$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F88024A643B11EEA6A2FE2EC4F9AE02.roa File: 5F88024A643B11EEA6A2FE2EC4F9AE02.roa (raw, json) Hash identifier: wKFyBJ8j8KNiMw6d0goxbnMqObaQzW1XsubNxX+f0cI= Subject key identifier: 89:3C:C1:A9:60:40:BE:31:02:7E:5E:B8:66:15:3C:20:11:F1:D1:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7B61 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F88024A643B11EEA6A2FE2EC4F9AE02.roa Signing time: Fri 06 Oct 2023 11:27:47 +0000 ROA not before: Fri 06 Oct 2023 11:27:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141280 IP address blocks: 103.170.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31585 (0x7b61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 6 11:27:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=651fef32-3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:b5:aa:25:8c:0f:67:fb:bc:b6:8b:24:f7: ed:60:45:03:dc:b4:d0:1e:ef:ad:96:75:b7:a3:bb: e6:4e:02:a8:87:05:b8:4b:be:5f:65:79:d2:f9:3a: 76:39:02:5d:54:b2:e4:e7:7d:f3:8f:bd:57:a6:99: dc:76:77:7a:63:69:ef:28:47:9c:fb:05:08:ef:e6: e4:0e:ef:89:94:14:b0:12:93:c1:35:5f:41:fe:2a: 19:4c:fe:9a:cb:ae:ec:32:73:f0:f0:3d:c8:18:42: 7e:31:f5:da:4e:e8:dc:7e:43:78:54:c8:57:24:96: 59:85:e0:18:9a:28:ad:3b:d0:7b:e6:fd:2d:11:96: f9:f0:86:02:72:a1:28:43:4a:fb:f6:06:a4:91:cb: e3:f1:92:d0:43:8b:67:1b:63:8f:d5:ba:9c:f2:05: e1:1d:ec:30:87:15:1d:39:38:06:57:fd:ff:5b:df: 6d:bf:ff:b0:df:30:bf:e6:cf:d3:0b:76:1b:2f:56: 6c:d9:d6:d1:e3:22:4b:b6:ed:1c:d0:6c:a6:f9:88: ce:e1:69:bb:f9:2e:0f:b9:b6:76:56:48:65:c1:b2: 38:17:78:81:31:31:44:29:35:1f:3b:77:87:e9:d4: ba:34:10:4a:6d:0a:46:a5:14:15:41:b9:c2:71:5b: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3C:C1:A9:60:40:BE:31:02:7E:5E:B8:66:15:3C:20:11:F1:D1:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F88024A643B11EEA6A2FE2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.156.0/23 Signature Algorithm: sha256WithRSAEncryption 05:56:24:2a:65:03:51:e6:fa:37:58:15:e6:6a:72:3c:a9:68: 55:82:17:2b:ca:50:e0:a6:d7:f8:ab:1e:08:ee:6a:94:3a:a1: d3:0d:be:34:0f:07:f4:3d:4e:71:5d:4d:39:1c:d2:2c:8a:b4: fa:0b:d4:ed:6e:69:96:5e:00:46:ea:3b:6b:e8:d7:bb:e0:1b: 07:43:7b:9e:4d:54:33:83:8e:96:3b:4a:2f:d1:80:50:b5:44: 33:7c:a6:36:d9:79:93:d8:55:07:ec:61:81:41:9b:bf:87:59: 4d:43:0b:3c:00:c7:94:b2:5c:38:cd:4a:77:20:f1:04:c9:3f: ef:3c:3b:e9:f6:dc:19:ef:7f:d0:8b:02:49:5f:21:b5:72:09: 79:0c:95:bf:7f:66:17:be:ad:2b:5a:37:bc:d8:16:5a:16:17: 55:39:e7:f3:91:76:ba:ca:0a:03:19:bc:f2:15:62:d2:e5:9a: d4:8e:ba:39:77:8d:04:88:68:0b:96:ef:c3:43:50:1e:23:38: 83:2b:5a:bf:b6:eb:d0:b9:dd:9f:7b:22:94:5c:71:e4:df:90: 1d:6f:24:2d:37:50:ba:a1:ec:80:3d:d6:c0:4b:2f:16:6d:8d: c3:72:d6:bc:08:cb:48:b7:c1:83:96:f7:93:96:01:52:19:36: ab:26:d5:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICe2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDA2MTEyNzQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFmZWYzMi0zNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+K1qiWMD2f7vLaLJPftYEUD3LTQHu+tlnW3o7vmTgKohwW4S75fZXnS+Tp2 OQJdVLLk533zj71Xppncdnd6Y2nvKEec+wUI7+bkDu+JlBSwEpPBNV9B/ioZTP6a y67sMnPw8D3IGEJ+MfXaTujcfkN4VMhXJJZZheAYmiitO9B75v0tEZb58IYCcqEo Q0r79gakkcvj8ZLQQ4tnG2OP1bqc8gXhHewwhxUdOTgGV/3/W99tv/+w3zC/5s/T C3YbL1Zs2dbR4yJLtu0c0Gym+YjO4Wm7+S4PubZ2VkhlwbI4F3iBMTFEKTUfO3eH 6dS6NBBKbQpGpRQVQbnCcVtcmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIk8walg QL4xAn5euGYVPCAR8dFnMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUY4ODAyNEE2 NDNCMTFFRUE2QTJGRTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqpwwDQYJKoZIhvcNAQELBQADggEBAAVWJCplA1Hm+jdY FeZqcjypaFWCFyvKUOCm1/irHgjuapQ6odMNvjQPB/Q9TnFdTTkc0iyKtPoL1O1u aZZeAEbqO2vo17vgGwdDe55NVDODjpY7Si/RgFC1RDN8pjbZeZPYVQfsYYFBm7+H WU1DCzwAx5SyXDjNSncg8QTJP+88O+n23Bnvf9CLAklfIbVyCXkMlb9/Zhe+rSta N7zYFloWF1U55/ORdrrKCgMZvPIVYtLlmtSOujl3jQSIaAuW78NDUB4jOIMrWr+2 69C53Z97IpRcceTfkB1vJC03ULqh7IA91sBLLxZtjcNy1rwIy0i3wYOW95OWAVIZ Nqsm1f0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org