$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa File: 4A68B7127FEE11EB8EB4695FC4F9AE02.roa (raw, json) Hash identifier: 7mDBf5bfdYGjERwAGmQCoEVv3S+9WDZKUm1PwbsPt8o= Subject key identifier: E6:CD:91:83:B5:0B:84:76:57:30:86:19:90:BC:A1:07:37:57:A9:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa Signing time: Wed 10 May 2023 16:17:50 +0000 ROA not before: Wed 10 May 2023 16:17:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134276 IP address blocks: 103.163.192.0/23 maxlen: 24 2001:df1:b240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27408 (0x6b10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:17:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3ae-bdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:7b:db:2a:a5:8d:46:e5:62:fe:25:ee:63: 7b:d5:a1:db:c4:cd:67:e8:1a:2e:fd:c2:52:f8:be: e4:12:40:d2:8f:f0:e9:c8:0e:20:f5:97:3a:e4:62: dc:aa:56:8a:23:f9:ac:88:3c:d3:4e:be:04:4a:dc: 0b:fa:12:43:a3:5a:ae:b6:6a:30:71:a9:27:6c:5a: c1:6e:52:69:ef:ce:c3:3a:ec:3b:5c:38:1c:8b:5a: fd:d2:b2:5b:35:b3:50:8d:e5:b2:d6:84:8e:4a:b7: d3:78:3b:bb:b7:f2:4e:35:8f:b7:84:67:0b:e2:61: 43:f1:7d:ef:e7:5f:24:8e:e2:f0:88:5d:5e:88:be: 33:dc:53:6c:a9:ce:d4:a2:05:d2:c1:c0:91:80:1d: 9a:8c:8c:3d:70:bf:78:30:e7:86:8d:d8:b8:f6:f9: 0d:42:94:d0:62:12:ee:4d:af:1a:42:c9:65:0a:e0: 70:c3:1f:20:bb:bd:7b:bf:04:3f:3e:32:01:0c:85: 34:0d:fb:13:4d:22:11:6a:09:b8:3f:a5:57:0b:cb: 76:68:87:ec:91:82:3c:55:b3:eb:40:ca:0f:d6:96: 38:fe:28:ed:ea:a5:96:b1:ef:68:19:66:d0:70:5a: 06:bc:e5:5d:01:f4:ea:2c:fa:dd:52:6a:d5:c9:a7: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:91:83:B5:0B:84:76:57:30:86:19:90:BC:A1:07:37:57:A9:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.192.0/23 IPv6: 2001:df1:b240::/48 Signature Algorithm: sha256WithRSAEncryption 88:bc:d1:37:22:3a:2a:ec:79:da:1c:dd:c5:92:f1:d5:62:70: 0d:51:a0:ca:6d:fa:41:5e:86:ce:8a:87:ae:c0:9a:3c:b8:74: 47:5f:a2:25:57:37:1c:fd:e1:82:7d:4a:34:02:6c:d5:7f:48: ee:a8:ce:12:fc:d7:4c:50:e7:9c:c8:87:5b:da:da:c4:4d:2a: e5:1e:2b:e4:4c:c6:73:76:1f:c5:64:ae:26:08:b9:25:aa:d7: e1:c1:5e:4c:6d:2b:5d:05:fa:0b:c6:84:d2:b6:81:b7:bf:4c: 15:37:db:73:58:74:c0:80:2a:1e:e9:2a:2d:2b:7e:33:3c:8d: 34:a1:51:da:27:dc:34:50:30:66:5a:aa:a5:3b:6e:9c:88:d0: bf:6c:a6:43:38:3f:36:ee:62:52:06:7a:d6:fd:bc:c6:1a:ca: 97:39:a9:cc:66:d8:d0:30:cd:5e:e6:93:f5:d4:c9:1c:d8:41: cc:a4:2c:80:72:87:ed:28:45:b5:cf:d9:92:4f:07:28:f4:53: f6:a0:90:02:67:59:72:c8:49:86:7e:ac:09:40:ac:f8:4b:e0: a2:85:a4:d7:37:dc:fb:25:3d:39:c1:7a:55:e3:0b:15:74:15: 7d:b3:9c:20:bd:78:38:db:0f:cc:32:e7:b2:e5:5e:58:f1:ef: eb:ad:57:c5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICaxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNzUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNhZS1iZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xp72yqljUblYv4l7mN71aHbxM1n6Bou/cJS+L7kEkDSj/DpyA4g9Zc65GLc qlaKI/msiDzTTr4EStwL+hJDo1qutmowcaknbFrBblJp787DOuw7XDgci1r90rJb NbNQjeWy1oSOSrfTeDu7t/JONY+3hGcL4mFD8X3v518kjuLwiF1eiL4z3FNsqc7U ogXSwcCRgB2ajIw9cL94MOeGjdi49vkNQpTQYhLuTa8aQsllCuBwwx8gu717vwQ/ PjIBDIU0DfsTTSIRagm4P6VXC8t2aIfskYI8VbPrQMoP1pY4/ijt6qWWse9oGWbQ cFoGvOVdAfTqLPrdUmrVyacLbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFObNkYO1 C4R2VzCGGZC8oQc3V6l6MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEE2OEI3MTI3 RkVFMTFFQjhFQjQ2OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFno8AwDwQCAAIwCQMHACABDfGyQDANBgkqhkiG9w0BAQsF AAOCAQEAiLzRNyI6Kux52hzdxZLx1WJwDVGgym36QV6GzoqHrsCaPLh0R1+iJVc3 HP3hgn1KNAJs1X9I7qjOEvzXTFDnnMiHW9raxE0q5R4r5EzGc3YfxWSuJgi5JarX 4cFeTG0rXQX6C8aE0raBt79MFTfbc1h0wIAqHukqLSt+MzyNNKFR2ifcNFAwZlqq pTtunIjQv2ymQzg/Nu5iUgZ61v28xhrKlzmpzGbY0DDNXuaT9dTJHNhBzKQsgHKH 7ShFtc/Zkk8HKPRT9qCQAmdZcshJhn6sCUCs+EvgooWk1zfc+yU9OcF6VeMLFXQV fbOcIL14ONsPzDLnsuVeWPHv661XxQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org