$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57EE6DAE0E1611EBA01C3D7CC4F9AE02.roa File: 57EE6DAE0E1611EBA01C3D7CC4F9AE02.roa (raw, json) Hash identifier: iJzgLPGDXfLyC2bli4YENFdvyD9f2+43TEX8eQGz8FA= Subject key identifier: BB:EC:C2:2A:1E:2B:34:F8:AE:21:9E:42:D1:BD:97:3F:A7:43:D5:98 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B6B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57EE6DAE0E1611EBA01C3D7CC4F9AE02.roa Signing time: Wed 10 May 2023 16:19:35 +0000 ROA not before: Wed 10 May 2023 16:19:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134913 IP address blocks: 27.96.88.0/22 maxlen: 24 103.50.76.0/22 maxlen: 24 103.211.112.0/22 maxlen: 24 160.238.76.0/22 maxlen: 24 2402:57c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27499 (0x6b6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:35 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc417-92b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:03:4e:cf:b8:49:1e:25:d8:59:1b:7d:ad:b6: d2:43:de:cb:71:b3:25:2f:ea:ee:49:e5:bc:0d:41: 04:ee:88:90:1e:e7:d1:61:57:08:ed:de:64:aa:ba: 57:8e:30:f3:95:d8:d5:1e:0a:98:4c:2d:45:82:fc: 6d:bb:c1:17:b4:7b:dc:3c:b2:d7:2a:0a:21:e4:87: a9:ec:46:5c:1c:31:bd:54:ca:c9:1f:0e:72:03:79: a5:93:50:cb:97:21:a0:e2:e5:50:6d:d8:04:e6:0e: c2:3b:38:a1:7c:0d:5e:3f:ec:6e:de:51:ef:29:ba: f7:de:a5:ea:4d:fd:e2:80:ec:0c:54:2e:f3:63:78: d7:90:d9:bb:40:30:20:da:c9:7f:ca:45:ee:a4:78: 4e:6e:ac:35:67:b5:65:ed:6f:89:a9:f5:09:ed:ba: 40:5b:13:49:84:17:b3:2a:1e:12:ea:54:5f:be:6e: 3f:e4:a0:c6:00:89:37:a2:1b:d8:57:db:6a:10:95: 3e:98:10:39:1d:33:4f:1f:fb:be:9f:82:5d:52:79: 97:51:22:32:aa:99:d9:19:ca:dd:93:94:5d:1a:39: 26:1b:6f:f0:f9:e3:55:46:5d:1b:b0:e9:74:f5:7a: 5b:ce:15:d6:b5:0a:b0:22:2d:aa:ba:9f:ad:35:96: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:C2:2A:1E:2B:34:F8:AE:21:9E:42:D1:BD:97:3F:A7:43:D5:98 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/57EE6DAE0E1611EBA01C3D7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.96.88.0/22 103.50.76.0/22 103.211.112.0/22 160.238.76.0/22 IPv6: 2402:57c0::/32 Signature Algorithm: sha256WithRSAEncryption 94:4f:9c:47:cf:df:92:15:0c:a0:04:62:bc:f2:92:19:a8:56: 2e:96:38:45:4b:6a:d7:c6:c6:24:ff:45:27:d1:42:cf:a6:a2: b7:fb:99:ac:8c:2e:e5:2c:26:40:be:a5:f5:1e:9e:99:72:5e: 8e:e3:af:ab:65:53:b0:cd:8e:42:ec:a1:ee:30:f3:da:c1:06: e2:be:9e:b1:e9:db:25:37:36:7c:df:df:21:20:5c:8d:c2:75: a0:4f:2a:ba:7b:dd:3e:1f:b4:56:ac:72:34:e7:16:5a:5c:70: 58:36:26:e0:e7:76:52:d3:b1:03:0e:b8:ca:b6:ca:ba:50:31: e5:46:9b:3f:21:e6:e2:67:a3:f9:b9:50:df:bc:b3:61:5e:ac: 8a:1f:cd:eb:48:c6:73:30:40:2b:ce:4e:70:e4:e5:95:44:14: 0c:29:26:05:ab:62:92:98:d0:13:b1:af:16:dc:06:a3:ce:b4: fd:a7:c5:56:50:5d:ba:b8:26:3a:a7:fc:3d:b7:1c:1b:38:30: c1:32:ab:fc:25:23:27:68:b7:86:89:98:6d:68:53:2d:74:c0: 8b:ae:54:9a:98:02:7f:e3:90:23:13:d2:02:4a:77:67:f6:63: 8c:80:5d:41:dc:88:3a:59:10:fb:1b:a5:b6:bd:65:f5:e1:1a: 79:1d:ff:45 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICa2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQxNy05MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gNOz7hJHiXYWRt9rbbSQ97LcbMlL+ruSeW8DUEE7oiQHufRYVcI7d5kqrpX jjDzldjVHgqYTC1Fgvxtu8EXtHvcPLLXKgoh5Iep7EZcHDG9VMrJHw5yA3mlk1DL lyGg4uVQbdgE5g7COzihfA1eP+xu3lHvKbr33qXqTf3igOwMVC7zY3jXkNm7QDAg 2sl/ykXupHhObqw1Z7Vl7W+JqfUJ7bpAWxNJhBezKh4S6lRfvm4/5KDGAIk3ohvY V9tqEJU+mBA5HTNPH/u+n4JdUnmXUSIyqpnZGcrdk5RdGjkmG2/w+eNVRl0bsOl0 9XpbzhXWtQqwIi2qup+tNZY8ZwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLvswioe KzT4riGeQtG9lz+nQ9WYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTdFRTZEQUUw RTE2MTFFQkEwMUMzRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIbYFgDBAJnMkwDBAJn03ADBAKg7kwwDQQCAAIwBwMFACQC V8AwDQYJKoZIhvcNAQELBQADggEBAJRPnEfP35IVDKAEYrzykhmoVi6WOEVLatfG xiT/RSfRQs+morf7mayMLuUsJkC+pfUenplyXo7jr6tlU7DNjkLsoe4w89rBBuK+ nrHp2yU3Nnzf3yEgXI3CdaBPKrp73T4ftFascjTnFlpccFg2JuDndlLTsQMOuMq2 yrpQMeVGmz8h5uJno/m5UN+8s2FerIofzetIxnMwQCvOTnDk5ZVEFAwpJgWrYpKY 0BOxrxbcBqPOtP2nxVZQXbq4Jjqn/D23HBs4MMEyq/wlIydot4aJmG1oUy10wIuu VJqYAn/jkCMT0gJKd2f2Y4yAXUHciDpZEPsbpba9ZfXhGnkd/0U= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org