$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa File: 4FE86B1E2C2411EC85B05B3DC4F9AE02.roa (raw, json) Hash identifier: RiZzvFOELIlidHMX3L7LvxNjDEI1c0E6JWjP1jZlYJA= Subject key identifier: DB:3B:A0:47:A7:82:85:CC:FB:02:FE:6E:0F:D6:F7:FD:29:81:4D:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71CD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa Signing time: Wed 10 May 2023 16:50:01 +0000 ROA not before: Wed 10 May 2023 16:50:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59165 IP address blocks: 103.83.252.0/22 maxlen: 24 103.177.24.0/23 maxlen: 24 103.204.52.0/22 maxlen: 24 202.136.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29133 (0x71cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:01 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb39-310c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:7d:85:80:c6:22:87:60:f0:62:e5:4e:c5: b0:7a:15:41:05:e0:25:ce:3b:0b:3d:b5:c6:77:de: d9:17:20:b3:25:8d:0c:da:1c:ab:94:a1:3a:93:3a: ce:a5:b2:4f:69:15:85:e9:fb:81:01:00:b1:b6:43: 3e:49:57:d4:27:c7:5c:cb:35:8d:8a:bf:26:c0:55: c1:fc:7c:92:e3:65:e2:4e:cf:37:64:c4:b8:fc:01: 5e:af:b5:f4:1a:5f:7c:61:47:07:c8:15:92:35:7b: 1d:4c:09:24:ad:f5:7d:7b:8a:9f:b6:f5:6a:7a:06: e7:be:ec:c7:fe:7f:30:18:54:e8:25:c0:47:71:d3: b0:b4:a4:53:73:62:79:9c:c3:e7:7d:87:72:14:46: 7d:3d:b0:00:4c:37:c2:a4:ee:dc:9d:97:a7:53:5c: 17:86:cd:e3:d2:ef:ab:e5:52:95:38:98:8b:31:cd: fd:63:c0:f6:48:d0:8a:12:de:c8:19:55:b6:a2:5b: 7f:ed:f9:f8:a4:36:b8:54:59:5f:4b:36:75:93:e0: 19:28:71:81:57:1a:1c:4b:fd:e0:65:79:35:85:26: b3:2a:d6:0f:08:4b:23:0b:c9:45:6f:33:1e:58:ed: 0e:3e:a8:a1:e6:6d:72:6a:25:8d:c7:9b:2d:2c:e2: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3B:A0:47:A7:82:85:CC:FB:02:FE:6E:0F:D6:F7:FD:29:81:4D:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE86B1E2C2411EC85B05B3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.252.0/22 103.177.24.0/23 103.204.52.0/22 202.136.84.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:63:0d:16:11:78:0f:11:7b:9e:3e:dd:0f:cc:6b:e8:b9:5a: b8:fe:72:27:0d:f8:67:f7:3b:c5:70:18:31:5a:bf:4c:fc:6d: 10:0d:94:19:ec:9f:4a:cd:cf:2e:98:9f:7e:24:16:84:c4:48: 3f:f6:fa:d4:a5:4d:cd:ed:7f:76:5e:70:cd:f6:f0:4e:69:84: 05:0f:c7:10:66:0f:91:0d:9b:fc:72:84:59:21:0c:66:0a:1f: 0e:6f:3c:8e:04:8f:38:ff:35:19:46:2e:e4:dd:db:65:e0:c6: 13:c0:b3:2a:46:5e:2b:1f:30:6c:bd:8a:08:d7:f7:d9:ef:79: fa:4c:9d:78:d3:2b:27:d0:68:00:56:6b:b5:e8:3b:e4:9b:5a: 02:08:91:33:55:81:6c:b4:48:7e:3b:c0:c1:26:40:e2:6f:88: ea:bb:4d:fd:09:cb:2a:e0:3f:ca:4f:bc:ef:f1:27:f1:a8:f4: 0c:2c:de:16:03:00:c7:2c:20:47:36:ab:bb:56:e2:c3:47:6b: 15:0c:a6:04:5c:f4:dc:f3:ab:f0:ec:8f:e3:b0:57:d3:c0:5c: fb:9f:05:8d:49:8f:44:fa:02:98:ee:a6:75:6a:87:d8:a8:49: 38:f1:8b:06:49:ce:d8:22:92:69:44:38:d1:7c:e1:f9:8c:01: 63:66:ac:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICcc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDAxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IzOS0zMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwV9hYDGIodg8GLlTsWwehVBBeAlzjsLPbXGd97ZFyCzJY0M2hyrlKE6kzrO pbJPaRWF6fuBAQCxtkM+SVfUJ8dcyzWNir8mwFXB/HyS42XiTs83ZMS4/AFer7X0 Gl98YUcHyBWSNXsdTAkkrfV9e4qftvVqegbnvuzH/n8wGFToJcBHcdOwtKRTc2J5 nMPnfYdyFEZ9PbAATDfCpO7cnZenU1wXhs3j0u+r5VKVOJiLMc39Y8D2SNCKEt7I GVW2olt/7fn4pDa4VFlfSzZ1k+AZKHGBVxocS/3gZXk1hSazKtYPCEsjC8lFbzMe WO0OPqih5m1yaiWNx5stLOKxgwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFNs7oEen goXM+wL+bg/W9/0pgU3OMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEZFODZCMUUy QzI0MTFFQzg1QjA1QjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnU/wDBAFnsRgDBAJnzDQDBALKiFQwDQYJKoZIhvcNAQEL BQADggEBAI9jDRYReA8Re54+3Q/Ma+i5Wrj+cicN+Gf3O8VwGDFav0z8bRANlBns n0rNzy6Yn34kFoTESD/2+tSlTc3tf3ZecM328E5phAUPxxBmD5ENm/xyhFkhDGYK Hw5vPI4Ejzj/NRlGLuTd22XgxhPAsypGXisfMGy9igjX99nvefpMnXjTKyfQaABW a7XoO+SbWgIIkTNVgWy0SH47wMEmQOJviOq7Tf0JyyrgP8pPvO/xJ/Go9Aws3hYD AMcsIEc2q7tW4sNHaxUMpgRc9Nzzq/Dsj+OwV9PAXPufBY1Jj0T6ApjupnVqh9io STjxiwZJztgikmlEONF84fmMAWNmrLk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org