$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa File: 41864594DB6711ECA4982F4BC4F9AE02.roa (raw, json) Hash identifier: Z+mFnMauRkxYOM8aSUBNO5Nqvq4yyBx52yQl0DvhjbA= Subject key identifier: 86:BC:B3:13:F7:E0:2A:B3:3A:11:6A:38:B5:F5:E1:8A:D9:78:1E:D9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7023 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa Signing time: Wed 10 May 2023 16:42:08 +0000 ROA not before: Wed 10 May 2023 16:42:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149195 IP address blocks: 103.178.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28707 (0x7023) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc960-59dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bf:97:bd:4c:16:5e:06:5e:55:16:cf:81:bd: a9:bc:b9:1c:e8:4e:4e:1c:fe:6d:ea:62:50:a4:e7: bf:44:8a:dd:cc:4f:e1:0a:e0:0b:2b:ce:e8:38:fc: ad:99:fb:e3:f3:7a:d7:06:25:d1:de:85:88:de:c0: 95:3c:48:00:41:d1:db:0c:7c:6d:90:25:b7:2d:10: ee:43:e4:07:a4:f9:3d:43:41:1a:7d:e3:5d:d2:b6: 8f:1e:1f:01:1d:70:57:72:1d:5c:01:85:7b:5f:e5: 64:91:3d:4c:fb:e6:c2:25:b3:3c:c2:00:19:a1:39: a9:49:c1:54:90:da:2d:c0:3e:93:6c:84:2c:3e:63: 92:2c:c7:bc:b4:01:3d:cc:80:10:ce:71:70:70:9c: 02:25:80:c1:b2:3c:e5:a0:85:13:19:f0:bb:8a:3d: 9d:8c:cd:d5:63:7b:65:75:cc:a6:d1:09:44:e1:a7: e1:f0:33:86:95:06:9f:4d:82:db:d9:7e:b2:78:ef: 82:7e:d6:ae:98:ba:c0:f7:43:c6:49:db:93:dd:f5: e3:ea:30:61:f4:e2:ba:1e:ec:59:cb:6c:a9:72:d6: 89:eb:d7:18:4d:ca:f4:a7:bd:5e:f6:8b:27:fc:01: 20:ce:57:61:54:b0:73:9a:b9:3d:8e:77:02:d0:ad: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BC:B3:13:F7:E0:2A:B3:3A:11:6A:38:B5:F5:E1:8A:D9:78:1E:D9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41864594DB6711ECA4982F4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.48.0/23 Signature Algorithm: sha256WithRSAEncryption 46:af:bb:3b:fc:32:89:e3:54:45:52:52:92:af:17:77:2e:80: 53:e1:a6:da:c7:77:66:e8:3b:77:34:a4:08:92:5c:59:fa:8e: e3:b8:2d:92:40:17:9a:47:09:7a:f4:47:80:1c:c8:c0:49:8b: c0:51:75:2a:c8:65:13:1b:33:3b:07:7d:ec:02:56:e1:d3:f0: e3:43:92:5d:93:aa:dd:68:bd:81:20:e0:4c:ce:e9:d4:66:8a: 59:6f:a7:3a:72:c4:2f:d4:f8:8c:ea:4b:1e:d3:1a:15:bc:a8: fa:ed:8f:e7:f6:67:a2:7d:f7:bd:62:3f:61:78:e1:4c:49:c0: b0:ae:70:a6:f2:c2:46:c0:a8:03:ff:fe:a1:00:2d:91:9b:f1: 13:1c:19:cc:7b:9f:3a:92:40:8a:40:b0:72:59:9e:07:5c:04: 74:0a:28:03:d9:e1:e4:82:26:56:8d:54:b1:e3:5f:97:68:14: 94:2d:05:82:81:40:1e:22:1b:ee:4f:8f:c2:8f:a0:55:d2:3f: de:c2:e5:6e:66:06:90:d5:e1:28:a4:ab:91:4c:16:69:ee:9a: 70:99:6c:db:f2:1e:98:04:82:93:fe:49:c8:7c:aa:d9:8c:26: 9f:81:fe:e6:3d:b1:f6:62:9d:4c:84:ef:0c:50:10:1c:ba:38: 7e:a2:f9:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk2MC01OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9r+XvUwWXgZeVRbPgb2pvLkc6E5OHP5t6mJQpOe/RIrdzE/hCuALK87oOPyt mfvj83rXBiXR3oWI3sCVPEgAQdHbDHxtkCW3LRDuQ+QHpPk9Q0EafeNd0raPHh8B HXBXch1cAYV7X+VkkT1M++bCJbM8wgAZoTmpScFUkNotwD6TbIQsPmOSLMe8tAE9 zIAQznFwcJwCJYDBsjzloIUTGfC7ij2djM3VY3tldcym0QlE4afh8DOGlQafTYLb 2X6yeO+CftaumLrA90PGSduT3fXj6jBh9OK6HuxZy2ypctaJ69cYTcr0p71e9osn /AEgzldhVLBzmrk9jncC0K1WXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIa8sxP3 4CqzOhFqOLX14YrZeB7ZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDE4NjQ1OTRE QjY3MTFFQ0E0OTgyRjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsjAwDQYJKoZIhvcNAQELBQADggEBAEavuzv8MonjVEVS UpKvF3cugFPhptrHd2boO3c0pAiSXFn6juO4LZJAF5pHCXr0R4AcyMBJi8BRdSrI ZRMbMzsHfewCVuHT8ONDkl2Tqt1ovYEg4EzO6dRmillvpzpyxC/U+IzqSx7TGhW8 qPrtj+f2Z6J9971iP2F44UxJwLCucKbywkbAqAP//qEALZGb8RMcGcx7nzqSQIpA sHJZngdcBHQKKAPZ4eSCJlaNVLHjX5doFJQtBYKBQB4iG+5Pj8KPoFXSP97C5W5m BpDV4Sikq5FMFmnumnCZbNvyHpgEgpP+Sch8qtmMJp+B/uY9sfZinUyE7wxQEBy6 OH6i+aE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org