$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C8DC66203BC11EB9D8B117AC4F9AE02.roa File: 4C8DC66203BC11EB9D8B117AC4F9AE02.roa (raw, json) Hash identifier: 4oyCr3Os32cWvj13DfUmsl/7vn+DzVA9LWZ7nmFtgbI= Subject key identifier: D6:9B:74:98:A9:42:D9:62:D3:7A:B5:54:E0:90:7A:EE:2B:47:5E:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A82 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C8DC66203BC11EB9D8B117AC4F9AE02.roa Signing time: Wed 10 May 2023 16:15:08 +0000 ROA not before: Wed 10 May 2023 16:15:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133314 IP address blocks: 103.235.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27266 (0x6a82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:15:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc30c-34ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:4b:d0:7c:de:d9:6f:bc:ed:c1:00:e8:62: 0e:2d:81:e8:53:29:7c:fd:bd:b6:22:e9:f9:86:eb: d4:6a:5f:6e:ad:2f:96:66:b5:81:83:29:24:e5:65: 26:89:ee:02:b2:22:84:b7:a8:e3:ef:9e:d5:6a:70: 49:6e:a2:c5:a4:7a:10:17:a3:a8:06:98:34:be:2e: 60:39:5e:37:2c:0b:61:63:54:a1:bf:ac:2a:a9:28: 64:2e:00:9b:71:55:7d:22:c1:14:a1:c6:f0:f0:1c: b4:fd:ad:6b:cb:be:3b:d4:07:5d:c2:4c:d0:47:10: 3c:4a:fb:c7:e8:2f:aa:1a:fe:17:b1:3c:19:77:c0: 48:db:0d:15:d4:6d:ed:27:71:38:d8:a4:db:65:5e: 0a:16:8d:67:49:56:de:a1:76:fc:61:dd:ff:d0:52: 04:4b:ad:08:f1:ab:33:1e:b2:48:f6:2e:9f:79:6b: e1:80:cb:5e:2f:a3:e5:7d:8e:2a:27:3c:9f:f1:da: af:03:53:02:c3:3f:3b:bd:a7:4d:1d:ca:fa:a1:3f: 0c:55:80:e9:96:96:3c:de:d9:57:dd:f6:47:47:58: db:ba:0b:bd:47:bd:1c:b7:e9:69:8e:d7:a0:e9:b5: ca:8c:17:6e:95:64:05:c1:09:30:aa:2e:5e:a2:25: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:74:98:A9:42:D9:62:D3:7A:B5:54:E0:90:7A:EE:2B:47:5E:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C8DC66203BC11EB9D8B117AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.156.0/22 Signature Algorithm: sha256WithRSAEncryption b2:6e:37:5a:dd:05:db:94:b7:3a:65:b5:a3:6d:0b:d7:79:bd: e6:86:0e:60:a4:71:cc:dd:df:17:56:7e:29:4f:f9:47:80:1c: 75:b8:5f:0f:9d:45:1f:85:16:44:2d:9d:4d:a5:e1:bb:5c:9b: c0:a7:58:d4:3a:9d:19:ce:97:fc:b8:6a:43:7e:18:07:b0:30: 73:5d:58:eb:45:f7:44:06:b0:f9:56:e7:93:3a:c4:3a:c3:5d: dd:17:0e:8e:3a:54:1e:12:bc:88:0f:b6:d0:ad:88:c6:18:5c: 0c:46:f6:8d:52:0a:cd:e4:12:f1:d0:5e:b2:66:f6:e9:82:9d: 93:0c:0c:42:07:ae:8f:1f:a8:68:5a:b6:67:3b:a9:b2:28:7f: 1c:a9:b4:e7:99:e7:d7:76:c9:c7:d2:a0:32:bf:bd:51:3d:a7: cd:8f:54:d0:aa:23:f5:0c:2a:ac:79:bb:50:7f:4f:1a:4f:46: 57:1b:0c:2a:ac:6c:39:ba:1f:ad:d6:1d:35:93:9b:f7:c6:61: e9:dc:77:1b:42:cf:a5:3c:a3:2a:13:36:38:23:8f:5c:fc:c6: 4f:86:45:8e:16:d9:c4:fa:38:fc:5c:bc:10:9b:47:74:1b:c7: d6:dc:7c:1f:50:f9:8f:fc:ac:4c:75:97:ff:4d:8c:0d:e3:76: 7a:8c:c0:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzMwYy0zNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKdL0Hze2W+87cEA6GIOLYHoUyl8/b22Iun5huvUal9urS+WZrWBgykk5WUm ie4CsiKEt6jj757VanBJbqLFpHoQF6OoBpg0vi5gOV43LAthY1Shv6wqqShkLgCb cVV9IsEUocbw8By0/a1ry7471AddwkzQRxA8SvvH6C+qGv4XsTwZd8BI2w0V1G3t J3E42KTbZV4KFo1nSVbeoXb8Yd3/0FIES60I8aszHrJI9i6feWvhgMteL6PlfY4q Jzyf8dqvA1MCwz87vadNHcr6oT8MVYDplpY83tlX3fZHR1jbugu9R70ct+lpjteg 6bXKjBdulWQFwQkwqi5eoiWexQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNabdJip Qtli03q1VOCQeu4rR14FMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEM4REM2NjIw M0JDMTFFQjlEOEIxMTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn65wwDQYJKoZIhvcNAQELBQADggEBALJuN1rdBduUtzpl taNtC9d5veaGDmCkcczd3xdWfilP+UeAHHW4Xw+dRR+FFkQtnU2l4btcm8CnWNQ6 nRnOl/y4akN+GAewMHNdWOtF90QGsPlW55M6xDrDXd0XDo46VB4SvIgPttCtiMYY XAxG9o1SCs3kEvHQXrJm9umCnZMMDEIHro8fqGhatmc7qbIofxyptOeZ59d2ycfS oDK/vVE9p82PVNCqI/UMKqx5u1B/TxpPRlcbDCqsbDm6H63WHTWTm/fGYencdxtC z6U8oyoTNjgjj1z8xk+GRY4W2cT6OPxcvBCbR3Qbx9bcfB9Q+Y/8rEx1l/9NjA3j dnqMwFM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:32 2024 by rpki-client on console-ams.rpki-client.org