$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa File: 4D84E3CEE57011ECBC81A87EC4F9AE02.roa (raw, json) Hash identifier: L5wmtbPFsKcS6JNstc+7l9xnEtsEAL8S4+hBMwKWl9U= Subject key identifier: 68:B8:06:2B:CF:D1:92:49:4C:A6:3C:97:B1:25:DF:7C:51:79:69:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 75D1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa Signing time: Wed 19 Jul 2023 11:56:24 +0000 ROA not before: Wed 19 Jul 2023 11:56:24 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149595 IP address blocks: 103.188.236.0/23 maxlen: 24 2001:df1:fd40::/48 maxlen: 48 2402:6a40:3::c/126 maxlen: 126 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30161 (0x75d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 19 11:56:24 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64b7cf67-d904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:e3:3d:b0:09:6d:45:c9:91:ba:f6:1b:98: 64:65:83:2f:3c:6f:e7:84:d3:ed:db:98:3f:87:ce: 78:6a:9d:3c:06:ea:11:10:a8:ef:75:12:b1:5a:a6: 63:79:96:db:c9:b1:97:8c:af:6a:bb:22:c4:16:76: 83:74:7d:c0:b6:e0:02:d2:eb:21:62:fb:47:13:bb: 42:08:d3:17:76:99:31:87:30:ae:9a:18:6f:16:54: b6:b7:55:4a:87:70:66:80:a9:f4:fd:8d:ac:16:cd: c4:02:31:70:31:40:a7:6e:11:a7:85:59:ff:3c:63: a7:56:7a:6c:73:3b:f8:3b:c5:e5:45:f9:cf:cf:c9: b3:e3:8c:e8:9b:73:a2:e4:1c:81:c5:d5:1f:bd:dc: c5:16:26:b2:05:da:41:6e:4f:40:45:3d:f7:16:e2: c8:ae:c8:fe:03:99:57:61:c8:8c:b2:8f:12:54:51: 16:d2:3f:f5:b2:d7:fc:50:ce:42:52:c3:3d:07:d1: d4:e3:2b:bf:1a:d3:f4:c7:08:18:48:e1:85:38:09: a1:38:18:62:cf:6a:a7:e7:52:b7:53:26:c2:70:40: 75:ed:85:2f:64:6f:5e:7e:21:ce:7f:98:8b:93:73: 4e:ed:aa:0e:b1:d5:2c:ee:8f:7d:68:e4:bb:fd:58: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:06:2B:CF:D1:92:49:4C:A6:3C:97:B1:25:DF:7C:51:79:69:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D84E3CEE57011ECBC81A87EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.188.236.0/23 IPv6: 2001:df1:fd40::/48 2402:6a40:3:0:0:0:0:c/126 Signature Algorithm: sha256WithRSAEncryption 02:03:be:dd:82:7e:7a:37:bf:8c:72:9b:d6:73:e9:4f:1b:8e: 75:e7:e7:cd:54:24:b9:5d:e5:87:a7:c7:a1:ee:b5:f7:05:b8: fa:c5:e2:2d:49:07:f6:7f:ed:e1:e0:a4:6f:15:ac:4f:28:82: 54:b8:68:0e:fd:07:17:2b:28:fd:dd:c6:4c:9e:13:6d:78:cc: 8a:31:ea:ec:b4:6b:fa:25:ec:7e:7e:cd:ff:c8:83:ea:8f:8f: 2b:55:d7:5f:81:89:9b:11:7d:d2:0c:74:14:e2:f8:cc:b3:dd: 25:e6:a5:4d:46:96:d2:d4:66:8e:47:49:71:0a:4b:96:74:ed: 7e:d0:5a:9c:4c:a7:6f:91:1b:c7:61:1e:1c:43:b2:24:96:e1: 28:8f:e6:4f:d7:8f:d7:d8:7b:64:ff:e9:7f:91:30:32:35:65: 89:28:d3:48:d7:53:45:a8:13:a2:f4:bf:c5:a7:02:b0:fd:72: 4f:46:a2:69:ee:03:d5:ed:0b:e9:b3:3f:d9:d9:f9:47:5d:3e: 07:9e:8f:79:0e:cb:21:06:f5:e0:bd:00:b2:8c:8f:26:c4:bc: cd:a3:03:30:45:85:44:3a:e2:96:1d:a0:d8:17:27:b7:6e:c4: 4e:5e:9d:4a:43:68:4b:e8:51:47:99:65:a4:22:f7:89:0c:b8: cb:7b:42:98 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICddEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzE5MTE1NjI0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI3Y2Y2Ny1kOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshLjPbAJbUXJkbr2G5hkZYMvPG/nhNPt25g/h854ap08BuoREKjvdRKxWqZj eZbbybGXjK9quyLEFnaDdH3AtuAC0ushYvtHE7tCCNMXdpkxhzCumhhvFlS2t1VK h3BmgKn0/Y2sFs3EAjFwMUCnbhGnhVn/PGOnVnpsczv4O8XlRfnPz8mz44zom3Oi 5ByBxdUfvdzFFiayBdpBbk9ART33FuLIrsj+A5lXYciMso8SVFEW0j/1stf8UM5C UsM9B9HU4yu/GtP0xwgYSOGFOAmhOBhiz2qn51K3UybCcEB17YUvZG9efiHOf5iL k3NO7aoOsdUs7o99aOS7/Vi6kQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGi4BivP 0ZJJTKY8l7El33xReWlFMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEQ4NEUzQ0VF NTcwMTFFQ0JDODFBODdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMAwEAgABMAYDBAFnvOwwIgQCAAIwHAMHACABDfH9QAMRAiQCakAAAwAAAAAA AAAAAAwwDQYJKoZIhvcNAQELBQADggEBAAIDvt2Cfno3v4xym9Zz6U8bjnXn581U JLld5Yenx6HutfcFuPrF4i1JB/Z/7eHgpG8VrE8oglS4aA79BxcrKP3dxkyeE214 zIox6uy0a/ol7H5+zf/Ig+qPjytV11+BiZsRfdIMdBTi+Myz3SXmpU1GltLUZo5H SXEKS5Z07X7QWpxMp2+RG8dhHhxDsiSW4SiP5k/Xj9fYe2T/6X+RMDI1ZYko00jX U0WoE6L0v8WnArD9ck9GomnuA9XtC+mzP9nZ+UddPgeej3kOyyEG9eC9ALKMjybE vM2jAzBFhUQ64pYdoNgXJ7duxE5enUpDaEvoUUeZZaQi94kMuMt7Qpg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org