$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D7DC8C1F3311EBA3ECE97EC4F9AE02.roa File: 43D7DC8C1F3311EBA3ECE97EC4F9AE02.roa (raw, json) Hash identifier: lsnNpE9zfjcjIIt3SkvJ4RMwTll0O/a5gWFV6P7FcHQ= Subject key identifier: 36:BB:40:37:4C:21:FC:7A:58:CE:66:46:8F:2F:98:11:B9:9C:FE:47 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 742A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D7DC8C1F3311EBA3ECE97EC4F9AE02.roa Signing time: Mon 19 Jun 2023 07:42:02 +0000 ROA not before: Mon 19 Jun 2023 07:42:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141319 IP address blocks: 103.158.40.0/24 maxlen: 24 103.209.172.0/24 maxlen: 24 2001:df1:d5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29738 (0x742a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 19 07:42:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=649006c9-5a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:e2:90:cb:43:22:56:c3:d7:9b:cd:78:69: c3:46:95:7d:46:d2:2f:b1:29:42:4f:83:d9:9d:25: f7:3d:bc:e5:0f:2c:f8:f4:36:4a:29:f7:7b:54:94: 5f:7e:fd:07:88:f1:70:62:ca:dc:77:0e:6e:e2:20: b4:88:23:f8:52:e3:d8:3a:b8:ad:4f:9b:16:bb:b0: 9b:d9:9e:e2:9c:cd:3b:28:a9:7e:8c:65:f9:e4:e2: dc:bd:62:bb:c2:c6:07:63:58:1a:0b:19:cd:65:5c: a9:c9:6a:e4:6f:e8:ed:37:63:10:54:a1:97:99:fb: f5:65:c4:98:b2:0d:0a:1e:1c:02:69:af:6b:0c:34: c0:fb:66:96:98:24:ea:ff:da:3a:fd:a3:24:24:15: c4:29:bd:4d:34:e1:d6:0f:4a:a4:d4:c0:40:26:1e: 9d:89:8b:0b:e6:1c:a3:8d:4f:5e:d9:cc:08:a8:13: 16:0a:df:8b:9a:02:1a:3f:19:0f:08:78:61:98:db: 22:3a:92:b6:47:c8:c5:4d:0a:12:9e:d3:b4:b5:33: 5a:0f:5b:56:ad:6a:4f:0c:df:1c:15:71:a5:ce:c2: 6c:e0:4f:32:b9:24:00:26:8f:fe:a2:dd:3b:04:bd: 6b:a4:ab:97:bb:e3:37:28:2b:82:17:c3:e2:87:70: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:40:37:4C:21:FC:7A:58:CE:66:46:8F:2F:98:11:B9:9C:FE:47 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43D7DC8C1F3311EBA3ECE97EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.40.0/24 103.209.172.0/24 IPv6: 2001:df1:d5c0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:95:98:0b:39:2b:17:c7:a6:9e:2b:80:a3:19:24:48:d2:81: d2:02:80:0d:85:5a:8f:79:2a:b2:37:c2:da:8f:00:37:13:b1: bc:ee:50:db:af:5a:37:97:41:71:04:19:a0:68:9f:d0:73:06: bc:ed:33:b6:9f:9a:3d:ef:b3:5d:95:fc:fc:76:c0:8b:16:6e: 0a:03:7d:f6:77:2f:8b:b2:df:ec:5a:98:64:d5:31:ed:10:3d: 3a:29:d5:2a:a6:7d:55:50:33:ad:9e:57:0d:7d:e6:d8:6b:34: e5:e5:fd:fd:19:3e:ff:5f:1e:9e:03:e0:35:0b:72:e1:9a:e6: 7f:f8:03:1d:14:17:c5:c0:b5:47:fb:af:63:b6:59:16:13:95: 71:01:69:a8:a6:c4:ac:43:4e:23:70:66:75:39:fb:b8:99:79: 6b:f7:f6:cb:97:39:4c:eb:26:c2:c5:80:ff:44:0f:84:70:8e: 1d:45:28:1a:14:8b:32:7a:46:a8:a4:64:5f:a0:a9:9a:db:59: 8f:93:d5:2b:f0:8c:33:1e:44:a4:64:b0:4a:e7:6c:a4:61:33: 39:52:a1:d2:49:39:3c:57:e4:95:70:47:dd:59:f6:ad:c7:a9: b9:f9:18:f9:6c:b5:cb:c6:9b:2c:72:55:fc:f9:e0:57:a2:e8: c2:fd:43:5c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICdCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE5MDc0MjAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkwMDZjOS01YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62fikMtDIlbD15vNeGnDRpV9RtIvsSlCT4PZnSX3PbzlDyz49DZKKfd7VJRf fv0HiPFwYsrcdw5u4iC0iCP4UuPYOritT5sWu7Cb2Z7inM07KKl+jGX55OLcvWK7 wsYHY1gaCxnNZVypyWrkb+jtN2MQVKGXmfv1ZcSYsg0KHhwCaa9rDDTA+2aWmCTq /9o6/aMkJBXEKb1NNOHWD0qk1MBAJh6diYsL5hyjjU9e2cwIqBMWCt+LmgIaPxkP CHhhmNsiOpK2R8jFTQoSntO0tTNaD1tWrWpPDN8cFXGlzsJs4E8yuSQAJo/+ot07 BL1rpKuXu+M3KCuCF8Pih3CkOwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDa7QDdM Ifx6WM5mRo8vmBG5nP5HMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDNEN0RDOEMx RjMzMTFFQkEzRUNFOTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnnigDBABn0awwDwQCAAIwCQMHACABDfHVwDANBgkqhkiG 9w0BAQsFAAOCAQEAbpWYCzkrF8emniuAoxkkSNKB0gKADYVaj3kqsjfC2o8ANxOx vO5Q269aN5dBcQQZoGif0HMGvO0ztp+aPe+zXZX8/HbAixZuCgN99ncvi7Lf7FqY ZNUx7RA9OinVKqZ9VVAzrZ5XDX3m2Gs05eX9/Rk+/18engPgNQty4Zrmf/gDHRQX xcC1R/uvY7ZZFhOVcQFpqKbErENOI3BmdTn7uJl5a/f2y5c5TOsmwsWA/0QPhHCO HUUoGhSLMnpGqKRkX6CpmttZj5PVK/CMMx5EpGSwSudspGEzOVKh0kk5PFfklXBH 3Vn2rcepufkY+Wy1y8abLHJV/PngV6Lowv1DXA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org