$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa File: 4A0655A2939F11EC92F0252EC4F9AE02.roa (raw, json) Hash identifier: hXf8JfYzGk5IsXGkeYvCzzi/P7AxJXrihKQmCBcbvCc= Subject key identifier: DE:D6:CE:85:54:B9:9F:C0:9B:E3:81:3C:A6:09:D1:58:23:0D:10:24 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7032 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa Signing time: Wed 10 May 2023 16:42:26 +0000 ROA not before: Wed 10 May 2023 16:42:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149217 IP address blocks: 103.179.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28722 (0x7032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc972-9a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:52:83:28:14:b4:a6:88:ac:a7:9b:18:59: 10:fc:2d:d9:43:7c:52:36:35:19:5f:c1:bc:b9:26: 51:bd:b7:11:0c:00:5b:60:f0:8f:36:e8:78:6d:d3: 9b:ac:9e:17:e3:7e:b5:8e:b1:8e:a6:b9:5c:13:39: 7d:68:0a:9a:a8:51:e4:5f:71:d6:92:8f:88:57:5b: 2c:76:a3:b5:5e:6d:1b:2d:4d:ef:ef:ea:f0:bd:18: 03:f8:16:b3:82:c2:86:25:b1:78:ee:88:9b:ff:e3: 70:1e:74:3e:be:70:38:f2:b4:a8:95:f6:e8:3a:6c: 17:b9:5e:bc:bf:e9:42:32:d9:33:b2:f5:7a:6b:2f: 75:e7:34:c1:19:1a:fd:23:33:a1:b8:a7:7c:65:da: 29:a1:fb:0a:2d:fc:e5:90:ab:dc:1b:5e:66:23:55: 14:dd:b2:d9:72:b1:db:b9:b5:7d:2e:78:e7:02:bf: bc:ad:e7:f9:8a:e0:42:af:80:1e:25:2f:6e:16:b3: e3:e5:55:a0:67:64:c8:28:c5:68:b8:c4:a5:5c:19: b8:de:80:e0:7d:18:b4:fd:66:56:16:92:88:cb:2b: 15:8c:1b:cf:95:7a:ec:29:f6:66:87:ef:1c:67:ef: 94:76:5a:de:1b:fa:19:c1:1e:4a:44:53:af:63:4f: d2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D6:CE:85:54:B9:9F:C0:9B:E3:81:3C:A6:09:D1:58:23:0D:10:24 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.52.0/23 Signature Algorithm: sha256WithRSAEncryption 14:35:ff:87:20:c5:24:b9:66:50:ca:3e:66:52:92:f1:be:9c: 0b:66:21:f5:d6:48:c1:e1:4c:26:ca:c5:b9:84:0f:54:27:41: db:37:0b:7f:8b:3d:20:4d:56:ab:fc:24:ab:9c:1e:6d:f5:3a: 05:6f:1f:58:ea:2f:bd:be:fd:14:df:94:10:26:2c:83:30:f2: 5e:53:28:58:f2:81:cb:5f:67:fd:72:2a:f1:65:b1:92:80:e9: 2c:4f:13:f6:38:2e:02:5e:ae:09:23:4e:73:61:b5:03:dc:08: 22:79:af:69:c1:d2:14:3c:23:5a:06:aa:96:5a:89:62:16:ce: 13:93:39:fd:ac:31:33:e0:89:5f:19:04:7b:db:04:53:fe:26: a7:9d:19:79:90:8c:07:6f:b1:65:91:02:e6:86:bf:21:d9:45: f2:79:c3:f4:9f:01:33:0f:7e:fc:db:80:9b:9e:c7:6e:86:16: 38:b9:54:8b:01:6d:44:63:cb:6d:6f:c1:ad:d2:e6:9d:f6:b8: b8:13:d0:ea:a9:f5:eb:1f:be:8b:24:34:dd:8b:ab:e0:1a:e6: 6a:62:68:b0:93:76:8d:fe:a8:2d:64:f8:50:4d:1a:bd:f6:db: 70:6b:5c:69:05:03:be:75:cb:6b:58:18:49:d3:a1:6c:03:63: 7e:d6:3f:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk3Mi05YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQdSgygUtKaIrKebGFkQ/C3ZQ3xSNjUZX8G8uSZRvbcRDABbYPCPNuh4bdOb rJ4X4361jrGOprlcEzl9aAqaqFHkX3HWko+IV1ssdqO1Xm0bLU3v7+rwvRgD+Baz gsKGJbF47oib/+NwHnQ+vnA48rSolfboOmwXuV68v+lCMtkzsvV6ay915zTBGRr9 IzOhuKd8ZdopofsKLfzlkKvcG15mI1UU3bLZcrHbubV9LnjnAr+8ref5iuBCr4Ae JS9uFrPj5VWgZ2TIKMVouMSlXBm43oDgfRi0/WZWFpKIyysVjBvPlXrsKfZmh+8c Z++UdlreG/oZwR5KRFOvY0/SrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN7WzoVU uZ/Am+OBPKYJ0VgjDRAkMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEEwNjU1QTI5 MzlGMTFFQzkyRjAyNTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnszQwDQYJKoZIhvcNAQELBQADggEBABQ1/4cgxSS5ZlDK PmZSkvG+nAtmIfXWSMHhTCbKxbmED1QnQds3C3+LPSBNVqv8JKucHm31OgVvH1jq L72+/RTflBAmLIMw8l5TKFjygctfZ/1yKvFlsZKA6SxPE/Y4LgJergkjTnNhtQPc CCJ5r2nB0hQ8I1oGqpZaiWIWzhOTOf2sMTPgiV8ZBHvbBFP+JqedGXmQjAdvsWWR AuaGvyHZRfJ5w/SfATMPfvzbgJuex26GFji5VIsBbURjy21vwa3S5p32uLgT0Oqp 9esfvoskNN2Lq+Aa5mpiaLCTdo3+qC1k+FBNGr3223BrXGkFA751y2tYGEnToWwD Y37WP3Q= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:17 2024 by rpki-client on console-ams.rpki-client.org