$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa File: 424335D4B17C11EBAA206E6BC4F9AE02.roa (raw, json) Hash identifier: 6c1zY1lILp9OlTOxVYsnTt6rQ7dzI+YJmHJeUepzn4k= Subject key identifier: 5F:00:02:20:B6:C3:DD:88:C1:E2:BA:7E:59:0F:9E:18:65:24:91:0B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F04 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa Signing time: Wed 10 May 2023 16:36:45 +0000 ROA not before: Wed 10 May 2023 16:36:45 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141805 IP address blocks: 103.109.138.0/24 maxlen: 24 103.165.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28420 (0x6f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:36:45 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc81d-4d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:07:67:97:53:98:20:2e:2c:a3:32:b6:11:45: 57:f2:64:3f:72:c2:16:30:6d:a4:bb:35:01:30:b0: 09:e2:a0:1e:f3:3d:65:17:2c:39:9e:e4:07:0f:c7: 68:22:09:04:c9:c4:72:ff:6a:aa:1f:c3:2f:97:57: 40:a7:cc:ec:cb:f2:ac:da:da:9e:66:9d:60:27:0e: 0b:22:7a:03:1c:5c:a4:b8:67:c8:b0:7a:31:6b:91: e1:f7:23:a1:80:90:4c:4e:ab:f7:f0:41:c6:d5:ed: 09:e3:31:4d:63:37:58:9e:0c:bc:51:c2:9a:a2:02: 94:05:30:09:de:7a:14:71:ad:cb:1a:fd:99:b9:7e: 94:0c:06:4d:8b:14:cf:63:fb:58:25:c4:63:10:ed: 74:ff:d4:73:0d:4e:47:0c:77:3a:fa:f5:18:9a:27: ea:6b:b4:5f:29:27:0f:15:fa:22:58:f2:19:66:9e: 35:21:35:79:80:b5:8a:e0:d5:2d:eb:de:06:59:63: 82:04:0e:4a:7d:14:fd:ba:fe:d6:5d:49:da:50:f1: 85:da:06:e8:f6:18:bf:0a:e5:a0:2c:63:dc:c2:7a: 1a:cb:9d:fe:c0:b8:1e:37:8b:86:05:c0:be:b1:91: 10:8f:b7:3a:40:75:d7:ce:4a:2c:72:3b:d7:f7:69: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:00:02:20:B6:C3:DD:88:C1:E2:BA:7E:59:0F:9E:18:65:24:91:0B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.138.0/24 103.165.170.0/23 Signature Algorithm: sha256WithRSAEncryption 75:ec:c4:cd:2b:2c:e3:e2:f5:7d:7a:61:94:47:57:92:59:e3: fe:d5:ec:0a:34:9c:40:76:f8:bf:4e:37:53:e2:94:5f:e6:e4: fe:a6:67:a4:51:8d:7b:16:18:4e:bd:44:a6:b4:e9:67:c8:7e: 9d:dc:34:0d:af:b4:23:3d:c9:f2:83:8c:95:08:13:85:47:6d: 92:4e:2a:eb:3b:11:63:ee:cf:b8:7a:98:d5:b6:e9:c5:a8:91: f2:5a:b7:a1:d6:b4:7a:34:2d:5e:af:26:e1:f2:cc:dc:d1:64: f0:c2:a5:27:c4:4f:6f:a9:20:1c:38:e9:c7:a0:89:fb:c6:6e: c8:80:25:ba:cc:09:64:b3:69:d4:e1:78:e4:a7:78:4f:d8:d4: 01:82:42:75:62:62:b2:28:17:4b:e9:98:82:69:04:ee:4f:cb: d4:68:6c:2e:d9:bc:36:eb:ef:29:7a:9d:d2:83:bd:5d:f2:2f: e4:10:c1:88:63:e2:bb:18:8a:56:df:39:d4:bb:9c:e7:57:06: a2:f2:4f:f4:ac:14:73:5e:d8:7a:51:78:04:a9:a2:9d:b2:e7: 01:11:72:27:c4:2a:5f:28:6f:c2:00:6d:bc:7e:ec:ce:f4:0d: 17:3d:37:78:e6:b4:a5:67:d9:15:9e:4a:9a:77:db:d9:4e:ed: 86:42:4a:27 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzgxZC00ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gdnl1OYIC4sozK2EUVX8mQ/csIWMG2kuzUBMLAJ4qAe8z1lFyw5nuQHD8do IgkEycRy/2qqH8Mvl1dAp8zsy/Ks2tqeZp1gJw4LInoDHFykuGfIsHoxa5Hh9yOh gJBMTqv38EHG1e0J4zFNYzdYngy8UcKaogKUBTAJ3noUca3LGv2ZuX6UDAZNixTP Y/tYJcRjEO10/9RzDU5HDHc6+vUYmifqa7RfKScPFfoiWPIZZp41ITV5gLWK4NUt 694GWWOCBA5KfRT9uv7WXUnaUPGF2gbo9hi/CuWgLGPcwnoay53+wLgeN4uGBcC+ sZEQj7c6QHXXzkoscjvX92nCFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF8AAiC2 w92IweK6flkPnhhlJJELMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDI0MzM1RDRC MTdDMTFFQkFBMjA2RTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnbYoDBAFnpaowDQYJKoZIhvcNAQELBQADggEBAHXsxM0r LOPi9X16YZRHV5JZ4/7V7Ao0nEB2+L9ON1PilF/m5P6mZ6RRjXsWGE69RKa06WfI fp3cNA2vtCM9yfKDjJUIE4VHbZJOKus7EWPuz7h6mNW26cWokfJat6HWtHo0LV6v JuHyzNzRZPDCpSfET2+pIBw46cegifvGbsiAJbrMCWSzadTheOSneE/Y1AGCQnVi YrIoF0vpmIJpBO5Py9RobC7ZvDbr7yl6ndKDvV3yL+QQwYhj4rsYilbfOdS7nOdX BqLyT/SsFHNe2HpReASpop2y5wERcifEKl8ob8IAbbx+7M70DRc9N3jmtKVn2RWe Spp329lO7YZCSic= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org