$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa File: 4F24360E543D11EC986FD119C4F9AE02.roa (raw, json) Hash identifier: ZmN2ymn2L34nTeu62fUVn+8mxE1PNOftvLEbCHKD5gY= Subject key identifier: 68:C8:CF:61:F7:5E:B8:E2:20:28:34:82:A3:B5:2C:12:48:FB:CE:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FBF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa Signing time: Wed 10 May 2023 16:40:17 +0000 ROA not before: Wed 10 May 2023 16:40:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146918 IP address blocks: 103.172.9.0/24 maxlen: 24 2001:df7:5a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28607 (0x6fbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:40:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8f1-fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:ef:8f:98:ad:2a:6a:0a:33:5b:93:4a:19: 46:cb:8e:d6:7c:25:19:81:07:cc:35:af:27:7b:ec: 0b:6f:b3:6a:ef:b3:39:72:c2:1d:44:7b:c1:15:43: 0f:c4:de:9f:59:49:fd:02:71:7c:7e:16:74:35:e6: c3:ae:06:db:0f:7a:22:16:6f:69:b9:19:56:f3:d2: 8e:a2:b3:91:1d:cd:24:43:31:27:5e:09:58:36:00: 7a:43:b5:53:b3:8c:03:d9:65:e3:0a:73:f6:8c:78: d0:14:03:82:26:bc:db:b6:eb:18:05:0a:81:be:c8: 03:bf:73:15:76:b2:19:87:ff:51:c9:09:4f:c8:28: 1b:3d:83:bf:9f:04:cb:ec:86:94:f9:65:44:15:49: 9f:f8:30:e3:e6:53:41:40:86:57:6f:8e:7c:ff:96: f9:56:2b:54:7a:df:39:23:8d:7b:25:2d:6c:7d:6c: 86:a2:14:8f:85:57:2f:49:41:74:fa:20:34:63:c3: 22:06:d7:92:ff:90:51:f0:80:98:c0:ff:09:f5:96: f0:5c:36:4a:78:b2:d6:e5:95:cc:8a:68:bc:82:d6: f2:a7:b4:13:01:66:33:df:c6:1b:20:bb:5d:1d:d0: de:45:00:08:ef:1e:95:a2:74:5b:1e:e3:dc:67:61: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C8:CF:61:F7:5E:B8:E2:20:28:34:82:A3:B5:2C:12:48:FB:CE:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F24360E543D11EC986FD119C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.9.0/24 IPv6: 2001:df7:5a80::/48 Signature Algorithm: sha256WithRSAEncryption 3e:3f:bd:61:9a:6b:cd:09:87:28:b8:cb:d0:49:0d:58:df:56: f4:20:41:4c:51:96:c8:07:5b:54:63:11:87:fc:88:94:84:5d: c7:d5:56:9a:fe:5f:f6:c5:64:49:7a:47:e5:da:88:e8:96:7b: d1:c0:6a:0f:29:3c:3b:e5:d5:49:17:5a:2e:f2:45:9c:25:a8: b6:ac:35:93:41:70:79:89:43:0e:81:cb:83:bb:3b:01:e8:91: 5c:52:e9:ea:1f:ac:d2:dd:ef:74:a6:a7:cc:ee:a8:20:f3:c2: ad:1f:e2:64:e5:38:78:b0:80:e3:81:f7:b1:c5:a8:b0:8a:e2: 21:4f:2c:96:8b:77:e7:ee:cd:ae:27:69:e0:62:18:7d:1c:44: be:13:e8:f7:2b:18:51:fd:c0:2a:9c:ba:6a:7c:b9:d5:67:03: e8:f8:4f:9e:fc:84:2e:fd:fd:aa:16:0a:c1:39:5a:e8:4e:e1: 2b:22:21:fd:70:91:46:db:14:6c:6d:90:8c:bf:d5:81:fe:7d: 66:b4:ea:88:31:d2:fe:ac:ff:92:42:8d:b0:b2:07:e6:b5:73: cb:9c:29:9b:3e:57:c5:11:6d:07:81:87:be:5c:99:82:4f:0b: e9:87:b3:1c:7b:24:c6:57:57:7e:db:66:ed:e2:ab:86:0a:c8: ed:f2:40:b0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MDE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhmMS1mY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwjvj5itKmoKM1uTShlGy47WfCUZgQfMNa8ne+wLb7Nq77M5csIdRHvBFUMP xN6fWUn9AnF8fhZ0NebDrgbbD3oiFm9puRlW89KOorORHc0kQzEnXglYNgB6Q7VT s4wD2WXjCnP2jHjQFAOCJrzbtusYBQqBvsgDv3MVdrIZh/9RyQlPyCgbPYO/nwTL 7IaU+WVEFUmf+DDj5lNBQIZXb458/5b5VitUet85I417JS1sfWyGohSPhVcvSUF0 +iA0Y8MiBteS/5BR8ICYwP8J9ZbwXDZKeLLW5ZXMimi8gtbyp7QTAWYz38YbILtd HdDeRQAI7x6VonRbHuPcZ2H5zQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGjIz2H3 XrjiICg0gqO1LBJI+879MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEYyNDM2MEU1 NDNEMTFFQzk4NkZEMTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnrAkwDwQCAAIwCQMHACABDfdagDANBgkqhkiG9w0BAQsF AAOCAQEAPj+9YZprzQmHKLjL0EkNWN9W9CBBTFGWyAdbVGMRh/yIlIRdx9VWmv5f 9sVkSXpH5dqI6JZ70cBqDyk8O+XVSRdaLvJFnCWotqw1k0FweYlDDoHLg7s7AeiR XFLp6h+s0t3vdKanzO6oIPPCrR/iZOU4eLCA44H3scWosIriIU8slot35+7Nridp 4GIYfRxEvhPo9ysYUf3AKpy6any51WcD6PhPnvyELv39qhYKwTla6E7hKyIh/XCR RtsUbG2QjL/Vgf59ZrTqiDHS/qz/kkKNsLIH5rVzy5wpmz5XxRFtB4GHvlyZgk8L 6YezHHskxldXfttm7eKrhgrI7fJAsA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org