$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CE9CFDA8F5811EEA41E4D2EC4F9AE02.roa File: 5CE9CFDA8F5811EEA41E4D2EC4F9AE02.roa (raw, json) Hash identifier: AGnEWYEjxJ4ppo3aZg2DGrc4UOtf2NTdQVx2eH24YT4= Subject key identifier: D1:DB:CA:A1:82:7C:92:58:C5:64:AC:45:87:CE:68:40:25:49:79:51 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CE9CFDA8F5811EEA41E4D2EC4F9AE02.roa Signing time: Thu 30 Nov 2023 08:17:36 +0000 ROA not before: Thu 30 Nov 2023 08:17:36 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150039 IP address blocks: 103.29.62.0/23 maxlen: 24 2001:df2:240::/48 maxlen: 48 2001:df2:241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32528 (0x7f10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 30 08:17:36 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65684520-5b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:a9:07:cc:a6:2d:e8:f3:cd:d5:af:a0:1a: 1a:7e:98:4c:b4:54:5b:73:dc:de:79:42:24:09:3f: b8:c4:7f:e4:46:aa:30:04:5b:30:31:f6:0b:7e:78: 29:df:e0:6a:69:68:da:b9:b8:48:c7:16:31:42:3c: ad:6f:20:b1:57:7b:91:90:40:12:df:46:00:45:0f: a6:04:83:df:cb:92:e7:a4:08:c4:f0:d0:14:85:19: 85:17:57:c1:db:72:c9:47:56:b3:6a:14:c2:60:53: 8a:59:39:86:25:5f:df:da:11:f8:84:d2:c6:08:08: 90:ce:48:9d:67:2c:2b:e4:af:2d:76:f7:7e:dc:09: 52:33:dd:24:a1:ed:f6:5a:6c:17:18:8c:be:ae:38: da:3d:71:d2:19:dc:ae:ac:78:73:fe:e7:72:a8:e7: 27:98:4d:ef:7f:b9:4e:26:56:26:d8:91:a0:3b:80: 8d:69:56:4c:9f:43:61:1d:1b:16:a1:65:26:5d:c6: 6e:49:10:fe:d7:4f:a5:9d:55:98:bb:b6:06:3e:43: 91:87:13:7e:43:d6:aa:7c:ea:09:8a:dd:43:4e:0d: 3c:de:f5:c4:ed:03:16:ce:53:01:bc:c6:51:0f:62: d3:14:1a:bb:cf:15:cd:1b:33:d3:40:a2:fb:d3:64: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:CA:A1:82:7C:92:58:C5:64:AC:45:87:CE:68:40:25:49:79:51 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CE9CFDA8F5811EEA41E4D2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.62.0/23 IPv6: 2001:df2:240::/47 Signature Algorithm: sha256WithRSAEncryption 1b:55:55:a9:c6:ea:f2:be:92:54:f8:34:af:06:7b:5f:a4:07: 8c:93:9d:27:49:a6:4d:61:6e:fa:4a:e3:be:aa:2f:ea:f0:9d: 67:f2:fc:2b:d3:99:57:11:0e:71:ff:38:67:21:a7:7a:dc:a5: 16:63:f7:ee:c3:a6:0e:79:8c:e6:a8:58:1d:51:07:93:bc:01: 39:5e:2b:26:a6:69:72:89:12:98:c8:a3:71:40:27:e7:e1:fd: d4:e9:25:eb:a8:9f:12:24:5d:4d:ac:57:a6:ba:06:e4:9e:a2: 81:3a:c9:b9:d0:fc:e2:ee:3a:86:90:ad:9b:32:80:e3:3d:16: ea:a8:00:19:c9:38:36:c0:b6:51:25:ce:cf:7e:38:26:8c:03: 87:09:45:65:fe:a1:28:a5:cc:4a:3e:90:cd:71:63:ef:bd:f9: 25:41:8b:94:f7:bf:4f:16:46:05:09:f3:17:f9:6c:f8:97:d5: a1:16:e2:11:f1:ac:00:b0:a6:66:02:32:10:f7:1c:a7:c8:e8: 17:fa:5e:9a:ae:a2:fa:7e:3c:6b:83:16:88:94:97:59:11:6f: c4:b2:16:31:ed:b2:f8:77:8a:37:40:69:de:4d:98:0f:6c:95: 47:a5:10:88:76:bc:49:03:75:b3:81:62:5b:d2:24:ec:6a:10: 94:ab:26:ef -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTMwMDgxNzM2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4NDUyMC01YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AepB8ymLejzzdWvoBoafphMtFRbc9zeeUIkCT+4xH/kRqowBFswMfYLfngp 3+BqaWjaubhIxxYxQjytbyCxV3uRkEAS30YARQ+mBIPfy5LnpAjE8NAUhRmFF1fB 23LJR1azahTCYFOKWTmGJV/f2hH4hNLGCAiQzkidZywr5K8tdvd+3AlSM90koe32 WmwXGIy+rjjaPXHSGdyurHhz/udyqOcnmE3vf7lOJlYm2JGgO4CNaVZMn0NhHRsW oWUmXcZuSRD+10+lnVWYu7YGPkORhxN+Q9aqfOoJit1DTg083vXE7QMWzlMBvMZR D2LTFBq7zxXNGzPTQKL702RABwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNHbyqGC fJJYxWSsRYfOaEAlSXlRMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUNFOUNGREE4 RjU4MTFFRUE0MUU0RDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnHT4wDwQCAAIwCQMHASABDfICQDANBgkqhkiG9w0BAQsF AAOCAQEAG1VVqcbq8r6SVPg0rwZ7X6QHjJOdJ0mmTWFu+krjvqov6vCdZ/L8K9OZ VxEOcf84ZyGnetylFmP37sOmDnmM5qhYHVEHk7wBOV4rJqZpcokSmMijcUAn5+H9 1Okl66ifEiRdTaxXproG5J6igTrJudD84u46hpCtmzKA4z0W6qgAGck4NsC2USXO z344JowDhwlFZf6hKKXMSj6QzXFj7735JUGLlPe/TxZGBQnzF/ls+JfVoRbiEfGs ALCmZgIyEPccp8joF/pemq6i+n48a4MWiJSXWRFvxLIWMe2y+HeKN0Bp3k2YD2yV R6UQiHa8SQN1s4FiW9Ik7GoQlKsm7w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org