$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa File: 60D330F4BDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: BDGjkTy1Fqo36SzAxw6lDNvOxUK/2YVR783cYapA75I= Subject key identifier: 03:D0:EB:6C:B4:C3:EE:C4:AB:43:07:8A:EA:89:FC:9F:16:A4:80:1A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DAA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa Signing time: Wed 10 May 2023 16:30:28 +0000 ROA not before: Wed 10 May 2023 16:30:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138759 IP address blocks: 103.140.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28074 (0x6daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6a3-0435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:80:80:6b:66:8b:ee:96:42:76:19:64:e4: 9f:29:75:d5:af:10:1c:35:1f:5f:bc:14:89:cb:7d: 81:49:85:b3:a5:26:ae:2b:25:a9:1c:49:77:b5:40: 28:e5:28:a2:e3:ae:32:0a:70:1b:8c:03:16:5b:aa: 92:d5:56:2d:29:93:44:43:f6:ac:fe:d6:22:10:0f: b7:dc:a2:7c:c2:f1:df:80:07:1f:10:c5:d8:c3:c6: d4:18:bf:ea:48:90:d0:b0:91:f3:8d:f9:04:f7:d7: db:55:c8:d7:f1:4e:eb:cf:7a:26:51:e2:2a:db:8c: 8e:43:cb:30:b1:36:ef:64:6e:e4:ea:1a:25:bc:c4: 55:3e:b6:b5:31:23:00:8a:58:f5:da:49:60:cc:f6: 62:03:8e:2a:d1:15:92:e5:fe:85:4d:d2:13:6d:c9: 09:44:cd:8e:eb:0b:37:99:2a:43:14:75:c6:d2:b3: 1f:40:bf:d0:4e:94:87:d8:56:03:e4:fa:2c:51:cb: 6c:fe:19:5d:1c:b0:04:42:34:81:df:dc:dc:19:67: db:32:fd:fa:62:6e:4c:3e:ed:9c:c7:aa:97:4a:e2: 27:d4:bb:38:96:30:43:21:a2:62:62:32:d6:66:c8: 32:e6:b1:3e:5c:5e:07:dd:99:01:ae:4d:48:99:05: 7b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:EB:6C:B4:C3:EE:C4:AB:43:07:8A:EA:89:FC:9F:16:A4:80:1A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60D330F4BDCF11EA8755D90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.252.0/24 Signature Algorithm: sha256WithRSAEncryption a6:12:e8:61:d0:ca:80:f4:ff:46:d4:f3:47:d6:cb:13:90:50: 3b:ab:5e:f3:34:a8:6b:5f:58:26:f0:bc:c9:05:ed:84:44:e9: 37:6c:b3:9c:2e:af:75:e9:07:cd:66:ec:f1:3a:10:e7:77:34: 1b:40:1f:0f:f4:0f:84:6d:2e:c8:5c:68:76:cd:89:50:13:4c: 2a:37:f3:5f:d4:63:fb:69:7b:bf:fc:4a:55:e0:c8:55:ce:9c: 67:aa:dd:8a:e8:84:c7:5d:f0:00:32:4b:10:24:ba:5f:ad:49: 59:11:bc:5b:78:00:15:ee:e7:f5:4d:a0:41:fa:b5:46:9e:dd: f5:58:17:d3:c1:9a:12:9d:eb:db:7e:8b:e9:51:45:c0:92:95: 4c:03:07:55:31:e0:25:47:a0:d1:17:35:30:52:8f:fa:d3:3c: f7:c9:f2:fa:c0:fd:a3:e0:fb:92:00:7d:89:c0:d6:49:24:50: 9c:e3:c1:e9:8d:d2:83:9d:d5:29:a7:a7:73:f4:d9:81:cc:93: 88:57:a8:ca:de:5c:f1:52:d0:83:3a:90:32:1a:7f:ad:ec:66: ba:51:7a:f8:06:fe:e9:4d:4c:70:64:fe:c4:25:29:ec:df:1a: e3:e7:52:91:26:18:8a:69:68:f3:3f:9e:71:77:cb:09:ff:9c: df:cd:6f:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZhMy0wNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn26AgGtmi+6WQnYZZOSfKXXVrxAcNR9fvBSJy32BSYWzpSauKyWpHEl3tUAo 5Sii464yCnAbjAMWW6qS1VYtKZNEQ/as/tYiEA+33KJ8wvHfgAcfEMXYw8bUGL/q SJDQsJHzjfkE99fbVcjX8U7rz3omUeIq24yOQ8swsTbvZG7k6holvMRVPra1MSMA ilj12klgzPZiA44q0RWS5f6FTdITbckJRM2O6ws3mSpDFHXG0rMfQL/QTpSH2FYD 5PosUcts/hldHLAEQjSB39zcGWfbMv36Ym5MPu2cx6qXSuIn1Ls4ljBDIaJiYjLW Zsgy5rE+XF4H3ZkBrk1ImQV7WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAPQ62y0 w+7Eq0MHiuqJ/J8WpIAaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjBEMzMwRjRC RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjPwwDQYJKoZIhvcNAQELBQADggEBAKYS6GHQyoD0/0bU 80fWyxOQUDurXvM0qGtfWCbwvMkF7YRE6Tdss5wur3XpB81m7PE6EOd3NBtAHw/0 D4RtLshcaHbNiVATTCo381/UY/tpe7/8SlXgyFXOnGeq3YrohMdd8AAySxAkul+t SVkRvFt4ABXu5/VNoEH6tUae3fVYF9PBmhKd69t+i+lRRcCSlUwDB1Ux4CVHoNEX NTBSj/rTPPfJ8vrA/aPg+5IAfYnA1kkkUJzjwemN0oOd1Smnp3P02YHMk4hXqMre XPFS0IM6kDIaf63sZrpRevgG/ulNTHBk/sQlKezfGuPnUpEmGIppaPM/nnF3ywn/ nN/Nb2k= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org