$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5582F2FA123911EDAFF2A981C4F9AE02.roa File: 5582F2FA123911EDAFF2A981C4F9AE02.roa (raw, json) Hash identifier: +GyvTvtfRC+28NryTkz14yaApNG5yN97ZISYweOvW1g= Subject key identifier: A4:FE:F5:6A:C9:61:03:D1:26:B0:61:94:CD:C4:F9:D1:D2:95:CC:8A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70CD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5582F2FA123911EDAFF2A981C4F9AE02.roa Signing time: Wed 10 May 2023 16:45:16 +0000 ROA not before: Wed 10 May 2023 16:45:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150054 IP address blocks: 103.191.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28877 (0x70cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:45:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca1b-10ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:19:d1:b2:24:0f:00:85:1f:0a:39:5a:81: ce:60:68:74:90:93:5e:e7:27:6b:78:98:4d:d4:38: 7a:34:a4:50:94:91:3a:b0:36:44:19:59:f0:73:02: 6b:f5:c4:8e:bd:04:ed:25:ef:c2:9f:ec:9a:51:d6: 36:f6:b3:2e:d4:ed:8e:24:a0:f5:e2:fe:9a:76:9d: 7a:6c:c2:63:9e:3f:66:99:93:06:bd:e4:52:b8:ef: 1a:56:65:1e:43:46:b2:e4:d8:fb:91:fd:3e:3c:f1: 6f:03:b3:f1:a4:86:75:e2:e1:8f:4a:66:c1:83:07: 31:3f:e2:d0:cc:96:02:1f:96:21:f2:4e:de:44:a0: 1b:89:ec:01:79:4d:66:7e:7e:1d:c9:60:cd:e9:7c: 58:63:aa:6b:8d:b8:3a:dd:94:93:ed:59:90:9e:a2: 1a:bd:42:52:09:13:7e:51:3f:81:43:99:af:40:d2: 7a:1a:de:35:c8:41:dc:c6:38:60:15:9a:a7:f3:94: 10:15:04:e3:41:71:77:2c:d9:0b:d0:48:d6:9f:9d: 65:6c:e5:bf:41:d3:cd:cd:3a:0f:39:eb:71:ea:08: 14:2c:de:39:2a:29:c7:f4:43:71:8a:f6:4d:8b:28: 0f:15:3c:0c:b9:52:b1:55:9c:ee:72:e9:80:fd:aa: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:F5:6A:C9:61:03:D1:26:B0:61:94:CD:C4:F9:D1:D2:95:CC:8A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5582F2FA123911EDAFF2A981C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.156.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:69:4d:be:0e:08:78:3e:18:b8:f6:10:9f:d2:c3:9a:0b:cf: 20:1b:dc:4f:e1:70:b2:6c:f4:83:dc:56:30:77:7f:30:ac:e8: 03:dc:62:b1:e2:91:56:84:29:9d:71:40:7d:6f:b3:de:f3:97: b4:0e:95:0c:0a:ab:48:fa:14:77:88:e6:69:97:43:62:ab:62: 87:24:26:d1:5b:33:af:b7:9c:e0:fd:b7:ef:c3:17:02:d4:40: 2f:95:8f:50:f7:df:c5:a8:7f:f4:27:b8:cf:31:58:16:64:36: 22:64:a1:25:45:07:ed:47:3c:68:62:43:5e:3a:fb:9a:bd:67: 1b:ed:0b:26:b1:da:ce:a6:35:42:9d:ec:31:42:2d:d9:3f:09: cf:c9:04:2a:65:39:ee:c0:81:20:e8:97:62:98:e7:e0:3d:42: 02:85:b1:5d:9a:a5:25:c4:83:a1:98:6b:d9:f0:54:4e:c2:95: 89:dd:d8:15:d5:57:7a:14:99:ed:2e:06:fe:88:83:32:41:a9: 59:3a:e2:15:7c:5d:b0:3d:37:2a:da:75:1c:c5:91:f0:02:f5: b9:70:98:ff:d5:e4:72:7b:ee:0f:d3:8d:c0:0e:aa:f4:82:9e: ea:89:21:7d:ac:cc:c9:ed:34:f1:d8:6c:2c:18:db:07:15:b8: 6e:04:df:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2ExYi0xMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g0Z0bIkDwCFHwo5WoHOYGh0kJNe5ydreJhN1Dh6NKRQlJE6sDZEGVnwcwJr 9cSOvQTtJe/Cn+yaUdY29rMu1O2OJKD14v6adp16bMJjnj9mmZMGveRSuO8aVmUe Q0ay5Nj7kf0+PPFvA7PxpIZ14uGPSmbBgwcxP+LQzJYCH5Yh8k7eRKAbiewBeU1m fn4dyWDN6XxYY6prjbg63ZST7VmQnqIavUJSCRN+UT+BQ5mvQNJ6Gt41yEHcxjhg FZqn85QQFQTjQXF3LNkL0EjWn51lbOW/QdPNzToPOetx6ggULN45KinH9ENxivZN iygPFTwMuVKxVZzucumA/ar5IwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKT+9WrJ YQPRJrBhlM3E+dHSlcyKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTU4MkYyRkEx MjM5MTFFREFGRjJBOTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnv5wwDQYJKoZIhvcNAQELBQADggEBAA1pTb4OCHg+GLj2 EJ/Sw5oLzyAb3E/hcLJs9IPcVjB3fzCs6APcYrHikVaEKZ1xQH1vs97zl7QOlQwK q0j6FHeI5mmXQ2KrYockJtFbM6+3nOD9t+/DFwLUQC+Vj1D338Wof/QnuM8xWBZk NiJkoSVFB+1HPGhiQ146+5q9ZxvtCyax2s6mNUKd7DFCLdk/Cc/JBCplOe7AgSDo l2KY5+A9QgKFsV2apSXEg6GYa9nwVE7ClYnd2BXVV3oUme0uBv6IgzJBqVk64hV8 XbA9NyradRzFkfAC9blwmP/V5HJ77g/TjcAOqvSCnuqJIX2szMntNPHYbCwY2wcV uG4E3+o= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org