$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa File: 5FBC0FC0137D11EB8F8D4341C4F9AE02.roa (raw, json) Hash identifier: 64eu1F/64wZfc4gdrh8MqgPWFUxcJo4wMOSRpoYFg+c= Subject key identifier: 3C:07:7B:56:4E:7A:8B:94:42:AF:4E:3C:42:50:47:7E:05:B3:F7:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71D0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa Signing time: Wed 10 May 2023 16:50:04 +0000 ROA not before: Wed 10 May 2023 16:50:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59179 IP address blocks: 27.100.24.0/22 maxlen: 24 103.44.96.0/22 maxlen: 24 103.188.46.0/23 maxlen: 24 203.112.152.0/22 maxlen: 24 2407:8e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29136 (0x71d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb3c-d62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:bd:e9:10:2a:03:43:17:61:ac:8e:01:c1: 18:23:ac:53:95:33:e6:bb:e1:68:3e:a7:d2:e3:ac: 2f:f4:95:20:0e:eb:b8:4e:20:48:00:9c:ac:2b:0b: ba:03:af:d5:fd:9e:63:ed:b0:c9:4d:72:70:b8:51: be:32:1a:66:14:30:a5:b0:b7:b0:bb:76:b1:c0:d5: 10:32:c8:53:2f:68:0a:9e:3d:b3:0d:7f:7a:ad:85: 88:78:af:db:d7:61:35:1b:c8:8f:77:6b:c1:cd:cd: f6:95:b7:c8:73:fc:da:05:c1:4e:67:d7:d4:52:0f: 5a:e3:1d:4a:9a:a3:2a:90:71:7c:78:15:e4:aa:2a: b2:cd:3e:e2:41:5f:18:77:66:81:6b:ec:4f:64:f7: 0c:7d:7f:b0:04:71:ad:f2:64:30:0d:0d:13:c6:2c: b9:5c:9a:07:5f:aa:50:8b:3e:5c:77:98:e0:94:bf: eb:3f:02:e7:7c:21:df:b5:e2:6b:84:76:f0:56:7d: 3f:3b:bf:b7:39:4c:e7:a5:37:cc:e3:b6:6d:d0:31: 89:07:f6:53:04:c6:10:8a:17:40:92:c4:d2:9a:fa: 66:a3:cb:10:4e:39:a7:ce:f0:de:63:ab:c4:ee:f9: 97:c2:5f:f7:a9:15:80:ad:6e:4a:7b:db:cd:d8:a8: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:7B:56:4E:7A:8B:94:42:AF:4E:3C:42:50:47:7E:05:B3:F7:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.24.0/22 103.44.96.0/22 103.188.46.0/23 203.112.152.0/22 IPv6: 2407:8e80::/32 Signature Algorithm: sha256WithRSAEncryption 4a:6a:fd:af:ef:ed:29:f5:73:58:25:1b:3a:1d:85:a1:15:94: 1f:aa:9e:7c:f7:43:88:ee:26:58:20:84:9c:bf:83:52:5f:2d: d5:52:b9:20:65:4e:65:dd:9e:5a:14:5c:cb:83:e6:6e:a3:85: 96:6d:d3:b4:bf:da:5b:9e:ec:2c:c6:6c:fd:e1:f4:5b:9f:80: 41:37:11:23:ac:31:5b:93:28:e1:93:35:b9:55:d3:b2:c4:d9: 93:b4:d7:97:af:4b:77:3d:4d:ee:40:9c:29:0c:4f:bc:4c:e1: f6:af:16:d8:58:9b:32:42:e3:41:ec:90:f4:1f:10:ac:61:e8: f3:74:f0:a1:4f:65:c1:79:11:3b:5e:51:37:20:9d:f3:4d:76: de:98:9a:cd:a0:4d:48:e7:3d:74:74:8f:3d:f5:be:ff:c4:ce: c1:6a:53:26:38:da:bb:3d:36:15:08:8b:7b:96:af:b2:c7:86: ac:2e:4a:b2:9a:62:51:1d:0b:7e:47:e2:f2:9a:11:db:17:5e: a7:ea:60:c2:4e:45:45:30:36:13:33:ac:74:7f:48:c5:96:78: 1e:c4:d6:6b:a2:e8:43:2b:70:ed:40:f1:74:09:69:0e:29:72: 23:53:f8:1d:c6:36:fe:16:50:ca:05:ad:f7:c0:c3:57:16:16: b1:ba:90:33 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICcdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IzYy1kNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3i96RAqA0MXYayOAcEYI6xTlTPmu+FoPqfS46wv9JUgDuu4TiBIAJysKwu6 A6/V/Z5j7bDJTXJwuFG+MhpmFDClsLewu3axwNUQMshTL2gKnj2zDX96rYWIeK/b 12E1G8iPd2vBzc32lbfIc/zaBcFOZ9fUUg9a4x1KmqMqkHF8eBXkqiqyzT7iQV8Y d2aBa+xPZPcMfX+wBHGt8mQwDQ0Txiy5XJoHX6pQiz5cd5jglL/rPwLnfCHfteJr hHbwVn0/O7+3OUznpTfM47Zt0DGJB/ZTBMYQihdAksTSmvpmo8sQTjmnzvDeY6vE 7vmXwl/3qRWArW5Ke9vN2Kh6iQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDwHe1ZO eouUQq9OPEJQR34Fs/cYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUZCQzBGQzAx MzdEMTFFQjhGOEQ0MzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIbZBgDBAJnLGADBAFnvC4DBALLcJgwDQQCAAIwBwMFACQH joAwDQYJKoZIhvcNAQELBQADggEBAEpq/a/v7Sn1c1glGzodhaEVlB+qnnz3Q4ju JlgghJy/g1JfLdVSuSBlTmXdnloUXMuD5m6jhZZt07S/2lue7CzGbP3h9FufgEE3 ESOsMVuTKOGTNblV07LE2ZO015evS3c9Te5AnCkMT7xM4favFthYmzJC40HskPQf EKxh6PN08KFPZcF5ETteUTcgnfNNdt6Yms2gTUjnPXR0jz31vv/EzsFqUyY42rs9 NhUIi3uWr7LHhqwuSrKaYlEdC35H4vKaEdsXXqfqYMJORUUwNhMzrHR/SMWWeB7E 1mui6EMrcO1A8XQJaQ4pciNT+B3GNv4WUMoFrffAw1cWFrG6kDM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org