$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604ADDA6BDD611EA97CDF72CC4F9AE02.roa File: 604ADDA6BDD611EA97CDF72CC4F9AE02.roa (raw, json) Hash identifier: zBoj1Tb2Son99fo+DmDymUNiDKURpArKIIE0rbmgIMI= Subject key identifier: A4:0A:A8:A9:6D:60:1C:10:93:FC:10:4E:87:36:B0:75:E5:11:11:CA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C75 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604ADDA6BDD611EA97CDF72CC4F9AE02.roa Signing time: Wed 10 May 2023 16:24:37 +0000 ROA not before: Wed 10 May 2023 16:24:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136362 IP address blocks: 103.90.180.0/22 maxlen: 24 103.143.186.0/23 maxlen: 24 2001:df2:bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27765 (0x6c75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc544-47ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:0a:37:15:79:25:9e:66:0e:95:d2:6c:32: c7:62:41:bb:1c:70:37:fe:62:00:eb:8a:46:ec:ce: 6f:86:6e:37:80:be:f5:f2:31:69:0f:ca:f3:f0:74: 5d:49:60:f3:e3:f8:d0:e7:ed:b3:47:10:f7:1b:74: d6:3c:c4:80:fa:2c:d2:77:06:9d:75:7c:1d:5b:22: 88:7e:eb:74:e7:ef:18:10:aa:39:29:c1:9d:35:35: 72:98:e1:fe:b9:67:89:bd:96:8c:62:d1:e6:67:64: 1e:87:9e:fd:47:6d:34:35:a0:4e:2b:44:7a:ac:83: 76:8a:7d:80:f6:7e:5b:66:34:c3:ed:60:30:ae:a7: 0c:7f:29:62:bf:46:f8:71:3a:d8:dd:a5:76:0f:f9: c3:6e:38:f1:5d:76:89:27:ba:f3:6f:d5:e3:d6:17: 81:ee:09:47:3a:b6:8e:ff:33:52:94:24:86:b2:39: 9b:bb:08:d2:ad:ee:d8:85:63:a5:aa:fa:7c:bc:54: 0e:db:79:2e:b4:e3:5f:30:0a:ac:26:2e:1c:cf:08: 45:cc:a5:d9:b9:bc:53:08:39:51:88:00:ba:dc:96: 5e:55:cd:9e:4b:69:d2:61:de:1d:68:b9:10:2b:cf: a6:09:31:98:48:8b:63:4b:fb:91:f1:00:f4:66:51: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0A:A8:A9:6D:60:1C:10:93:FC:10:4E:87:36:B0:75:E5:11:11:CA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604ADDA6BDD611EA97CDF72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.180.0/22 103.143.186.0/23 IPv6: 2001:df2:bc0::/48 Signature Algorithm: sha256WithRSAEncryption 46:c4:82:23:65:35:ea:ab:7c:67:56:e1:e8:1b:96:e8:14:dd: 02:f7:8c:74:05:13:f8:3f:64:86:b0:9a:49:f6:44:de:5c:37: d8:b6:93:66:1f:0c:81:02:36:b7:0f:88:42:fd:cf:59:ba:ec: f5:20:5c:14:4c:0c:d9:76:43:20:a2:32:d8:e5:4f:81:91:d9: 97:06:a8:aa:32:93:7d:fd:da:e8:5b:86:fb:e7:c6:5f:d1:fe: 96:0a:6b:c8:9c:5b:10:1c:f9:71:ba:7b:fe:8c:30:38:c3:92: 20:f1:76:2b:03:94:14:99:07:91:08:db:7e:98:2f:42:f0:5d: 66:18:b4:76:a7:5c:a7:46:4f:26:99:0a:77:e8:98:9a:2b:4a: 44:34:fa:f2:44:5c:6b:04:be:88:0c:31:e3:1f:a0:9e:d8:84: be:51:ae:f3:98:55:06:f3:c8:95:67:70:a7:ea:f7:35:c9:27: e3:1f:8b:ad:e1:43:9a:22:8a:19:b1:c5:ff:0e:91:cd:ad:15: 31:2e:88:71:f1:3a:99:23:6f:9a:74:88:71:ee:5a:86:4e:3c: 4f:55:68:75:9d:92:ad:1f:13:b3:34:0f:26:4b:ae:b6:98:98: 57:10:1f:ae:d9:d4:57:d0:f2:f0:ea:fd:ea:c6:85:51:10:93: d8:f2:35:80 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU0NC00N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/oKNxV5JZ5mDpXSbDLHYkG7HHA3/mIA64pG7M5vhm43gL718jFpD8rz8HRd SWDz4/jQ5+2zRxD3G3TWPMSA+izSdwaddXwdWyKIfut05+8YEKo5KcGdNTVymOH+ uWeJvZaMYtHmZ2Qeh579R200NaBOK0R6rIN2in2A9n5bZjTD7WAwrqcMfyliv0b4 cTrY3aV2D/nDbjjxXXaJJ7rzb9Xj1heB7glHOraO/zNSlCSGsjmbuwjSre7YhWOl qvp8vFQO23kutONfMAqsJi4czwhFzKXZubxTCDlRiAC63JZeVc2eS2nSYd4daLkQ K8+mCTGYSItjS/uR8QD0ZlF5LQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKQKqKlt YBwQk/wQToc2sHXlERHKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjA0QUREQTZC REQ2MTFFQTk3Q0RGNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnWrQDBAFnj7owDwQCAAIwCQMHACABDfILwDANBgkqhkiG 9w0BAQsFAAOCAQEARsSCI2U16qt8Z1bh6BuW6BTdAveMdAUT+D9khrCaSfZE3lw3 2LaTZh8MgQI2tw+IQv3PWbrs9SBcFEwM2XZDIKIy2OVPgZHZlwaoqjKTff3a6FuG ++fGX9H+lgpryJxbEBz5cbp7/owwOMOSIPF2KwOUFJkHkQjbfpgvQvBdZhi0dqdc p0ZPJpkKd+iYmitKRDT68kRcawS+iAwx4x+gntiEvlGu85hVBvPIlWdwp+r3Nckn 4x+LreFDmiKKGbHF/w6Rza0VMS6IcfE6mSNvmnSIce5ahk48T1VodZ2SrR8TszQP JkuutpiYVxAfrtnUV9Dy8Or96saFURCT2PI1gA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org