$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BBE3704DCB211ECAC801F6EC4F9AE02.roa File: 5BBE3704DCB211ECAC801F6EC4F9AE02.roa (raw, json) Hash identifier: 2GteMHOYoi/b1c6Awvlx5Aj3mp/Doo41gnCBAYUcIyE= Subject key identifier: 51:B2:46:2E:5F:30:1C:03:9F:42:A0:B8:1B:74:30:F6:B6:AB:A8:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70A1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BBE3704DCB211ECAC801F6EC4F9AE02.roa Signing time: Wed 10 May 2023 16:44:29 +0000 ROA not before: Wed 10 May 2023 16:44:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149617 IP address blocks: 103.185.242.0/23 maxlen: 24 2001:df1:1640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28833 (0x70a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9ec-05a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:2b:b7:22:ed:af:d7:ef:78:b1:ba:e0:3a: f1:43:c4:58:bc:2f:f1:11:0e:bf:13:fa:7f:fe:cf: f0:33:12:01:62:f9:21:27:b7:b8:95:e4:6f:be:52: 34:6e:34:aa:de:b0:3b:05:b3:a3:03:0d:21:8d:b8: 26:8a:50:15:62:8b:03:a5:f5:0d:6d:98:bb:97:84: 1e:2b:00:89:7a:61:71:48:19:8a:14:a5:aa:fb:26: b5:78:f8:62:9a:2c:00:70:f0:7d:fa:b5:da:e7:42: d6:76:f9:1a:54:52:a1:72:a1:51:6a:07:36:a0:36: d6:94:08:eb:45:37:03:c6:83:32:83:d1:1d:57:55: 22:bf:56:9c:35:ab:05:41:ee:d8:18:62:da:01:2d: 92:eb:2b:23:06:49:25:eb:32:da:1b:2c:f0:0b:a2: 2b:86:e1:38:c9:e9:28:5a:5e:a8:9b:6c:5f:b8:12: 8f:41:7b:73:72:cd:cf:06:c4:75:c8:c8:81:50:f9: f6:dd:b3:02:56:89:a6:98:ef:78:af:ea:65:62:84: 9b:a1:06:c0:3f:b5:7a:71:25:00:21:58:59:e6:26: e5:1c:20:2d:a8:ec:10:ff:c1:31:07:d4:1e:48:c2: 0b:33:de:0c:c9:64:d3:fd:19:2b:6c:46:9c:26:d1: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:46:2E:5F:30:1C:03:9F:42:A0:B8:1B:74:30:F6:B6:AB:A8:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BBE3704DCB211ECAC801F6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.242.0/23 IPv6: 2001:df1:1640::/48 Signature Algorithm: sha256WithRSAEncryption 41:b7:9a:0e:92:33:6b:3c:95:d4:b2:e8:1c:3a:4b:57:53:4c: 8a:79:0f:29:04:0b:e4:86:08:6a:1a:33:3f:92:ce:f3:fe:52: dd:61:f7:7d:84:ab:52:6b:e3:db:42:13:b1:1e:41:35:e8:ab: a1:c1:07:e0:d1:04:bc:92:87:2e:77:55:22:92:5b:c5:ba:85: cf:b7:19:8a:87:e6:98:2f:8d:ef:2b:1b:cb:d4:13:43:12:d0: 02:43:b8:77:ed:30:1e:ed:68:04:3a:b3:5b:1d:d6:0c:05:4b: 78:2c:13:ed:6f:26:ab:38:28:22:3e:64:c9:3e:ab:6f:6c:91: 61:88:7d:b1:f5:75:36:c0:60:c6:72:58:44:93:bb:f5:5f:c8: 0e:65:d9:40:d3:2a:b1:02:4a:b6:7f:76:82:c7:59:13:92:ec: 0a:1a:84:22:81:fa:84:49:89:63:4b:62:4f:7b:80:50:d9:b1: 2d:06:cd:c8:e2:e9:4e:7c:75:83:d3:f4:92:68:64:13:bc:66: 02:64:2e:78:be:28:fb:26:60:c5:50:c3:5a:9c:a1:26:e0:c6: 5a:19:ca:65:10:1e:ee:5c:f2:94:0b:3f:2b:d4:bd:9a:8a:60: d5:75:02:35:65:98:ba:8f:28:5c:48:df:35:39:7f:17:96:34: b7:34:07:de -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzllYy0wNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucUrtyLtr9fveLG64DrxQ8RYvC/xEQ6/E/p//s/wMxIBYvkhJ7e4leRvvlI0 bjSq3rA7BbOjAw0hjbgmilAVYosDpfUNbZi7l4QeKwCJemFxSBmKFKWq+ya1ePhi miwAcPB9+rXa50LWdvkaVFKhcqFRagc2oDbWlAjrRTcDxoMyg9EdV1Uiv1acNasF Qe7YGGLaAS2S6ysjBkkl6zLaGyzwC6IrhuE4yekoWl6om2xfuBKPQXtzcs3PBsR1 yMiBUPn23bMCVommmO94r+plYoSboQbAP7V6cSUAIVhZ5iblHCAtqOwQ/8ExB9Qe SMILM94MyWTT/RkrbEacJtF/KQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFGyRi5f MBwDn0KguBt0MPa2q6j9MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUJCRTM3MDRE Q0IyMTFFQ0FDODAxRjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnufIwDwQCAAIwCQMHACABDfEWQDANBgkqhkiG9w0BAQsF AAOCAQEAQbeaDpIzazyV1LLoHDpLV1NMinkPKQQL5IYIahozP5LO8/5S3WH3fYSr Umvj20ITsR5BNeirocEH4NEEvJKHLndVIpJbxbqFz7cZiofmmC+N7ysby9QTQxLQ AkO4d+0wHu1oBDqzWx3WDAVLeCwT7W8mqzgoIj5kyT6rb2yRYYh9sfV1NsBgxnJY RJO79V/IDmXZQNMqsQJKtn92gsdZE5LsChqEIoH6hEmJY0tiT3uAUNmxLQbNyOLp Tnx1g9P0kmhkE7xmAmQueL4o+yZgxVDDWpyhJuDGWhnKZRAe7lzylAs/K9S9mopg 1XUCNWWYuo8oXEjfNTl/F5Y0tzQH3g== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:22 2024 by rpki-client on console-fra.rpki-client.org