cf:a9:ac:4a:36:4a:57:98:db:a4:ea: e2:4a:5a:15:fd:04:0c:1a:af:fc:ec:64:9b:37:9e: 05:05:d4:5b:f9:43:01:84:f8:9c:c4:a9:54:ac:2b: 6b:f6:76:c5:c6:78:cd:12:6c:8e:fb:cd:18:f4:6a: 03:e1:a5:6f:d9:2d:88:e1:53:2d:2e:32:67:13:66: 51:b4:13:42:b8:9f:08:db:76:15:aa:5e:54:34:69: 45:b0:85:2c:91:ee:68:39:44:18:07:5b:63:5d:e2: 22:41:58:02:11:e8:ac:5e:63:19:d9:c1:a5:28:f2: 3e:46:f6:b2:d8:2a:0f:1f:92:a7:75:00:9e:24:d4: e1:a9:5d:1b:ff:ec:1b:91:27:98:ad:a6:6d:16:40: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:0E:EB:BB:88:F9:2C:5C:87:9F:1B:3E:11:01:60:20:38:72:E5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40E2E112891F11EEB4248666C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.166.0/23 IPv6: 2001:df3:24c0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:58:4f:df:da:ed:0a:63:f6:80:74:53:6e:42:b9:be:ad:23: 70:b8:d9:32:c7:29:58:43:28:4c:63:24:a3:96:c0:2c:b3:8b: fb:2e:77:2a:e3:aa:a6:42:61:03:12:3d:c5:a0:46:0c:ec:2f: 93:cb:53:62:b1:de:df:33:72:bc:c2:28:3e:5b:70:fd:2f:77: 29:b0:d9:0b:21:fb:6c:f8:c0:be:31:9a:ff:87:ee:5e:87:ad: 2f:39:53:4f:05:e5:be:e7:ce:6e:57:57:8f:03:87:54:7a:03: d2:9a:e5:f9:25:cf:c8:66:23:90:2b:98:c0:a9:f0:96:c7:ee: 5a:93:87:3d:e9:99:3a:ea:61:55:7f:0e:38:96:3f:ea:c5:5b: a6:7f:5b:1a:73:33:f8:39:12:1f:df:05:d9:da:0a:d4:0a:c7: 96:7a:1a:b6:20:5a:af:76:fa:d7:1c:c5:9c:34:d7:2c:38:2d: 40:52:03:6b:14:c3:2d:3d:46:4f:98:1a:be:50:f0:8d:99:cb: 29:ee:3c:09:0c:17:96:af:6c:99:fb:56:6c:7e:98:ab:f4:9d: cc:19:a1:ac:fa:5c:36:2c:ae:cc:17:0a:a0:55:44:70:ac:c1: 7c:74:7f:00:a2:8a:15:16:89:b0:04:a3:9f:48:48:44:2e:59: 23:ca:f0:7f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTIyMTAxMzQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVkZDQ1Yi02MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8SLrgO36ELR6FL7u4IIvDAlqoognt9laCK7YQTSt9B+xD1AaBBf27nLY9eV caKOJ7/E30GnPMCRyyIR1maiw2VUxaQ1jjENyKbJqnETmoa/K9XyC/6WzFyJ0ezd YqbZ45E2KwJS1llQNw/Uz6msSjZKV5jbpOriSloV/QQMGq/87GSbN54FBdRb+UMB hPicxKlUrCtr9nbFxnjNEmyO+80Y9GoD4aVv2S2I4VMtLjJnE2ZRtBNCuJ8I23YV ql5UNGlFsIUske5oOUQYB1tjXeIiQVgCEeisXmMZ2cGlKPI+Rvay2CoPH5KndQCe JNThqV0b/+wbkSeYraZtFkDLpQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIfSDuu7 iPksXIefGz4RAWAgOHLlMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDBFMkUxMTI4 OTFGMTFFRUI0MjQ4NjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKL6YwDwQCAAIwCQMHACABDfMkwDANBgkqhkiG9w0BAQsF AAOCAQEADlhP39rtCmP2gHRTbkK5vq0jcLjZMscpWEMoTGMko5bALLOL+y53KuOq pkJhAxI9xaBGDOwvk8tTYrHe3zNyvMIoPltw/S93KbDZCyH7bPjAvjGa/4fuXoet LzlTTwXlvufObldXjwOHVHoD0prl+SXPyGYjkCuYwKnwlsfuWpOHPemZOuphVX8O OJY/6sVbpn9bGnMz+DkSH98F2doK1ArHlnoatiBar3b61xzFnDTXLDgtQFIDaxTD LT1GT5gavlDwjZnLKe48CQwXlq9smftWbH6Yq/SdzBmhrPpcNiyuzBcKoFVEcKzB fHR/AKKKFRaJsASjn0hIRC5ZI8rwfw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org