$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa File: 474A2C986D0411EB89A3805EC4F9AE02.roa (raw, json) Hash identifier: I+rtyv9Ns7SZZ7H6QRz4E+ZgoOPthGj/0wGyLyweIGE= Subject key identifier: 0A:2F:30:3A:7C:59:93:EB:AA:1C:F8:0E:06:17:69:B8:EC:10:EA:92 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EC5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa Signing time: Wed 10 May 2023 16:35:37 +0000 ROA not before: Wed 10 May 2023 16:35:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141519 IP address blocks: 103.162.164.0/24 maxlen: 24 103.162.165.0/24 maxlen: 24 2407:19c0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28357 (0x6ec5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7d8-b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:12:71:41:05:94:68:62:af:f7:f0:dd:b9: 99:b5:2f:da:cd:30:28:fd:35:13:f8:d5:a7:c0:e8: a4:72:49:57:f8:a1:32:c0:8f:6b:20:97:e6:b8:9d: fc:3e:14:20:51:cf:bc:17:76:13:26:af:67:1b:01: d9:6f:72:ff:15:ca:bb:47:d6:09:8f:78:6b:d1:1d: 2c:31:05:65:f0:18:48:7d:bc:4c:a1:e0:57:e3:1d: 59:22:3b:48:b6:e6:6b:85:2c:82:3f:3e:55:00:84: 9e:15:19:fb:27:2d:60:f2:e7:e7:a0:9e:04:8a:fe: 7a:dc:02:2d:63:df:f8:f2:c6:ce:f2:c8:1a:86:59: 99:2e:c8:63:c6:1e:78:c7:68:c0:40:d9:0d:eb:af: e9:76:4c:d6:ef:a3:7c:8f:0c:8e:39:68:79:4d:e3: 7f:68:77:5f:de:aa:8e:9a:d0:bc:7c:b1:7f:1e:a5: 8f:db:ef:82:8c:bc:45:7e:45:8b:8c:12:ae:e1:60: 99:99:59:6c:a4:84:d1:92:be:58:9f:8e:6f:72:92: 86:08:da:bd:a4:19:d9:e9:0f:cc:a7:ea:54:65:d6: 12:61:83:ff:86:26:bc:59:d4:51:3d:63:06:0e:28: 71:1c:10:b0:60:9b:57:fb:67:6c:bd:bb:9c:fb:1e: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:30:3A:7C:59:93:EB:AA:1C:F8:0E:06:17:69:B8:EC:10:EA:92 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.164.0/23 IPv6: 2407:19c0::/36 Signature Algorithm: sha256WithRSAEncryption 85:96:0f:4b:e6:32:bc:2b:37:5f:ef:1d:8e:85:1d:4f:3f:a1: ad:a8:25:c2:a4:0d:18:54:37:b3:f1:2d:8b:0f:14:f3:22:14: 4d:af:72:85:25:37:98:06:37:75:f6:ce:61:80:2e:f5:15:66: 41:74:1c:ca:b1:85:c0:0a:46:36:65:fe:fd:ce:d0:9c:f9:aa: 68:2f:fe:7c:62:df:a5:2f:af:f8:ae:c4:c3:a0:48:f6:d7:58: 80:50:4e:55:41:9e:7e:ff:7e:58:19:14:e5:ff:8a:17:0a:1c: 25:57:f1:06:16:79:50:61:a4:e9:cb:67:93:60:72:86:28:60: f2:db:29:c5:8e:ea:c3:9d:7c:09:9c:87:39:8b:9e:75:12:d6: e5:e1:7d:9a:f6:d4:8d:d6:5c:4b:1b:68:49:5d:e1:15:e6:69: 92:28:02:ea:58:2d:ab:e8:ba:45:b4:29:aa:52:03:10:19:a8: 45:1e:d2:9c:81:8a:22:43:75:dd:70:2d:a1:57:76:37:45:f8: 69:d0:99:4d:12:04:8c:d1:c6:47:0f:ca:49:7c:66:47:cc:c0: 84:92:d0:58:27:d9:48:ba:45:4b:5c:22:0d:fb:c8:e6:3e:c5: 7c:0f:d5:22:86:92:5b:70:d8:b0:a7:42:29:52:8d:d0:32:a6: 2b:6e:4b:b6 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICbsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdkOC1iNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR8ScUEFlGhir/fw3bmZtS/azTAo/TUT+NWnwOikcklX+KEywI9rIJfmuJ38 PhQgUc+8F3YTJq9nGwHZb3L/Fcq7R9YJj3hr0R0sMQVl8BhIfbxMoeBX4x1ZIjtI tuZrhSyCPz5VAISeFRn7Jy1g8ufnoJ4Eiv563AItY9/48sbO8sgahlmZLshjxh54 x2jAQNkN66/pdkzW76N8jwyOOWh5TeN/aHdf3qqOmtC8fLF/HqWP2++CjLxFfkWL jBKu4WCZmVlspITRkr5Yn45vcpKGCNq9pBnZ6Q/Mp+pUZdYSYYP/hia8WdRRPWMG DihxHBCwYJtX+2dsvbuc+x6Q6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAovMDp8 WZPrqhz4DgYXabjsEOqSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDc0QTJDOTg2 RDA0MTFFQjg5QTM4MDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnoqQwDgQCAAIwCAMGBCQHGcAAMA0GCSqGSIb3DQEBCwUA A4IBAQCFlg9L5jK8Kzdf7x2OhR1PP6GtqCXCpA0YVDez8S2LDxTzIhRNr3KFJTeY Bjd19s5hgC71FWZBdBzKsYXACkY2Zf79ztCc+apoL/58Yt+lL6/4rsTDoEj211iA UE5VQZ5+/35YGRTl/4oXChwlV/EGFnlQYaTpy2eTYHKGKGDy2ynFjurDnXwJnIc5 i551Etbl4X2a9tSN1lxLG2hJXeEV5mmSKALqWC2r6LpFtCmqUgMQGahFHtKcgYoi Q3XdcC2hV3Y3Rfhp0JlNEgSM0cZHD8pJfGZHzMCEktBYJ9lIukVLXCIN+8jmPsV8 D9UihpJbcNiwp0IpUo3QMqYrbku2 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org