$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41CEE5B49DE711EC9E35515BC4F9AE02.roa File: 41CEE5B49DE711EC9E35515BC4F9AE02.roa (raw, json) Hash identifier: mJhNUZsxpUEcK2BKoUNMsQKyXBylQbRoH8/fZREC7yk= Subject key identifier: 09:0C:8F:7F:F7:AB:54:84:27:7B:08:D4:81:E0:C2:17:6F:8E:A7:A9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D8A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41CEE5B49DE711EC9E35515BC4F9AE02.roa Signing time: Wed 10 May 2023 16:29:51 +0000 ROA not before: Wed 10 May 2023 16:29:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138710 IP address blocks: 103.134.156.0/24 maxlen: 24 103.134.157.0/24 maxlen: 24 103.134.158.0/24 maxlen: 24 103.134.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28042 (0x6d8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc67f-992f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:24:1c:22:06:e9:48:0f:38:82:84:30:ef: 99:fe:a3:e0:f1:42:ef:e9:69:8d:7c:6e:c6:3d:4f: 44:fc:0e:32:38:bc:27:09:ce:de:f6:7c:bf:fa:2c: 73:12:6a:fe:a5:33:95:6d:0f:a3:17:e1:22:fb:b2: c8:a1:cd:50:ac:5d:3f:3a:64:ae:f3:2e:44:ae:3d: 9d:9a:95:fb:83:30:bb:eb:22:87:4c:e6:18:36:07: a0:da:81:08:99:ff:90:62:78:50:3e:2a:4a:e5:97: 80:e1:79:87:b9:9a:06:b7:53:56:88:b7:a3:22:5a: 96:44:bb:72:e9:d1:45:1b:c8:6e:21:6a:d4:12:09: 41:f3:28:c5:0c:b4:c9:25:21:63:dc:b8:ad:0e:c1: a4:1f:c5:57:d1:2e:83:36:ae:13:c5:e7:06:2b:6b: 0e:f0:58:e9:7d:1c:5d:63:f1:d6:74:4b:66:d6:8b: 0b:a3:05:76:68:d9:d0:da:4e:6f:54:77:c6:03:ba: 16:56:79:71:98:c6:ab:c8:86:01:7e:e2:4c:68:0e: ad:6c:5f:c9:e3:30:af:56:e2:ba:83:f8:e6:c0:b3: 78:7c:35:82:4d:d1:72:9f:ab:2b:a8:c2:10:98:0b: b6:f2:0b:91:4e:d2:73:34:5f:15:b4:18:e4:88:25: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:8F:7F:F7:AB:54:84:27:7B:08:D4:81:E0:C2:17:6F:8E:A7:A9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41CEE5B49DE711EC9E35515BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.156.0/22 Signature Algorithm: sha256WithRSAEncryption 05:6d:44:b6:18:1e:36:3f:41:e4:2c:4d:a2:7b:4b:03:02:04: 95:c9:87:4a:56:17:cb:e1:ee:53:2f:02:e9:b2:b8:a8:4b:03: 13:7b:5e:f3:bf:01:ae:0e:43:6b:c4:9e:7d:76:24:1f:fb:9f: 82:ca:be:35:68:5a:d4:51:29:f7:b5:68:92:e4:36:3c:3d:93: 03:60:a0:9a:65:b4:78:4d:5e:01:61:fe:02:78:ba:32:0f:d2: 99:c2:98:92:70:c9:09:f7:c7:04:a9:a0:d1:fc:f3:66:fe:93: 62:52:47:b8:0f:34:28:c8:bc:1a:cf:b3:4d:6e:f5:e0:70:56: d3:02:8c:7c:ca:a7:d6:1f:35:91:02:3e:f1:ae:47:1d:d5:19: 7a:bc:dd:6a:25:8f:48:07:fc:e6:4a:c2:fe:dd:ec:c2:64:33: 93:df:34:95:13:a2:c0:26:b9:26:2f:2a:4c:d4:c5:0e:02:94: 99:e1:60:04:96:86:a7:62:09:ef:cd:b8:b5:6a:04:e1:5d:22: 6a:3b:11:1b:ce:79:2f:b2:48:c3:6f:ee:20:f9:46:33:98:68: 5c:70:9e:41:cd:50:36:b4:bc:7e:16:61:53:0f:7e:7f:e3:ce: 74:e3:d1:c5:3e:7a:2f:f6:24:53:1b:2d:41:36:88:fa:2e:0d: b9:84:52:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY3Zi05OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy50kHCIG6UgPOIKEMO+Z/qPg8ULv6WmNfG7GPU9E/A4yOLwnCc7e9ny/+ixz Emr+pTOVbQ+jF+Ei+7LIoc1QrF0/OmSu8y5Erj2dmpX7gzC76yKHTOYYNgeg2oEI mf+QYnhQPipK5ZeA4XmHuZoGt1NWiLejIlqWRLty6dFFG8huIWrUEglB8yjFDLTJ JSFj3LitDsGkH8VX0S6DNq4TxecGK2sO8FjpfRxdY/HWdEtm1osLowV2aNnQ2k5v VHfGA7oWVnlxmMaryIYBfuJMaA6tbF/J4zCvVuK6g/jmwLN4fDWCTdFyn6srqMIQ mAu28guRTtJzNF8VtBjkiCUc6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAkMj3/3 q1SEJ3sI1IHgwhdvjqepMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDFDRUU1QjQ5 REU3MTFFQzlFMzU1MTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhpwwDQYJKoZIhvcNAQELBQADggEBAAVtRLYYHjY/QeQs TaJ7SwMCBJXJh0pWF8vh7lMvAumyuKhLAxN7XvO/Aa4OQ2vEnn12JB/7n4LKvjVo WtRRKfe1aJLkNjw9kwNgoJpltHhNXgFh/gJ4ujIP0pnCmJJwyQn3xwSpoNH882b+ k2JSR7gPNCjIvBrPs01u9eBwVtMCjHzKp9YfNZECPvGuRx3VGXq83Wolj0gH/OZK wv7d7MJkM5PfNJUTosAmuSYvKkzUxQ4ClJnhYASWhqdiCe/NuLVqBOFdImo7ERvO eS+ySMNv7iD5RjOYaFxwnkHNUDa0vH4WYVMPfn/jznTj0cU+ei/2JFMbLUE2iPou DbmEUp8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org