$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/460DB2809E0511EDA703786BC4F9AE02.roa File: 460DB2809E0511EDA703786BC4F9AE02.roa (raw, json) Hash identifier: kbeu0feC6ab9Y9lEpV+OD+nlDCPkJflDZMYBJicOQdU= Subject key identifier: 6A:B1:A0:29:56:72:24:9D:72:3E:C2:2B:1F:5A:C8:7D:C3:5D:3D:3E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71DD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/460DB2809E0511EDA703786BC4F9AE02.roa Signing time: Wed 10 May 2023 16:50:19 +0000 ROA not before: Wed 10 May 2023 16:50:19 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 7018 IP address blocks: 103.253.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29149 (0x71dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:19 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb4a-001b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:3d:4a:f6:54:01:a0:55:b6:50:b6:e0:c6: ba:ee:53:9e:76:af:db:42:56:ef:3a:d3:57:3b:84: 9c:a7:ad:3d:6a:9d:fa:f9:18:c7:df:38:02:72:37: 6e:6e:dd:e1:29:c9:5f:e6:2a:f7:bc:c5:18:e9:cd: fa:03:0b:d6:34:d4:66:7f:17:42:3e:96:e1:70:fb: ee:0b:2a:80:14:90:48:6b:65:2f:0a:fe:c2:0e:dc: 00:3d:31:16:89:25:0a:3b:92:b2:43:d1:0f:62:2b: a4:77:2b:4b:f9:c5:5d:b2:0d:37:37:93:13:1c:d4: a1:9d:41:8c:22:ea:96:61:db:52:fa:f9:fe:3c:f1: 32:ee:e0:c4:41:21:7a:8e:bd:b1:3e:53:3b:9b:aa: c5:fa:26:5e:45:26:7e:5a:99:16:6d:0e:1f:86:ff: c9:47:c9:3c:b8:19:65:32:cc:ec:75:63:19:b2:eb: c1:e3:45:9b:fc:fe:b7:9f:c6:3a:8e:97:6b:2d:2f: ca:d0:b1:87:d0:59:e3:c6:08:d5:06:08:64:c6:d4: a2:30:80:fc:8a:e2:52:f5:26:ee:24:33:58:0d:ea: 7d:f0:0d:7a:b9:75:da:18:d6:28:f8:6a:8e:39:81: 00:58:73:e1:c1:13:de:65:61:3f:77:d0:d2:f7:d3: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:A0:29:56:72:24:9D:72:3E:C2:2B:1F:5A:C8:7D:C3:5D:3D:3E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/460DB2809E0511EDA703786BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.32.0/22 Signature Algorithm: sha256WithRSAEncryption 69:74:de:67:d5:7c:09:61:12:52:1b:ba:c0:06:fd:da:13:0f: b0:ba:4a:b8:71:46:0f:0c:4e:ae:12:ea:de:ac:9a:4a:99:cf: d7:28:00:45:f0:c3:c1:98:df:d3:9b:50:cd:59:a3:a1:8a:ac: 27:58:d3:6e:09:80:91:4d:0f:3c:21:70:9b:4c:b1:c9:6d:ed: f2:ac:af:4f:63:45:de:75:23:ba:f6:1e:2a:28:5b:23:56:39: 14:2e:28:03:d7:fc:5d:fc:af:51:a4:ab:ef:28:be:47:3d:9a: 94:9b:cf:02:65:37:96:f2:98:7a:62:cf:94:15:d7:19:bc:05: 13:19:ca:a9:8a:a2:a1:ed:5f:94:f3:46:c0:29:e8:50:2e:25: a3:c8:3e:74:df:9d:16:c7:6f:d1:d1:6c:95:03:e7:ae:5a:1d: ed:5a:7a:85:5a:cf:a8:1e:87:d2:48:28:9e:65:c2:cc:2d:d1: 2b:6a:dc:0f:db:82:04:08:97:23:69:f9:27:8b:8f:0e:4d:8c: 1b:50:85:86:41:28:e1:29:07:1e:e4:a2:61:68:9c:35:98:27: 26:17:11:5c:00:58:b7:db:84:af:ab:ad:7c:35:be:77:26:6d: 36:4b:a9:aa:09:7d:5e:e6:62:7c:52:87:a0:60:de:a8:75:b9: 61:83:f1:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDE5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2I0YS0wMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Hw9SvZUAaBVtlC24Ma67lOedq/bQlbvOtNXO4Scp609ap36+RjH3zgCcjdu bt3hKclf5ir3vMUY6c36AwvWNNRmfxdCPpbhcPvuCyqAFJBIa2UvCv7CDtwAPTEW iSUKO5KyQ9EPYiukdytL+cVdsg03N5MTHNShnUGMIuqWYdtS+vn+PPEy7uDEQSF6 jr2xPlM7m6rF+iZeRSZ+WpkWbQ4fhv/JR8k8uBllMszsdWMZsuvB40Wb/P63n8Y6 jpdrLS/K0LGH0FnjxgjVBghkxtSiMID8iuJS9SbuJDNYDep98A16uXXaGNYo+GqO OYEAWHPhwRPeZWE/d9DS99OJRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGqxoClW ciSdcj7CKx9ayH3DXT0+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDYwREIyODA5 RTA1MTFFREE3MDM3ODZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn/SAwDQYJKoZIhvcNAQELBQADggEBAGl03mfVfAlhElIb usAG/doTD7C6SrhxRg8MTq4S6t6smkqZz9coAEXww8GY39ObUM1Zo6GKrCdY024J gJFNDzwhcJtMsclt7fKsr09jRd51I7r2HiooWyNWORQuKAPX/F38r1Gkq+8ovkc9 mpSbzwJlN5bymHpiz5QV1xm8BRMZyqmKoqHtX5TzRsAp6FAuJaPIPnTfnRbHb9HR bJUD565aHe1aeoVaz6geh9JIKJ5lwswt0Stq3A/bggQIlyNp+SeLjw5NjBtQhYZB KOEpBx7komFonDWYJyYXEVwAWLfbhK+rrXw1vncmbTZLqaoJfV7mYnxSh6Bg3qh1 uWGD8bU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org