$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa File: 415D8040BE4811ED95E59254C4F9AE02.roa (raw, json) Hash identifier: I16+d4/5yMy8M5oS0lfmHlkIWs+HpbiSAl309GwD95Q= Subject key identifier: FE:2E:48:E8:6D:A0:91:DC:10:E2:F6:F4:96:DF:74:93:1F:65:31:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 756C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa Signing time: Thu 13 Jul 2023 04:57:46 +0000 ROA not before: Thu 13 Jul 2023 04:57:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133988 IP address blocks: 103.88.100.0/23 maxlen: 24 2400:dfe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30060 (0x756c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 13 04:57:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64af844a-9c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:c2:d3:cc:79:5c:24:cd:2f:66:c2:06:23: f1:92:6d:65:91:29:e9:a0:4f:d6:03:f5:97:ed:0f: dd:97:19:73:7e:81:4e:74:33:0a:d9:43:a4:1e:7e: 4d:3f:fb:28:6f:9b:08:21:0f:d6:86:bc:fa:c2:65: 59:19:ed:ff:98:cb:8f:71:23:1a:7e:ed:77:9e:64: 26:1b:70:0e:df:8a:08:ab:4d:be:31:2a:2e:a7:2b: c3:ef:e7:95:4e:cf:07:80:76:19:2c:c1:26:9c:09: 41:3d:3b:08:8e:86:31:33:e8:17:12:69:fd:e0:84: 2d:2d:f2:19:01:ed:41:18:67:05:24:ec:12:fe:9e: 91:62:8d:0c:fa:5e:1a:5d:fe:d7:58:35:5d:f5:4e: 49:ee:06:a6:9c:71:2f:63:2f:b8:a7:be:26:b5:66: 21:29:67:84:71:61:5a:cb:96:1a:b9:d0:65:b4:33: 57:0c:85:39:9c:82:fe:a2:b3:da:5b:2e:6c:d5:01: 0d:3d:be:da:25:45:09:f4:23:ba:20:57:d5:74:1d: 28:d9:91:6c:f0:9f:cc:34:b5:e7:31:b6:f6:08:40: 3f:15:67:2e:cd:23:71:79:17:50:4f:d9:16:34:f8: 5e:00:df:11:18:d2:a5:f4:c9:56:f4:2c:67:e4:c3: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:48:E8:6D:A0:91:DC:10:E2:F6:F4:96:DF:74:93:1F:65:31:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.100.0/23 IPv6: 2400:dfe0::/32 Signature Algorithm: sha256WithRSAEncryption 03:80:c4:77:0a:05:73:c0:15:3b:3d:1a:ce:fe:19:78:32:e4: 79:53:5b:bf:da:1f:5c:f0:3b:5f:c4:31:fd:18:62:b3:32:45: 94:65:44:03:5e:76:72:a9:5c:f4:4f:04:7a:6a:59:54:1b:9c: 3a:60:b3:14:3a:06:77:28:bd:12:ee:25:a0:a7:80:92:53:1c: f4:f2:ef:5c:9a:10:9a:6a:00:b8:55:bc:c5:0d:0e:54:3c:c2: dd:f0:5c:b5:45:1b:91:d5:d2:fa:25:f6:2c:d5:29:3e:b8:6b: 7f:5f:f8:41:41:71:a4:4c:21:ad:70:a9:80:31:e4:67:1f:56: bd:1c:63:10:fb:3e:66:00:a5:c8:c7:e1:1d:12:4f:6e:a8:16: 41:bf:16:7e:03:1c:3b:ae:33:c0:f4:50:40:b5:8e:4a:8e:b8: 6c:b8:9e:a9:0a:4e:73:51:50:6a:ba:20:c3:74:81:5e:54:c3: 68:fd:e2:51:3b:5d:a5:b4:da:66:3b:34:7b:86:56:1d:22:56: fe:60:97:08:ab:9c:f3:ea:98:fb:97:4b:e2:b9:ae:99:ff:de: ae:53:f4:91:8f:cb:34:de:f3:ba:d1:06:2f:e4:04:0b:c8:50: 4e:fb:29:3e:96:b7:31:d0:75:76:04:eb:e5:e9:a6:5f:00:4a: 20:c6:46:24 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICdWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzEzMDQ1NzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFmODQ0YS05YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKDC08x5XCTNL2bCBiPxkm1lkSnpoE/WA/WX7Q/dlxlzfoFOdDMK2UOkHn5N P/sob5sIIQ/Whrz6wmVZGe3/mMuPcSMafu13nmQmG3AO34oIq02+MSoupyvD7+eV Ts8HgHYZLMEmnAlBPTsIjoYxM+gXEmn94IQtLfIZAe1BGGcFJOwS/p6RYo0M+l4a Xf7XWDVd9U5J7gamnHEvYy+4p74mtWYhKWeEcWFay5YaudBltDNXDIU5nIL+orPa Wy5s1QENPb7aJUUJ9CO6IFfVdB0o2ZFs8J/MNLXnMbb2CEA/FWcuzSNxeRdQT9kW NPheAN8RGNKl9MlW9Cxn5MNvQQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFP4uSOht oJHcEOL29JbfdJMfZTH+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDE1RDgwNDBC RTQ4MTFFRDk1RTU5MjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnWGQwDQQCAAIwBwMFACQA3+AwDQYJKoZIhvcNAQELBQAD ggEBAAOAxHcKBXPAFTs9Gs7+GXgy5HlTW7/aH1zwO1/EMf0YYrMyRZRlRANednKp XPRPBHpqWVQbnDpgsxQ6BncovRLuJaCngJJTHPTy71yaEJpqALhVvMUNDlQ8wt3w XLVFG5HV0vol9izVKT64a39f+EFBcaRMIa1wqYAx5GcfVr0cYxD7PmYApcjH4R0S T26oFkG/Fn4DHDuuM8D0UEC1jkqOuGy4nqkKTnNRUGq6IMN0gV5Uw2j94lE7XaW0 2mY7NHuGVh0iVv5glwirnPPqmPuXS+K5rpn/3q5T9JGPyzTe87rRBi/kBAvIUE77 KT6WtzHQdXYE6+Xppl8ASiDGRiQ= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:17 2024 by rpki-client on console-ams.rpki-client.org