$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa File: 4FD9D0E80F9911EB99108B5AC4F9AE02.roa (raw, json) Hash identifier: 23D7h40k0AaGKxZ0JbjOGSOQssJmAZ5Yjccz3QyaHhw= Subject key identifier: A9:47:7C:9D:C2:DD:4D:19:AD:94:47:93:12:12:CD:47:7A:B9:71:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E51 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa Signing time: Wed 10 May 2023 16:33:30 +0000 ROA not before: Wed 10 May 2023 16:33:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140205 IP address blocks: 103.156.138.0/23 maxlen: 24 2001:df1:d740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28241 (0x6e51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc75a-e7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:03:ae:81:9b:e1:eb:b0:16:f1:26:98:8c: 93:24:88:f0:4c:13:27:f0:84:21:7e:f4:b4:80:b1: 2e:2e:ca:2d:11:ec:9a:31:17:4b:30:7e:9c:92:ac: 10:45:54:3f:a1:54:ea:9f:5c:3a:a3:c5:87:74:70: 33:ce:17:af:51:49:a6:15:ba:59:cb:99:05:f7:6e: 55:d9:9a:3e:3b:26:08:8a:6f:82:dc:1f:df:0e:f2: f9:49:dd:0c:45:2a:54:9d:c6:d5:39:87:aa:0d:4e: 7d:a0:8b:e5:55:9a:03:1c:ba:e0:46:cb:40:28:0c: 84:2a:e7:56:14:90:ed:de:66:26:ac:38:54:67:45: e3:64:3f:a4:5c:fd:1a:f9:04:2a:ef:0d:fb:dc:d8: 15:c9:3d:f9:a7:92:b8:af:81:14:4e:04:50:68:75: 95:a6:0f:30:66:38:29:82:43:c7:4b:0f:2d:f3:2a: 6d:8a:3e:50:66:5f:0f:07:92:48:54:f1:70:25:10: 36:39:4d:b3:41:9d:83:d8:ed:ca:74:91:ba:1c:e9: ed:9e:16:28:7f:f8:c7:36:d6:5c:af:4e:e4:1f:bc: 1d:c0:fc:23:58:ad:cc:f2:16:29:b1:75:86:06:98: 2f:95:36:90:9c:c4:38:09:a5:a5:d3:b4:a8:f9:22: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:47:7C:9D:C2:DD:4D:19:AD:94:47:93:12:12:CD:47:7A:B9:71:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.138.0/23 IPv6: 2001:df1:d740::/48 Signature Algorithm: sha256WithRSAEncryption 4d:e2:72:03:dc:e9:f6:ec:c0:7d:cc:66:ec:61:ef:e5:a9:5b: df:cd:75:99:2f:83:8e:bd:85:cb:0b:15:fc:ff:66:3c:6c:cc: aa:da:b8:7a:fc:1e:8a:62:82:01:5f:c3:ed:94:cb:82:fc:7a: d9:b8:0d:b4:91:26:d9:b6:04:e1:cc:f8:e8:73:70:43:8b:6a: 2a:b3:27:f3:26:b9:5d:f2:f8:64:2e:2d:9a:e7:7f:28:1b:9a: 1c:59:b0:d7:80:d7:77:c2:5d:06:5a:20:5a:a6:e6:d3:df:09: 75:01:39:28:01:ea:14:92:4e:9b:01:2a:83:38:74:bf:c0:15: 6a:0a:b3:eb:86:24:d3:74:8d:5f:4a:b8:8a:d6:7d:71:c1:a0: ac:43:e4:40:73:c2:02:34:11:b2:e6:96:4f:e6:a2:a9:50:78: 9a:31:86:88:93:7c:c7:1f:92:14:57:de:88:a2:a7:71:08:9c: 15:ff:08:1c:e3:63:97:fa:be:54:77:df:93:0a:05:ce:b1:3f: 40:23:c4:e3:36:86:db:9c:54:9d:e9:0f:54:8b:78:a8:61:64: d4:c3:b9:b0:ee:1b:d0:82:79:ea:e3:8c:5d:0c:45:c9:01:cd: 02:f0:ad:46:45:c9:31:da:0e:f0:e4:7e:bd:40:83:d7:57:db: 79:9b:76:11 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICblEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzMwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc1YS1lN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy4DroGb4euwFvEmmIyTJIjwTBMn8IQhfvS0gLEuLsotEeyaMRdLMH6ckqwQ RVQ/oVTqn1w6o8WHdHAzzhevUUmmFbpZy5kF925V2Zo+OyYIim+C3B/fDvL5Sd0M RSpUncbVOYeqDU59oIvlVZoDHLrgRstAKAyEKudWFJDt3mYmrDhUZ0XjZD+kXP0a +QQq7w373NgVyT35p5K4r4EUTgRQaHWVpg8wZjgpgkPHSw8t8yptij5QZl8PB5JI VPFwJRA2OU2zQZ2D2O3KdJG6HOntnhYof/jHNtZcr07kH7wdwPwjWK3M8hYpsXWG BpgvlTaQnMQ4CaWl07So+SKW3wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKlHfJ3C 3U0ZrZRHkxISzUd6uXEEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEZEOUQwRTgw Rjk5MTFFQjk5MTA4QjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnIowDwQCAAIwCQMHACABDfHXQDANBgkqhkiG9w0BAQsF AAOCAQEATeJyA9zp9uzAfcxm7GHv5alb3811mS+Djr2FywsV/P9mPGzMqtq4evwe imKCAV/D7ZTLgvx62bgNtJEm2bYE4cz46HNwQ4tqKrMn8ya5XfL4ZC4tmud/KBua HFmw14DXd8JdBlogWqbm098JdQE5KAHqFJJOmwEqgzh0v8AVagqz64Yk03SNX0q4 itZ9ccGgrEPkQHPCAjQRsuaWT+aiqVB4mjGGiJN8xx+SFFfeiKKncQicFf8IHONj l/q+VHffkwoFzrE/QCPE4zaG25xUnekPVIt4qGFk1MO5sO4b0IJ56uOMXQxFyQHN AvCtRkXJMdoO8OR+vUCD11fbeZt2EQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org