$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa File: 428E04EE066A11EDB31C2239C4F9AE02.roa (raw, json) Hash identifier: iTDTrMVLdPlEmNs10wIitTpHLd9DwzHXC/4w4hSoJfk= Subject key identifier: 98:12:81:BB:90:D7:E5:C4:1E:D0:B8:F3:D2:0C:F2:B1:A3:26:DC:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70C7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa Signing time: Wed 10 May 2023 16:45:10 +0000 ROA not before: Wed 10 May 2023 16:45:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150047 IP address blocks: 103.191.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28871 (0x70c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:45:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca15-c6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:d9:49:11:2f:05:2f:96:0d:9d:cd:4c:6b: d1:c3:69:b8:21:27:34:11:2a:de:5f:9f:96:da:ed: f7:6a:a9:ed:b7:fb:e1:eb:94:3d:a6:a0:d8:55:de: 1c:72:d8:dd:73:ef:dd:0e:1d:49:cc:e7:ed:3b:c0: d4:a7:b5:1a:fa:a8:9f:a0:eb:bd:c3:d4:e6:17:d0: 04:35:8a:dc:8b:a7:07:a0:cb:e3:9e:e1:9d:3e:1b: 8e:a2:77:bd:51:4c:1d:38:a9:ec:c5:8c:10:0a:39: 7b:5a:e0:64:99:45:87:56:85:90:f2:82:c1:06:fb: 70:68:8b:25:90:32:35:ed:44:e3:f9:14:c8:58:93: 78:7d:f7:3e:e0:59:d1:d7:08:48:80:20:37:12:c2: 19:1d:a9:4c:57:dc:59:32:62:a3:ba:8b:c6:f4:46: 21:c9:bc:4e:ab:ce:21:0d:ef:4c:1d:7c:1b:4a:40: a3:5d:46:a2:00:4e:27:e5:e5:cb:53:99:b6:99:cc: 7a:a0:53:4f:15:95:86:de:87:48:83:55:ab:0a:cb: bc:89:ac:6c:f2:f6:04:c5:39:33:7c:00:53:e4:71: 31:f2:a4:5b:47:9a:b2:ed:97:58:0b:81:ba:1e:a5: 04:cf:96:fe:3c:1f:52:2b:2e:74:a6:b5:3c:29:af: 43:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:12:81:BB:90:D7:E5:C4:1E:D0:B8:F3:D2:0C:F2:B1:A3:26:DC:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.64.0/23 Signature Algorithm: sha256WithRSAEncryption 65:d5:1d:3f:43:32:c2:7d:c3:2c:4b:67:3f:2d:59:0f:70:8d: e9:e4:38:3a:0f:7a:dc:51:4a:17:01:30:c1:46:74:2f:87:c3: c9:a3:0f:66:14:97:dc:8e:14:c3:6a:5f:73:97:71:cc:43:a9: ba:bc:2a:89:51:30:db:dd:8c:f4:0f:ec:81:d0:4f:43:64:9d: dc:ea:62:25:8d:c6:05:c6:25:75:88:8c:ae:d2:3a:47:3d:9c: 6d:6e:55:c6:94:04:14:16:51:78:d7:e2:74:6b:19:4e:3e:48: 34:26:9f:3f:73:01:71:1a:02:1c:6d:db:70:0c:13:03:ad:8d: 06:26:39:6e:a0:44:2c:fd:ed:40:a9:19:0b:78:39:87:0d:0c: c2:67:ad:c9:87:e6:30:ca:4b:0c:47:da:5f:39:e3:12:ed:96: 10:4e:d1:ec:3e:07:8d:55:73:00:93:04:31:82:dc:e8:93:f4: 10:0c:83:37:9f:6b:2b:9e:64:e3:21:19:65:da:22:7e:24:b3: 8b:26:f2:e7:f3:a9:2c:be:b3:b2:af:99:d0:01:eb:b7:91:3a: 40:38:d2:00:b7:fb:e4:80:5d:55:7e:b3:68:15:bf:96:45:ff: e5:5b:3b:67:df:cb:95:09:47:38:02:55:11:88:80:3d:25:76: f8:45:3a:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2ExNS1jNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqorZSREvBS+WDZ3NTGvRw2m4ISc0ESreX5+W2u33aqntt/vh65Q9pqDYVd4c ctjdc+/dDh1JzOftO8DUp7Ua+qifoOu9w9TmF9AENYrci6cHoMvjnuGdPhuOone9 UUwdOKnsxYwQCjl7WuBkmUWHVoWQ8oLBBvtwaIslkDI17UTj+RTIWJN4ffc+4FnR 1whIgCA3EsIZHalMV9xZMmKjuovG9EYhybxOq84hDe9MHXwbSkCjXUaiAE4n5eXL U5m2mcx6oFNPFZWG3odIg1WrCsu8iaxs8vYExTkzfABT5HEx8qRbR5qy7ZdYC4G6 HqUEz5b+PB9SKy50prU8Ka9DiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJgSgbuQ 1+XEHtC489IM8rGjJtyHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDI4RTA0RUUw NjZBMTFFREIzMUMyMjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnv0AwDQYJKoZIhvcNAQELBQADggEBAGXVHT9DMsJ9wyxL Zz8tWQ9wjenkODoPetxRShcBMMFGdC+Hw8mjD2YUl9yOFMNqX3OXccxDqbq8KolR MNvdjPQP7IHQT0NkndzqYiWNxgXGJXWIjK7SOkc9nG1uVcaUBBQWUXjX4nRrGU4+ SDQmnz9zAXEaAhxt23AMEwOtjQYmOW6gRCz97UCpGQt4OYcNDMJnrcmH5jDKSwxH 2l854xLtlhBO0ew+B41VcwCTBDGC3OiT9BAMgzefayueZOMhGWXaIn4ks4sm8ufz qSy+s7KvmdAB67eROkA40gC3++SAXVV+s2gVv5ZF/+VbO2ffy5UJRzgCVRGIgD0l dvhFOh4= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:17 2024 by rpki-client on console-ams.rpki-client.org