$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa File: 53B3D702249711EEBFFAB477C4F9AE02.roa (raw, json) Hash identifier: OIYdjcGc96BIJC0yBSvE89HQOh9Xv+X/MshT5mPJ7no= Subject key identifier: 79:28:B0:BD:6F:2F:49:69:A2:2D:96:B5:47:5C:8C:C6:B8:2D:0F:71 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A6C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa Signing time: Wed 20 Sep 2023 04:12:32 +0000 ROA not before: Wed 20 Sep 2023 04:12:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151087 IP address blocks: 103.251.169.0/24 maxlen: 24 2001:df2:6cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31340 (0x7a6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 20 04:12:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=650a7130-17cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:45:9a:8a:8e:45:f3:bb:e0:32:4f:92:1e: 9e:3b:f4:68:f5:a2:a0:23:7e:ae:1c:16:54:b0:6e: 97:45:01:72:5e:82:8f:8d:1d:37:1d:55:55:b5:d8: 09:24:2d:a2:0f:ae:be:a2:79:ac:f1:1a:c7:94:34: e1:e9:f5:47:49:0e:09:17:04:ad:c5:0b:cf:85:b0: ae:11:64:31:3e:73:e0:62:3a:43:2a:81:81:db:b1: 08:a8:5e:98:da:0d:40:bc:e6:ef:de:42:02:d3:3a: 93:07:49:79:10:68:89:4b:ef:09:a6:d1:c5:ce:26: 71:b5:c6:56:f3:03:4c:25:56:56:d5:75:85:00:a3: 30:40:19:cc:97:de:8d:5e:45:52:76:81:ce:53:bc: 17:86:62:4d:07:0f:45:c7:b1:96:ae:a2:49:1b:9d: 13:7a:e1:a0:70:46:eb:e7:b2:40:1d:8f:9c:fc:54: 16:1a:f7:c7:69:59:5b:6f:b3:25:aa:0d:8f:ce:c9: d1:05:3d:91:60:15:94:8b:b5:d3:9e:d3:08:3a:48: a7:cb:f3:32:81:9d:26:59:00:c0:a1:28:53:ed:c6: 68:e2:70:8d:12:1d:95:40:22:ea:86:52:c4:68:9b: 5e:07:0c:10:f1:10:9f:6a:f8:d0:3f:b5:d2:2f:3c: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:28:B0:BD:6F:2F:49:69:A2:2D:96:B5:47:5C:8C:C6:B8:2D:0F:71 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.169.0/24 IPv6: 2001:df2:6cc0::/48 Signature Algorithm: sha256WithRSAEncryption b5:74:52:3f:71:58:22:55:08:3b:ef:bd:2b:00:55:8f:8a:ac: 18:d6:67:e8:be:d7:a6:03:cc:1e:a2:ef:77:35:a9:a2:b2:45: 63:c0:3f:3b:2e:5e:0a:76:0c:99:93:d5:3d:10:6e:61:0b:1b: 05:7b:b3:21:30:1e:e7:a6:3d:1d:bd:fb:fc:d0:7f:e6:b4:23: e4:64:87:d1:f2:50:78:3a:04:77:54:11:19:33:ee:f8:67:63: 42:c9:b0:83:05:83:11:5f:ad:98:51:40:3e:af:e7:1c:ed:dd: 63:68:99:3f:6d:94:44:ee:63:76:33:2c:0f:1f:ff:cd:c8:94: b1:5b:71:b9:60:9c:d5:16:44:74:28:fd:da:31:1a:17:3b:ef: 90:3c:a0:08:85:1a:e5:18:74:e5:2a:f2:95:6f:54:67:65:d0: 88:05:9c:8f:77:cd:5b:56:02:5a:4f:80:40:7f:29:fa:15:8f: 83:a2:e0:94:d1:0f:1d:de:f6:fb:b7:92:08:13:bf:73:07:6e: 12:5b:a3:27:cb:48:91:ac:b3:3f:d2:5a:4b:c2:91:6b:5d:c0: 39:d3:23:a9:94:49:2b:7c:0f:0b:db:6b:a5:ef:48:a6:74:8d: bb:42:ca:d4:ea:6b:4f:15:7a:5c:9d:a1:6c:20:2a:db:62:80: 30:eb:a3:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICemwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTIwMDQxMjMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBhNzEzMC0xN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutNFmoqORfO74DJPkh6eO/Ro9aKgI36uHBZUsG6XRQFyXoKPjR03HVVVtdgJ JC2iD66+onms8RrHlDTh6fVHSQ4JFwStxQvPhbCuEWQxPnPgYjpDKoGB27EIqF6Y 2g1AvObv3kIC0zqTB0l5EGiJS+8JptHFziZxtcZW8wNMJVZW1XWFAKMwQBnMl96N XkVSdoHOU7wXhmJNBw9Fx7GWrqJJG50TeuGgcEbr57JAHY+c/FQWGvfHaVlbb7Ml qg2PzsnRBT2RYBWUi7XTntMIOkiny/MygZ0mWQDAoShT7cZo4nCNEh2VQCLqhlLE aJteBwwQ8RCfavjQP7XSLzzMRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHkosL1v L0lpoi2WtUdcjMa4LQ9xMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTNCM0Q3MDIy NDk3MTFFRUJGRkFCNDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn+6kwDwQCAAIwCQMHACABDfJswDANBgkqhkiG9w0BAQsF AAOCAQEAtXRSP3FYIlUIO++9KwBVj4qsGNZn6L7XpgPMHqLvdzWporJFY8A/Oy5e CnYMmZPVPRBuYQsbBXuzITAe56Y9Hb37/NB/5rQj5GSH0fJQeDoEd1QRGTPu+Gdj QsmwgwWDEV+tmFFAPq/nHO3dY2iZP22URO5jdjMsDx//zciUsVtxuWCc1RZEdCj9 2jEaFzvvkDygCIUa5Rh05SrylW9UZ2XQiAWcj3fNW1YCWk+AQH8p+hWPg6LglNEP Hd72+7eSCBO/cwduElujJ8tIkayzP9JaS8KRa13AOdMjqZRJK3wPC9trpe9IpnSN u0LK1OprTxV6XJ2hbCAq22KAMOujWw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org