$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4476DAA4252A11EDBD53BB3BC4F9AE02.roa File: 4476DAA4252A11EDBD53BB3BC4F9AE02.roa (raw, json) Hash identifier: JmCqNxVPAKjFAA3grTzHY78JO3HDwY2tiXgQL9GNusc= Subject key identifier: AA:2E:15:D1:5F:6F:B8:C0:E8:70:39:45:3A:86:35:EC:58:D9:DD:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C40 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4476DAA4252A11EDBD53BB3BC4F9AE02.roa Signing time: Wed 10 May 2023 16:23:38 +0000 ROA not before: Wed 10 May 2023 16:23:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136283 IP address blocks: 103.85.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27712 (0x6c40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc509-3986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:77:20:20:b8:7d:37:bc:50:f7:b8:69:8e: d3:78:d0:42:42:35:3b:be:25:4f:3a:82:5f:58:67: ca:c8:ee:96:19:78:2c:de:df:f9:74:f7:f7:d9:d5: e7:ad:57:1b:8f:5e:36:0b:6b:45:20:b5:de:0d:a9: 40:8f:0a:55:78:55:fd:25:7a:82:62:73:1e:b1:4b: 79:61:c5:14:a5:15:d4:57:08:75:f9:c3:47:45:ab: d1:54:63:38:23:ad:29:f2:a2:eb:cc:5c:2c:cd:32: d9:e5:02:46:6b:01:78:c1:20:bf:4e:75:a6:2b:10: e1:de:d1:fc:1b:95:25:8b:bf:52:d6:13:29:b0:f1: f5:4f:2e:90:0d:55:a4:ec:57:54:b8:e0:5d:0b:59: 42:ba:98:fc:f3:a8:71:8c:bd:b6:48:3c:73:d7:c0: d6:0b:36:7b:ea:6a:2c:41:cb:69:91:8b:a2:d8:5e: fc:33:a0:52:d6:bf:1a:6c:3b:e0:ad:40:4a:2b:4d: d8:c2:92:28:da:db:e0:fe:13:5b:d7:b8:e3:42:4f: d6:78:eb:99:fa:0c:8a:47:86:2b:e1:12:d3:fe:87: 6b:e7:a5:00:ac:1e:c5:81:d8:50:c6:9f:be:4f:8b: ba:2e:d1:4d:c1:41:4f:52:f3:4a:7b:91:d4:f6:2a: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:15:D1:5F:6F:B8:C0:E8:70:39:45:3A:86:35:EC:58:D9:DD:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4476DAA4252A11EDBD53BB3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.78.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:45:50:82:6c:05:b6:2e:f2:2b:4b:28:13:4d:fc:9c:b8:27: ac:4e:4e:1f:7e:b0:b5:93:0d:ce:18:c4:b7:7d:97:38:d9:0c: 13:e2:cd:e6:bf:fa:02:35:72:86:aa:77:22:6b:86:92:c3:4e: 1e:46:1e:c6:db:07:f2:26:a5:e4:c3:11:d5:6f:f0:7f:ff:b2: 28:7f:33:2d:32:54:1f:eb:de:d0:11:82:02:26:24:ab:79:7e: 82:67:6b:e4:05:a6:25:41:ea:26:b2:8b:f9:96:2f:6a:ff:65: 2d:9c:30:f8:d5:5c:32:ad:fd:e6:03:e8:e4:2c:19:4d:5e:b9: 0b:6a:84:c0:ab:c7:58:2c:30:b8:68:19:54:a1:08:77:c1:00: 2d:f5:09:02:44:68:6f:4d:10:c5:3b:f5:d7:c0:73:c9:51:18: 7b:df:54:c3:e3:af:67:64:af:a5:64:8a:05:b0:5c:fd:36:96: 92:1b:77:68:86:94:dd:83:51:ad:a6:1c:a2:1c:d3:29:43:1c: af:e0:5b:05:7e:dc:a5:c0:e9:42:f1:08:d7:50:1c:0d:ac:0c: 97:cc:e5:a2:2b:59:b0:91:5c:cc:85:60:db:81:b1:ca:99:c5: 93:2c:14:54:2a:cc:8c:22:60:26:22:ab:c8:cf:08:c1:73:52: 4f:a7:14:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzUwOS0zOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseZ3ICC4fTe8UPe4aY7TeNBCQjU7viVPOoJfWGfKyO6WGXgs3t/5dPf32dXn rVcbj142C2tFILXeDalAjwpVeFX9JXqCYnMesUt5YcUUpRXUVwh1+cNHRavRVGM4 I60p8qLrzFwszTLZ5QJGawF4wSC/TnWmKxDh3tH8G5Uli79S1hMpsPH1Ty6QDVWk 7FdUuOBdC1lCupj886hxjL22SDxz18DWCzZ76mosQctpkYui2F78M6BS1r8abDvg rUBKK03YwpIo2tvg/hNb17jjQk/WeOuZ+gyKR4Yr4RLT/odr56UArB7FgdhQxp++ T4u6LtFNwUFPUvNKe5HU9iqD+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKouFdFf b7jA6HA5RTqGNexY2d0TMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDQ3NkRBQTQy NTJBMTFFREJENTNCQjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnVU4wDQYJKoZIhvcNAQELBQADggEBAEtFUIJsBbYu8itL KBNN/Jy4J6xOTh9+sLWTDc4YxLd9lzjZDBPizea/+gI1coaqdyJrhpLDTh5GHsbb B/ImpeTDEdVv8H//sih/My0yVB/r3tARggImJKt5foJna+QFpiVB6iayi/mWL2r/ ZS2cMPjVXDKt/eYD6OQsGU1euQtqhMCrx1gsMLhoGVShCHfBAC31CQJEaG9NEMU7 9dfAc8lRGHvfVMPjr2dkr6VkigWwXP02lpIbd2iGlN2DUa2mHKIc0ylDHK/gWwV+ 3KXA6ULxCNdQHA2sDJfM5aIrWbCRXMyFYNuBscqZxZMsFFQqzIwiYCYiq8jPCMFz Uk+nFHk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org