$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEA9AAE311111EEBD5AF65EC4F9AE02.roa File: 5DEA9AAE311111EEBD5AF65EC4F9AE02.roa (raw, json) Hash identifier: 4va4vegljyqY1lgDpHvIFvobLG8A5P57WBTHNchY4IY= Subject key identifier: 31:5F:81:FD:CA:9D:56:A1:F3:28:57:1A:F4:87:29:EE:4D:60:BE:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 76BB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEA9AAE311111EEBD5AF65EC4F9AE02.roa Signing time: Wed 02 Aug 2023 08:48:36 +0000 ROA not before: Wed 02 Aug 2023 08:48:36 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147256 IP address blocks: 103.176.162.0/23 maxlen: 24 2001:df0:11c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30395 (0x76bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 2 08:48:36 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ca1863-be44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:ed:4c:da:e7:dd:20:cf:26:9b:45:f5:9f: 19:b8:40:fc:f7:3b:a7:08:d0:27:be:52:96:58:36: 6d:1b:70:a3:e6:70:62:b1:33:81:fe:9d:f8:01:df: 72:36:85:33:91:55:f2:e9:63:64:de:20:c4:f5:51: 23:aa:83:9b:e7:a3:a1:58:87:0f:44:59:19:ed:59: d4:1f:11:2d:1f:a6:68:f6:aa:b7:fd:02:42:9f:04: ec:f9:e4:03:48:b2:73:9a:1a:b0:8d:df:eb:71:fd: 7c:d6:57:39:17:86:89:79:9d:87:2a:76:cc:56:bf: 93:49:6a:3f:9d:be:5e:5c:0f:95:2d:30:55:de:b7: 78:99:70:4d:9c:5c:a1:03:11:29:5a:9d:30:6e:93: 47:6e:1e:3a:46:5f:2f:47:ae:3b:3c:85:74:fe:a5: d2:c8:51:ba:fd:2e:f1:57:30:e0:e9:0a:e1:02:64: 9f:e4:40:66:b7:1e:3d:0f:53:46:61:62:e2:63:a7: 8c:3f:5a:0e:a6:56:be:21:85:a9:75:91:45:8a:92: dc:a4:03:e8:d3:3c:7c:24:3f:62:19:10:4c:a3:8b: 1a:1c:3b:d0:ba:74:66:7b:96:b9:a6:d1:74:13:d7: e4:b2:a1:98:1a:54:63:b9:dd:53:63:06:af:72:62: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:81:FD:CA:9D:56:A1:F3:28:57:1A:F4:87:29:EE:4D:60:BE:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEA9AAE311111EEBD5AF65EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.162.0/23 IPv6: 2001:df0:11c0::/48 Signature Algorithm: sha256WithRSAEncryption ba:c3:46:bb:b9:64:11:60:5b:dd:f3:d9:69:a2:65:47:50:e1: 01:6a:aa:9d:f7:69:a6:52:91:da:2c:24:44:dd:1d:a9:11:ce: 18:bb:52:69:8d:40:54:6e:27:1c:c7:db:6e:84:69:a3:29:80: ab:bd:09:bf:dd:3f:e1:1b:71:67:a6:92:6b:ec:3e:1e:f2:f5: b1:7c:06:68:3a:cc:59:52:bc:57:44:5d:b0:b2:b5:18:13:c7: 0f:84:16:fc:47:33:f2:77:74:3e:51:d4:80:9c:be:e6:f6:47: 02:eb:fd:d7:93:39:e2:da:b9:fd:de:39:af:c5:b0:82:db:01: 50:12:7a:41:fa:b4:a5:e1:2b:49:89:86:fd:01:7a:26:4e:04: d4:c6:0b:6f:6b:77:66:ac:54:83:94:fa:0d:0f:f1:5b:a0:0b: bf:4f:ea:d2:2c:f1:04:bb:03:b1:7d:89:32:99:dd:4f:4d:1c: 10:34:ed:40:91:80:7e:86:c3:ea:0a:54:71:56:60:90:5a:d3: 1a:19:f3:d9:68:d7:09:12:0f:7c:33:40:4c:25:36:3f:02:d8: d2:c5:fc:55:51:74:cf:21:31:8c:4e:78:fe:88:a4:f5:4f:aa: 37:26:6e:5e:7b:bf:7e:38:23:ec:fe:25:96:26:c5:c5:9e:43: df:72:71:39 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODAyMDg0ODM2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhMTg2My1iZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmntTNrn3SDPJptF9Z8ZuED89zunCNAnvlKWWDZtG3Cj5nBisTOB/p34Ad9y NoUzkVXy6WNk3iDE9VEjqoOb56OhWIcPRFkZ7VnUHxEtH6Zo9qq3/QJCnwTs+eQD SLJzmhqwjd/rcf181lc5F4aJeZ2HKnbMVr+TSWo/nb5eXA+VLTBV3rd4mXBNnFyh AxEpWp0wbpNHbh46Rl8vR647PIV0/qXSyFG6/S7xVzDg6QrhAmSf5EBmtx49D1NG YWLiY6eMP1oOpla+IYWpdZFFipLcpAPo0zx8JD9iGRBMo4saHDvQunRme5a5ptF0 E9fksqGYGlRjud1TYwavcmJCIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDFfgf3K nVah8yhXGvSHKe5NYL4UMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNURFQTlBQUUz MTExMTFFRUJENUFGNjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsKIwDwQCAAIwCQMHACABDfARwDANBgkqhkiG9w0BAQsF AAOCAQEAusNGu7lkEWBb3fPZaaJlR1DhAWqqnfdpplKR2iwkRN0dqRHOGLtSaY1A VG4nHMfbboRpoymAq70Jv90/4RtxZ6aSa+w+HvL1sXwGaDrMWVK8V0RdsLK1GBPH D4QW/Ecz8nd0PlHUgJy+5vZHAuv915M54tq5/d45r8WwgtsBUBJ6Qfq0peErSYmG /QF6Jk4E1MYLb2t3ZqxUg5T6DQ/xW6ALv0/q0izxBLsDsX2JMpndT00cEDTtQJGA fobD6gpUcVZgkFrTGhnz2WjXCRIPfDNATCU2PwLY0sX8VVF0zyExjE54/oik9U+q NyZuXnu/fjgj7P4llibFxZ5D33JxOQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org