$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CF03518DEAB11EDA073FE18C4F9AE02.roa File: 5CF03518DEAB11EDA073FE18C4F9AE02.roa (raw, json) Hash identifier: qt7nY6xIsuC7wkbgsZnM/PkXCyMnJINCQmOeO/RUYKQ= Subject key identifier: 99:6C:28:B8:E9:2E:BE:8D:D5:38:75:FA:6A:7F:0D:4B:42:6C:99:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 727E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CF03518DEAB11EDA073FE18C4F9AE02.roa Signing time: Mon 22 May 2023 09:02:27 +0000 ROA not before: Mon 22 May 2023 09:02:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142519 IP address blocks: 103.170.58.0/23 maxlen: 24 2001:df2:3fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29310 (0x727e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 22 09:02:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646b2fa3-74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:3c:35:bb:f2:24:14:c6:af:72:e3:aa:8b: 3a:94:16:e0:84:2c:07:e8:54:ab:3a:b2:cf:c8:c7: bb:b3:5e:4f:8f:f9:23:7a:ed:18:ef:57:db:98:45: 58:68:eb:74:7a:de:ec:bf:d4:f6:f1:78:9d:69:52: 23:4e:cb:79:08:af:5b:37:1e:f7:37:98:88:cf:65: 5e:26:b3:e2:d5:54:6c:ad:b5:a2:65:4c:2f:ab:12: c5:38:c0:c0:f2:07:69:7e:a0:b1:cd:c5:64:19:00: 50:3b:dc:6f:01:41:c6:8c:31:4a:d7:a9:26:14:3d: dd:58:8a:fc:9a:80:a9:82:45:a2:f4:58:9f:e6:44: a9:0e:ad:4e:c4:5f:87:16:92:63:9b:16:e0:88:9f: f6:1b:7a:43:3e:31:46:ff:81:77:31:ad:fa:ef:e3: 01:91:56:be:32:96:59:45:5b:15:e1:5e:e7:18:a7: 18:7d:e9:23:a8:c1:20:55:02:3b:38:55:09:5c:33: 42:0e:bc:e7:b1:33:99:34:7b:f1:61:e4:c8:7c:8a: b7:07:23:7c:cc:04:97:73:69:47:d1:ba:df:01:64: ce:4b:af:62:73:63:50:6d:56:83:93:43:1e:bc:a2: 7e:35:c1:69:1f:7e:8b:8f:93:80:50:5f:06:bd:5a: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6C:28:B8:E9:2E:BE:8D:D5:38:75:FA:6A:7F:0D:4B:42:6C:99:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CF03518DEAB11EDA073FE18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.58.0/23 IPv6: 2001:df2:3fc0::/48 Signature Algorithm: sha256WithRSAEncryption 94:23:f1:36:34:62:77:c3:8e:f7:1b:ff:ec:f2:95:39:a0:09: a8:6d:3a:5b:5f:0b:6e:b0:29:15:fa:72:5f:ff:0d:e1:7d:74: c6:89:27:5b:79:7d:06:96:0d:03:8b:c3:46:6e:4f:ba:ca:33: 61:40:72:37:24:d7:fe:8d:b3:16:a8:57:34:a4:68:6d:bd:3a: 74:b6:8a:df:7e:be:b0:11:fa:08:f9:66:88:7d:a5:19:27:04: 01:43:53:af:0f:55:23:3c:99:0c:5d:d9:3f:75:b2:86:33:12: d3:1d:10:4b:66:e9:ec:ef:cb:77:36:ad:76:4c:d4:18:6e:5e: 18:69:2c:3e:fc:ef:1a:ce:45:c0:5d:59:4f:37:c4:aa:c1:7e: 79:f9:78:1a:f9:01:4a:5d:c1:f1:2d:f4:6f:7f:77:b0:31:26: b8:f4:c3:88:30:d6:f2:02:c3:13:e7:0e:3c:9e:55:6d:56:7a: 15:2b:d0:2c:99:e7:cf:d6:d9:40:a6:9e:cf:23:91:d5:f2:95: fa:a4:9d:3e:78:db:46:b0:c6:41:ad:63:18:85:76:40:52:f9: 67:a9:04:b3:13:8d:37:50:67:20:7b:1e:69:70:b8:49:47:0c: 95:05:a6:1d:7d:a0:77:fb:b7:12:cf:42:b0:fc:8d:8d:15:a1: 8d:19:d1:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTIyMDkwMjI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZiMmZhMy03NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfU8NbvyJBTGr3Ljqos6lBbghCwH6FSrOrLPyMe7s15Pj/kjeu0Y71fbmEVY aOt0et7sv9T28XidaVIjTst5CK9bNx73N5iIz2VeJrPi1VRsrbWiZUwvqxLFOMDA 8gdpfqCxzcVkGQBQO9xvAUHGjDFK16kmFD3dWIr8moCpgkWi9Fif5kSpDq1OxF+H FpJjmxbgiJ/2G3pDPjFG/4F3Ma367+MBkVa+MpZZRVsV4V7nGKcYfekjqMEgVQI7 OFUJXDNCDrznsTOZNHvxYeTIfIq3ByN8zASXc2lH0brfAWTOS69ic2NQbVaDk0Me vKJ+NcFpH36Lj5OAUF8GvVq1owIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJlsKLjp Lr6N1Th1+mp/DUtCbJncMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUNGMDM1MThE RUFCMTFFREEwNzNGRTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqjowDwQCAAIwCQMHACABDfI/wDANBgkqhkiG9w0BAQsF AAOCAQEAlCPxNjRid8OO9xv/7PKVOaAJqG06W18LbrApFfpyX/8N4X10xoknW3l9 BpYNA4vDRm5PusozYUByNyTX/o2zFqhXNKRobb06dLaK336+sBH6CPlmiH2lGScE AUNTrw9VIzyZDF3ZP3WyhjMS0x0QS2bp7O/LdzatdkzUGG5eGGksPvzvGs5FwF1Z TzfEqsF+efl4GvkBSl3B8S30b393sDEmuPTDiDDW8gLDE+cOPJ5VbVZ6FSvQLJnn z9bZQKaezyOR1fKV+qSdPnjbRrDGQa1jGIV2QFL5Z6kEsxONN1BnIHseaXC4SUcM lQWmHX2gd/u3Es9CsPyNjRWhjRnRyA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org