$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518182A80B4D11EE9A518C7BC4F9AE02.roa File: 518182A80B4D11EE9A518C7BC4F9AE02.roa (raw, json) Hash identifier: DXH2BGRMPwJho309PCB1CgZX/MWg1NomQk/lGBHyjuA= Subject key identifier: 1F:6C:68:74:8C:54:D8:B5:2E:87:F5:7C:B4:DB:0A:17:C5:E1:E0:1F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7440 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518182A80B4D11EE9A518C7BC4F9AE02.roa Signing time: Wed 21 Jun 2023 08:52:06 +0000 ROA not before: Wed 21 Jun 2023 08:52:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151128 IP address blocks: 103.73.151.0/24 maxlen: 24 103.214.170.0/23 maxlen: 24 2001:df2:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29760 (0x7440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 21 08:52:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6492ba35-b85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:3f:ca:92:2c:4f:c3:f9:9c:a2:a6:7d:16: 2c:66:98:ed:38:33:e4:c2:65:1d:52:fd:63:ae:a9: 12:99:6e:0a:39:51:c9:97:5d:c9:04:d6:b9:62:b9: f5:b5:43:7e:37:ac:ee:3f:cf:b0:33:46:74:a7:c2: dd:f7:a0:c4:42:55:40:a0:bc:d0:8c:7b:5a:e7:f4: ff:c1:9f:bc:4a:9a:85:dc:d5:d7:5a:d8:58:cc:53: cf:af:55:a9:76:b7:28:58:e1:46:b4:c9:58:45:e2: a8:3f:fc:86:6c:6b:60:8a:e5:32:3e:43:a2:5b:9d: bf:6c:35:67:b5:38:bb:8f:ca:4c:df:91:fb:a8:1d: 7d:92:bb:39:aa:61:6c:8f:11:78:bf:9b:ff:ac:39: de:72:9f:d1:41:4d:8d:7b:e0:66:16:0c:03:f0:b6: b4:30:df:b0:7f:69:7e:69:ac:36:dc:11:96:b3:6b: f2:76:bd:f3:3c:4c:35:74:10:c6:2a:2c:12:e6:2d: af:92:8b:bf:7f:e3:63:6b:85:af:ad:da:fe:57:db: 1e:60:0c:67:76:55:bd:30:28:2e:36:1e:54:f3:16: 84:4c:15:dc:c8:35:a0:3a:2c:86:23:45:bb:62:b3: 73:25:a2:f6:df:4b:fd:22:eb:ac:9a:42:17:af:5f: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:68:74:8C:54:D8:B5:2E:87:F5:7C:B4:DB:0A:17:C5:E1:E0:1F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518182A80B4D11EE9A518C7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.151.0/24 103.214.170.0/23 IPv6: 2001:df2:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:27:7f:e9:f4:1f:e6:9d:40:92:59:34:7f:0c:d9:6c:24:c1: 76:ed:8e:20:3c:20:a3:79:f6:27:38:45:5c:37:e7:4e:b4:1d: 0c:79:2e:d9:91:05:2d:77:b1:16:f4:52:8b:e3:92:8f:a0:7e: 65:dc:d8:3b:06:2a:87:a3:0b:13:aa:5b:76:c4:7e:c1:5e:e8: 2f:d6:4e:c6:7f:b4:87:3a:a1:ad:05:4e:8e:1b:97:ee:f8:c9: 26:28:0a:c5:e4:f7:78:b9:a9:1b:16:05:39:e3:ce:9e:a5:3d: bd:4e:c4:c9:d4:02:f7:ad:a5:a8:57:33:f8:57:05:8a:07:6d: e6:d2:0a:00:50:c2:69:af:de:56:9d:96:e6:6f:cb:6f:b2:67: d3:8b:12:f3:73:1b:c2:ae:1f:9f:1b:a9:39:79:0e:ac:82:2c: 37:2e:3e:a8:c7:1f:d0:56:30:72:fe:62:42:60:0c:0f:82:b6: 24:49:c1:22:df:9a:82:59:c6:7a:19:cc:85:0b:84:57:be:35: fd:3a:0b:73:f5:e5:72:5b:51:15:09:48:bd:49:2a:cb:e9:80: 45:c0:a5:e1:c0:19:2b:24:d8:7f:c8:fc:06:30:ce:cd:5b:e4: a6:d8:0c:58:0f:44:62:35:f6:94:2a:a4:8f:be:7d:17:51:9c: 71:7f:a2:31 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICdEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjIxMDg1MjA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkyYmEzNS1iODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17w/ypIsT8P5nKKmfRYsZpjtODPkwmUdUv1jrqkSmW4KOVHJl13JBNa5Yrn1 tUN+N6zuP8+wM0Z0p8Ld96DEQlVAoLzQjHta5/T/wZ+8SpqF3NXXWthYzFPPr1Wp drcoWOFGtMlYReKoP/yGbGtgiuUyPkOiW52/bDVntTi7j8pM35H7qB19krs5qmFs jxF4v5v/rDnecp/RQU2Ne+BmFgwD8La0MN+wf2l+aaw23BGWs2vydr3zPEw1dBDG KiwS5i2vkou/f+Nja4Wvrdr+V9seYAxndlW9MCguNh5U8xaETBXcyDWgOiyGI0W7 YrNzJaL230v9IuusmkIXr1+KPQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFB9saHSM VNi1Lof1fLTbChfF4eAfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTE4MTgyQTgw QjREMTFFRTlBNTE4QzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnSZcDBAFn1qowDwQCAAIwCQMHACABDfKNwDANBgkqhkiG 9w0BAQsFAAOCAQEAXSd/6fQf5p1Aklk0fwzZbCTBdu2OIDwgo3n2JzhFXDfnTrQd DHku2ZEFLXexFvRSi+OSj6B+ZdzYOwYqh6MLE6pbdsR+wV7oL9ZOxn+0hzqhrQVO jhuX7vjJJigKxeT3eLmpGxYFOePOnqU9vU7EydQC962lqFcz+FcFigdt5tIKAFDC aa/eVp2W5m/Lb7Jn04sS83Mbwq4fnxupOXkOrIIsNy4+qMcf0FYwcv5iQmAMD4K2 JEnBIt+aglnGehnMhQuEV741/ToLc/XlcltRFQlIvUkqy+mARcCl4cAZKyTYf8j8 BjDOzVvkptgMWA9EYjX2lCqkj759F1GccX+iMQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org