$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E876AF4BDCF11EA8755D90DC4F9AE02.roa File: 5E876AF4BDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: RArEiJaYeonJDLa+K8sZ0d/qNErneIm1HmYSgWOXenI= Subject key identifier: F8:DF:FC:3C:B2:7F:66:82:83:3C:10:83:48:7B:5C:8C:16:F3:7A:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E876AF4BDCF11EA8755D90DC4F9AE02.roa Signing time: Wed 10 May 2023 16:30:20 +0000 ROA not before: Wed 10 May 2023 16:30:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138749 IP address blocks: 103.137.172.0/24 maxlen: 24 103.141.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28067 (0x6da3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc69b-18e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:85:28:ed:5f:3d:f2:00:5f:98:db:e3:bf: 87:30:1e:61:80:9c:4f:2d:aa:da:56:3d:71:45:08: 88:69:67:f7:76:77:ce:c0:08:59:01:cd:54:07:91: 81:6f:1d:e4:48:b1:05:d3:34:83:e6:dc:6e:f1:c7: ba:d2:ea:7b:42:2c:c8:39:5a:8d:3d:4d:1e:ae:9f: 77:f9:b5:9f:b4:e1:d5:f7:f7:1b:ed:de:78:e9:d4: c7:9f:ba:ed:1d:f7:5d:74:80:8b:7f:79:d6:0a:b6: 27:b9:7f:31:b8:ed:27:f3:78:e0:3a:41:45:d4:5d: 75:f8:33:74:94:26:6d:b1:fe:70:be:4b:59:c5:54: b2:81:3c:ad:36:90:53:c4:9a:08:70:38:a8:87:a2: ad:cd:1d:e0:1c:6c:a5:67:83:f8:77:c5:d9:d7:dd: 3a:95:f7:c7:d9:bf:25:50:c4:d3:b8:aa:9a:fc:00: 86:f9:91:f4:9f:f4:15:01:9f:66:f6:5d:c9:8f:b3: df:74:04:13:b1:10:45:10:b2:0c:3f:0c:d1:00:05: d0:60:75:5a:56:b4:a1:5e:19:81:02:88:6e:34:36: 2a:97:74:5b:d5:3a:b1:da:41:04:10:07:ee:de:b2: 35:17:4e:1a:73:a7:32:a0:cb:55:f7:12:0f:63:2d: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:FC:3C:B2:7F:66:82:83:3C:10:83:48:7B:5C:8C:16:F3:7A:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E876AF4BDCF11EA8755D90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.172.0/24 103.141.227.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:fb:38:18:8c:5c:55:bc:fd:60:2a:31:60:c5:37:47:c0:6c: 90:36:87:7d:21:15:e4:e7:41:db:64:b2:68:bd:af:55:2d:c1: ad:ff:72:62:56:e3:de:54:e6:cf:5c:33:27:92:f3:ba:56:ec: 33:10:e9:a2:73:aa:27:c5:89:3c:cc:af:5f:80:ad:c6:9f:8c: 43:e0:55:a5:2c:f8:4b:eb:9c:42:bd:96:9e:10:5a:54:48:b5: f4:b4:e6:3b:1a:8e:90:69:41:36:f9:d0:18:e1:d6:e6:1a:90: 9a:f0:35:d5:84:63:3a:90:52:83:cc:f9:0c:90:e4:e2:33:2c: 42:07:9b:c3:ac:2f:44:83:47:8b:12:92:95:67:e0:2c:4a:9b: c5:0e:ee:73:d2:24:f8:96:c9:38:b0:18:33:64:a4:03:ca:db: bd:a2:94:83:2e:2a:e8:be:58:81:9d:5e:ba:0c:5c:6a:81:dd: ed:2a:66:8b:03:63:d1:91:54:65:c4:d0:16:b2:a2:78:bf:62: 83:d2:e1:d5:6f:2d:62:35:8f:c3:8d:1b:a4:e2:1e:68:a8:7d: 5d:97:48:e5:b3:57:cb:84:7b:1b:56:2a:d2:6a:5a:b2:a1:22: 7c:b2:f6:a7:94:b1:7b:7c:6c:7c:ee:aa:7e:6b:59:73:f9:70: 9f:bd:44:8d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY5Yi0xOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKWFKO1fPfIAX5jb47+HMB5hgJxPLaraVj1xRQiIaWf3dnfOwAhZAc1UB5GB bx3kSLEF0zSD5txu8ce60up7QizIOVqNPU0erp93+bWftOHV9/cb7d546dTHn7rt HfdddICLf3nWCrYnuX8xuO0n83jgOkFF1F11+DN0lCZtsf5wvktZxVSygTytNpBT xJoIcDioh6KtzR3gHGylZ4P4d8XZ1906lffH2b8lUMTTuKqa/ACG+ZH0n/QVAZ9m 9l3Jj7PfdAQTsRBFELIMPwzRAAXQYHVaVrShXhmBAohuNDYql3Rb1Tqx2kEEEAfu 3rI1F04ac6cyoMtV9xIPYy0R5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPjf/Dyy f2aCgzwQg0h7XIwW83pBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUU4NzZBRjRC RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABniawDBABnjeMwDQYJKoZIhvcNAQELBQADggEBAHv7OBiM XFW8/WAqMWDFN0fAbJA2h30hFeTnQdtksmi9r1Utwa3/cmJW495U5s9cMyeS87pW 7DMQ6aJzqifFiTzMr1+ArcafjEPgVaUs+EvrnEK9lp4QWlRItfS05jsajpBpQTb5 0Bjh1uYakJrwNdWEYzqQUoPM+QyQ5OIzLEIHm8OsL0SDR4sSkpVn4CxKm8UO7nPS JPiWyTiwGDNkpAPK272ilIMuKui+WIGdXroMXGqB3e0qZosDY9GRVGXE0Bayoni/ YoPS4dVvLWI1j8ONG6TiHmiofV2XSOWzV8uEextWKtJqWrKhInyy9qeUsXt8bHzu qn5rWXP5cJ+9RI0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org