$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5985D0C81CDD11EBB88A0E68C4F9AE02.roa File: 5985D0C81CDD11EBB88A0E68C4F9AE02.roa (raw, json) Hash identifier: xSWUKZ4qwQ5wFnmE1cxrjTAukLabcQM0OepdlliuTYw= Subject key identifier: 7A:2D:90:82:B1:BF:17:32:35:D6:F8:90:87:5C:26:9A:FA:9E:E1:30 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C4E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5985D0C81CDD11EBB88A0E68C4F9AE02.roa Signing time: Wed 10 May 2023 16:23:54 +0000 ROA not before: Wed 10 May 2023 16:23:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136301 IP address blocks: 103.90.236.0/22 maxlen: 24 2001:df1:2900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27726 (0x6c4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc51a-2512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:8a:c2:a0:0d:66:17:71:bf:85:96:bd:93: fb:d3:35:f5:3d:95:9f:7d:4b:5f:31:f2:3b:47:53: f2:bd:f2:66:89:2e:7f:e5:07:68:43:23:e7:62:ca: e4:28:40:9d:a1:5a:66:1f:08:83:2c:f9:65:92:bf: f7:a1:01:e2:a9:bd:89:90:48:d9:de:7d:21:b9:46: 95:bc:51:79:b3:86:9e:64:6e:32:7b:30:0b:d2:e4: c0:96:b2:14:54:62:69:b3:ad:76:4d:da:b3:4f:cf: da:90:f3:be:fa:61:77:f2:f3:11:a8:d3:3b:b1:18: a5:19:8c:70:3e:94:78:a6:35:30:e2:8d:c0:44:0f: 56:5f:7f:5f:d1:3a:28:8a:78:b2:3b:eb:98:23:f2: 1f:d3:9e:01:02:de:f2:bf:e9:6c:ad:18:01:c6:12: db:af:69:a8:c4:e2:04:2d:8a:d4:d5:22:9e:0e:38: ee:22:e0:0b:52:1e:81:01:51:4f:ae:6f:eb:69:9a: 13:42:dd:01:f4:05:71:91:1d:8d:1b:01:53:e6:1d: 6b:0a:3a:a8:3c:e3:f0:90:b6:15:66:1b:c8:19:ac: ba:1e:59:11:2e:6c:bd:ac:80:8f:1a:81:18:ee:33: 4f:84:cc:38:9a:b7:a4:06:2f:e8:fb:1a:11:19:e4: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2D:90:82:B1:BF:17:32:35:D6:F8:90:87:5C:26:9A:FA:9E:E1:30 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5985D0C81CDD11EBB88A0E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.236.0/22 IPv6: 2001:df1:2900::/48 Signature Algorithm: sha256WithRSAEncryption 09:36:68:c9:3e:64:ef:eb:c9:e4:87:db:b1:6c:23:48:51:c8: ca:c7:20:52:43:cd:fe:6c:21:87:be:ec:c0:1e:37:af:ff:01: 6d:73:08:3e:05:dd:cb:c0:0e:7a:f9:a5:17:bb:77:b2:a4:20: ed:40:17:74:2b:94:36:2a:61:34:3d:44:08:80:46:76:fe:48: 36:4f:5e:0e:31:53:81:d0:4f:a1:08:f2:40:3e:0f:c8:5c:93: 9f:2c:99:16:65:e5:83:91:9f:db:2d:7c:31:6a:3b:13:c7:e4: eb:fe:c1:6c:59:dd:a3:f0:36:62:a4:b4:72:2d:91:b9:e0:9f: 36:f8:60:1b:f8:26:66:c0:b0:83:5b:83:02:28:91:83:3f:e4: ac:f5:c4:71:99:7a:61:cc:a8:55:07:5e:16:08:b6:b5:0a:18: c1:d6:ce:e0:7e:42:ce:04:9e:ae:95:a0:eb:68:2d:49:81:66: 31:b6:17:c0:5f:f4:84:e4:fb:ac:8b:64:b1:e6:b3:49:33:ca: 65:ad:19:d9:8c:b1:51:2e:32:47:c7:1d:16:47:d6:3c:0d:65: 50:67:60:c7:cf:8f:68:0f:54:4d:07:6b:77:06:dd:82:ba:fb: 19:a2:a6:79:68:b6:f8:9a:c7:73:5f:6f:26:e1:00:16:3f:55: a8:86:0d:f3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzUxYS0yNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5yKwqANZhdxv4WWvZP70zX1PZWffUtfMfI7R1PyvfJmiS5/5QdoQyPnYsrk KECdoVpmHwiDLPllkr/3oQHiqb2JkEjZ3n0huUaVvFF5s4aeZG4yezAL0uTAlrIU VGJps612TdqzT8/akPO++mF38vMRqNM7sRilGYxwPpR4pjUw4o3ARA9WX39f0Too iniyO+uYI/If054BAt7yv+lsrRgBxhLbr2moxOIELYrU1SKeDjjuIuALUh6BAVFP rm/raZoTQt0B9AVxkR2NGwFT5h1rCjqoPOPwkLYVZhvIGay6HlkRLmy9rICPGoEY 7jNPhMw4mrekBi/o+xoRGeSphQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHotkIKx vxcyNdb4kIdcJpr6nuEwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTk4NUQwQzgx Q0REMTFFQkI4OEEwRTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnWuwwDwQCAAIwCQMHACABDfEpADANBgkqhkiG9w0BAQsF AAOCAQEACTZoyT5k7+vJ5IfbsWwjSFHIyscgUkPN/mwhh77swB43r/8BbXMIPgXd y8AOevmlF7t3sqQg7UAXdCuUNiphND1ECIBGdv5INk9eDjFTgdBPoQjyQD4PyFyT nyyZFmXlg5Gf2y18MWo7E8fk6/7BbFndo/A2YqS0ci2RueCfNvhgG/gmZsCwg1uD AiiRgz/krPXEcZl6YcyoVQdeFgi2tQoYwdbO4H5CzgSerpWg62gtSYFmMbYXwF/0 hOT7rItkseazSTPKZa0Z2YyxUS4yR8cdFkfWPA1lUGdgx8+PaA9UTQdrdwbdgrr7 GaKmeWi2+JrHc19vJuEAFj9VqIYN8w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org