$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa File: 483BA89A036911EE96C26D87C4F9AE02.roa (raw, json) Hash identifier: kUmRwpbVZnO8ahv526ZYmjrhqM6FkF5Y814yLCoKgns= Subject key identifier: B1:D3:D0:61:DB:F3:A8:9E:9E:1A:2A:F8:23:0D:A0:18:D5:26:4B:11 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7345 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa Signing time: Mon 05 Jun 2023 06:22:01 +0000 ROA not before: Mon 05 Jun 2023 06:22:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132952 IP address blocks: 103.238.220.0/22 maxlen: 24 103.255.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29509 (0x7345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 5 06:22:01 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647d7f09-28d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:85:d8:ca:9b:a3:01:a4:f5:84:73:9e:53: 6b:d8:29:6a:61:27:79:e6:55:cc:20:29:a5:9e:c5: 9d:60:8f:db:39:9d:65:8c:5a:60:31:d2:97:0e:70: 51:64:30:d9:c9:60:54:e0:9d:76:57:03:4c:37:1e: 6f:42:db:b1:34:3f:b2:77:d9:fc:6b:54:ab:19:cc: df:0c:3a:ae:42:dd:27:50:5e:3f:60:a0:be:d1:90: 2b:37:21:01:57:27:03:c3:8a:03:36:2b:2d:88:72: 65:e0:24:3c:e2:2c:6b:6a:ee:e2:ce:80:15:8a:c8: a3:61:b0:46:b8:a0:0b:78:87:e2:94:9a:06:a7:09: 8f:5d:f7:8a:5f:70:9b:47:d9:21:a8:f8:aa:4c:05: 47:43:2b:ee:68:87:5e:12:76:ac:d8:7e:f4:b2:21: 33:2a:fd:7d:e6:78:30:fc:72:0e:2e:9b:cf:b8:2a: ce:ff:26:aa:64:34:21:91:3b:12:b3:8e:c0:8e:c4: 3b:97:8c:1c:0e:7b:ea:7e:1d:ab:ec:7a:16:41:c0: a2:ab:46:38:5c:50:2b:c0:2d:50:53:f3:b5:a2:50: 9b:28:e4:b1:d2:7c:82:24:34:c6:3d:3a:c2:1e:21: af:b1:2d:d6:55:f7:90:72:2e:f9:a7:ee:a7:db:73: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D3:D0:61:DB:F3:A8:9E:9E:1A:2A:F8:23:0D:A0:18:D5:26:4B:11 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/483BA89A036911EE96C26D87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.220.0/22 103.255.100.0/22 Signature Algorithm: sha256WithRSAEncryption 21:2b:f3:9d:1a:68:b3:76:ae:e8:b7:4f:cd:a8:5b:5c:ad:25: 29:b1:cf:fe:b0:73:d0:30:31:ce:f3:b9:b6:06:1c:b7:51:88: 1d:fa:36:b6:ab:9d:30:e9:8b:d6:6e:5b:02:f1:a6:06:89:36: b4:f6:4c:74:b4:e8:44:92:c8:08:7a:3a:8b:e4:85:98:c5:1d: 9c:51:f4:aa:26:5b:04:d6:ec:58:9c:58:f2:0c:bf:86:18:38: 48:2c:a1:35:93:55:90:05:21:5f:cf:d1:9c:d0:9c:4a:cf:cf: 88:d5:e7:96:6e:1a:cc:07:b6:9c:50:d1:0c:b7:d0:08:53:5c: 96:ae:0a:74:9c:1e:24:b0:e6:af:8d:4a:f3:b3:cd:bd:6b:97: 94:47:16:45:45:36:d9:01:0d:a8:95:c6:69:22:4b:64:21:6f: 77:b4:fb:2c:98:1e:a1:20:fe:1b:41:7f:f2:a4:61:af:dd:88: d7:3d:77:79:86:86:73:57:89:d9:bf:8a:a6:e2:cd:ab:dc:e0: 4e:94:57:14:9d:8e:9c:a7:20:0b:8f:20:18:2f:ac:96:bf:9d: 48:e3:f1:46:a5:b4:ab:41:f2:13:06:c5:f6:f8:12:55:15:3a: 2d:7d:45:6b:97:bd:80:b7:f0:44:37:15:b4:5f:0a:3b:08:67: 61:f3:64:e8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICc0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjA1MDYyMjAxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdkN2YwOS0yOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EeF2MqbowGk9YRznlNr2ClqYSd55lXMICmlnsWdYI/bOZ1ljFpgMdKXDnBR ZDDZyWBU4J12VwNMNx5vQtuxND+yd9n8a1SrGczfDDquQt0nUF4/YKC+0ZArNyEB VycDw4oDNistiHJl4CQ84ixrau7izoAVisijYbBGuKALeIfilJoGpwmPXfeKX3Cb R9khqPiqTAVHQyvuaIdeEnas2H70siEzKv195ngw/HIOLpvPuCrO/yaqZDQhkTsS s47AjsQ7l4wcDnvqfh2r7HoWQcCiq0Y4XFArwC1QU/O1olCbKOSx0nyCJDTGPTrC HiGvsS3WVfeQci75p+6n23Ml7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLHT0GHb 86ienhoq+CMNoBjVJksRMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDgzQkE4OUEw MzY5MTFFRTk2QzI2RDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn7twDBAJn/2QwDQYJKoZIhvcNAQELBQADggEBACEr850a aLN2rui3T82oW1ytJSmxz/6wc9AwMc7zubYGHLdRiB36NrarnTDpi9ZuWwLxpgaJ NrT2THS06ESSyAh6OovkhZjFHZxR9KomWwTW7FicWPIMv4YYOEgsoTWTVZAFIV/P 0ZzQnErPz4jV55ZuGswHtpxQ0Qy30AhTXJauCnScHiSw5q+NSvOzzb1rl5RHFkVF NtkBDaiVxmkiS2Qhb3e0+yyYHqEg/htBf/KkYa/diNc9d3mGhnNXidm/iqbizavc 4E6UVxSdjpynIAuPIBgvrJa/nUjj8UaltKtB8hMGxfb4ElUVOi19RWuXvYC38EQ3 FbRfCjsIZ2HzZOg= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:19 2024 by rpki-client on console-fra.rpki-client.org