$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa File: 4ECD1A5E9C5F11EB8D550436C4F9AE02.roa (raw, json) Hash identifier: kVd9xi1EbJGtnCE0Z6zmqvHKeNqPIvSXSb3DLfAjcT8= Subject key identifier: 68:0D:B4:D9:7D:BB:18:8D:3E:52:D4:CE:13:EE:06:92:F4:26:65:42 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa Signing time: Wed 10 May 2023 16:37:00 +0000 ROA not before: Wed 10 May 2023 16:37:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141818 IP address blocks: 103.139.223.0/24 maxlen: 24 103.164.242.0/23 maxlen: 24 2001:df6:ff80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28432 (0x6f10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc82b-da38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:03:8e:20:3a:fc:f1:2d:c1:7c:3e:d8:fe: ff:57:18:d5:2d:42:a0:cc:22:c7:ff:fd:1e:59:6f: da:3a:c9:15:56:92:10:6d:4f:cd:78:f8:59:f6:20: 40:24:4d:c4:0a:a9:01:7c:6a:7d:6b:1e:45:a9:c6: f3:c2:40:94:cf:41:9f:0d:80:d5:ce:be:93:63:1a: d5:37:15:b1:cf:83:ce:fc:3d:2f:12:97:0b:8f:0f: d8:21:ee:37:be:a9:0c:51:9d:86:e5:3e:5b:d3:5e: 53:6a:e5:78:16:ae:a6:a9:62:6f:46:f4:c1:5b:f0: e3:a7:d8:a4:5f:fe:06:82:19:18:e9:2e:1e:4e:4a: e0:90:37:0d:a1:ac:92:6b:91:74:d4:af:73:de:3a: bd:28:1c:c2:c0:f3:27:3b:e8:22:28:0a:de:4d:0b: 6b:cd:30:dc:4d:d9:65:d8:21:50:85:ab:ed:e1:21: 76:6e:52:5b:04:0c:50:d9:fa:22:b0:ce:73:6c:79: c8:67:56:c0:74:d6:4a:25:73:b8:2f:7d:81:b0:fc: c2:7a:b8:e5:db:d9:29:03:8c:aa:39:5b:ab:d3:61: 66:78:93:e9:3a:8a:78:43:d1:87:90:be:6f:e7:eb: 2f:45:cb:76:b6:02:5c:26:51:ae:98:f0:c2:27:26: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0D:B4:D9:7D:BB:18:8D:3E:52:D4:CE:13:EE:06:92:F4:26:65:42 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.223.0/24 103.164.242.0/23 IPv6: 2001:df6:ff80::/48 Signature Algorithm: sha256WithRSAEncryption 53:bc:92:6a:48:39:21:10:b3:3e:a4:7d:55:83:d5:17:a2:68: d6:76:0b:04:41:85:28:89:c2:4a:19:79:e7:60:26:7c:0b:18: 52:99:14:54:fc:da:49:65:b8:da:33:f0:bf:b7:60:a7:75:c2: aa:83:9f:e3:58:ed:2d:38:ad:5e:14:4f:77:38:93:1c:73:c6: ed:d8:b7:60:eb:f3:d7:1e:d4:d5:28:e1:a6:07:7f:1b:07:7b: 4a:c2:ad:fd:a2:cd:66:cc:ac:92:38:16:54:98:bb:19:e5:81: a5:e4:61:5f:42:5e:df:db:2c:67:60:c9:32:b0:0b:59:ea:60: 92:26:31:91:e6:20:c3:32:d7:89:93:e2:75:7b:60:b7:de:e2: 0f:4f:77:47:d7:19:a7:8e:5b:6c:52:1c:2f:0c:75:11:14:5b: d6:ff:0d:71:b2:c0:2c:eb:ba:7d:ad:4c:96:80:7c:dd:e8:12: 1d:87:26:23:7b:85:f5:52:74:8b:82:ed:10:0d:93:64:c7:c5: 94:42:58:5a:17:c2:0c:2a:c3:fc:25:4c:fd:8a:ec:69:5a:d9: f9:d0:27:0d:c5:74:ec:d5:d2:b2:27:57:0e:59:a4:3f:4b:bd: 4f:8e:c0:c7:a0:50:17:57:93:57:af:39:df:c7:d7:bd:c2:55: 22:1a:dc:93 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzgyYi1kYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNMDjiA6/PEtwXw+2P7/VxjVLUKgzCLH//0eWW/aOskVVpIQbU/NePhZ9iBA JE3ECqkBfGp9ax5FqcbzwkCUz0GfDYDVzr6TYxrVNxWxz4PO/D0vEpcLjw/YIe43 vqkMUZ2G5T5b015TauV4Fq6mqWJvRvTBW/Djp9ikX/4GghkY6S4eTkrgkDcNoayS a5F01K9z3jq9KBzCwPMnO+giKAreTQtrzTDcTdll2CFQhavt4SF2blJbBAxQ2foi sM5zbHnIZ1bAdNZKJXO4L32BsPzCerjl29kpA4yqOVur02FmeJPpOop4Q9GHkL5v 5+svRct2tgJcJlGumPDCJyYMIwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGgNtNl9 uxiNPlLUzhPuBpL0JmVCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEVDRDFBNUU5 QzVGMTFFQjhENTUwNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABni98DBAFnpPIwDwQCAAIwCQMHACABDfb/gDANBgkqhkiG 9w0BAQsFAAOCAQEAU7ySakg5IRCzPqR9VYPVF6Jo1nYLBEGFKInCShl552AmfAsY UpkUVPzaSWW42jPwv7dgp3XCqoOf41jtLTitXhRPdziTHHPG7di3YOvz1x7U1Sjh pgd/Gwd7SsKt/aLNZsyskjgWVJi7GeWBpeRhX0Je39ssZ2DJMrALWepgkiYxkeYg wzLXiZPidXtgt97iD093R9cZp45bbFIcLwx1ERRb1v8NcbLALOu6fa1MloB83egS HYcmI3uF9VJ0i4LtEA2TZMfFlEJYWhfCDCrD/CVM/YrsaVrZ+dAnDcV07NXSsidX DlmkP0u9T47Ax6BQF1eTV68538fXvcJVIhrckw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org