$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57AC699EA2B711EDB06B6D65C4F9AE02.roa File: 57AC699EA2B711EDB06B6D65C4F9AE02.roa (raw, json) Hash identifier: pcyYCDZEI/qZ2jiXtUww0wBCqIPum5zNYn6g1LwWNMI= Subject key identifier: 1A:33:45:0C:9D:E2:4E:5D:E1:92:FA:2B:B3:70:41:E5:31:51:63:42 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BAF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57AC699EA2B711EDB06B6D65C4F9AE02.roa Signing time: Wed 10 May 2023 16:20:53 +0000 ROA not before: Wed 10 May 2023 16:20:53 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135242 IP address blocks: 103.69.238.0/24 maxlen: 24 103.69.239.0/24 maxlen: 24 103.213.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27567 (0x6baf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:53 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc464-ebed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:a1:5b:dd:e6:7f:bb:c7:cf:d4:ac:a2:72: 56:33:3e:4d:a5:f4:89:34:61:e8:f3:8f:89:70:be: 82:17:b2:1b:f3:9c:c0:5e:b1:6b:61:d1:7d:60:93: 93:bb:a6:6f:20:ca:96:dc:38:eb:25:e9:7a:78:8c: a1:db:7f:91:21:ba:81:27:c2:18:62:33:d9:0f:44: 71:f1:48:f5:9f:9c:91:04:8d:4c:64:a4:fd:44:64: 6e:80:f1:86:04:fc:86:87:8f:74:fb:f3:95:eb:01: 98:e1:2b:89:c3:88:fd:bd:bb:09:ba:b5:14:b0:cb: f2:f4:50:c6:e2:8b:82:ea:cd:a4:01:18:3c:39:69: fb:f5:ee:85:91:2e:2c:6e:f8:28:35:d3:bf:fa:cc: 9c:0d:00:d8:08:f6:79:bb:23:06:75:d1:25:bd:46: e7:08:17:fe:6d:c0:63:01:3d:96:52:98:fe:c2:25: 9a:74:bd:e5:8f:ed:d7:25:09:fb:42:3e:3b:0c:92: 94:8d:50:d7:5b:0b:22:15:b5:80:ea:51:56:76:a8: 73:24:d4:9c:a1:a1:2c:80:48:e0:9b:0b:bc:a4:2f: ed:5b:db:a4:6c:34:e6:7a:ed:09:7e:ea:72:b5:47: 09:72:a2:1b:be:37:d1:f9:d4:6b:74:df:d9:1c:d3: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:45:0C:9D:E2:4E:5D:E1:92:FA:2B:B3:70:41:E5:31:51:63:42 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57AC699EA2B711EDB06B6D65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.238.0/23 103.213.208.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:9e:fa:d9:ed:5b:7e:ea:72:e0:c8:4e:39:6e:c2:82:3f:65: 75:0d:1b:59:42:f3:eb:e3:a8:f0:8d:c1:76:e2:8e:f3:b5:5a: 85:81:40:14:c8:dc:7f:28:94:e1:e4:3d:2f:da:a0:ff:59:d0: 2a:86:f1:d8:a3:07:89:77:ca:8d:89:9e:46:91:db:95:25:48: f7:76:41:58:90:7d:74:45:7d:41:e1:74:b1:33:1b:05:22:39: 9a:58:ac:8b:c9:11:f9:fa:d1:27:1a:f4:f6:ea:4a:0e:89:00: 66:3f:8d:57:3f:98:74:d2:21:9e:67:5e:e1:19:b4:cb:a9:6f: 57:41:7e:5b:7a:2b:d1:cc:2b:84:f6:04:33:f3:e2:3c:a7:a3: 19:dd:65:2d:9f:09:87:e4:f8:81:f3:ae:53:79:46:39:05:e1: 05:c8:e5:26:7b:d0:08:e8:2d:58:52:a4:8a:4c:5c:5d:f2:55: 1e:75:c6:0d:8d:17:d2:a7:0d:d9:6c:93:59:e3:22:10:4b:82: 6a:c8:61:6d:14:4b:5a:b8:e6:8a:8b:56:8e:fc:8a:53:56:d4: fc:12:83:2b:ca:79:95:a7:99:c6:73:02:15:97:f7:f8:0a:1b: 18:19:19:f9:91:a2:37:28:d3:79:f8:95:ae:40:98:23:e7:14: aa:11:c0:a0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDUzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ2NC1lYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07+hW93mf7vHz9SsonJWMz5NpfSJNGHo84+JcL6CF7Ib85zAXrFrYdF9YJOT u6ZvIMqW3DjrJel6eIyh23+RIbqBJ8IYYjPZD0Rx8Uj1n5yRBI1MZKT9RGRugPGG BPyGh490+/OV6wGY4SuJw4j9vbsJurUUsMvy9FDG4ouC6s2kARg8OWn79e6FkS4s bvgoNdO/+sycDQDYCPZ5uyMGddElvUbnCBf+bcBjAT2WUpj+wiWadL3lj+3XJQn7 Qj47DJKUjVDXWwsiFbWA6lFWdqhzJNScoaEsgEjgmwu8pC/tW9ukbDTmeu0Jfupy tUcJcqIbvjfR+dRrdN/ZHNMZbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBozRQyd 4k5d4ZL6K7NwQeUxUWNCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTdBQzY5OUVB MkI3MTFFREIwNkI2RDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnRe4DBAJn1dAwDQYJKoZIhvcNAQELBQADggEBAI6e+tnt W37qcuDITjluwoI/ZXUNG1lC8+vjqPCNwXbijvO1WoWBQBTI3H8olOHkPS/aoP9Z 0CqG8dijB4l3yo2JnkaR25UlSPd2QViQfXRFfUHhdLEzGwUiOZpYrIvJEfn60Sca 9PbqSg6JAGY/jVc/mHTSIZ5nXuEZtMupb1dBflt6K9HMK4T2BDPz4jynoxndZS2f CYfk+IHzrlN5RjkF4QXI5SZ70AjoLVhSpIpMXF3yVR51xg2NF9KnDdlsk1njIhBL gmrIYW0US1q45oqLVo78ilNW1PwSgyvKeZWnmcZzAhWX9/gKGxgZGfmRojco03n4 la5AmCPnFKoRwKA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org