$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61DF064ED25311ED922D7209C4F9AE02.roa File: 61DF064ED25311ED922D7209C4F9AE02.roa (raw, json) Hash identifier: TkiVewBzampJzLuqk0TC+HfB8bnyhW6JxHWILG/qCBU= Subject key identifier: B9:BC:81:DF:35:A6:17:5D:18:5C:AD:EA:24:7E:9D:BF:F7:A3:9E:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7035 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61DF064ED25311ED922D7209C4F9AE02.roa Signing time: Wed 10 May 2023 16:42:30 +0000 ROA not before: Wed 10 May 2023 16:42:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149222 IP address blocks: 103.179.104.0/23 maxlen: 24 2001:df1:6c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28725 (0x7035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc975-1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:1c:37:ce:89:0a:c5:2e:b3:32:c6:72:4a: e5:18:b7:7d:0e:1f:a7:3b:51:53:d3:39:1b:53:6f: 3c:2b:c6:1e:be:09:9b:5c:81:54:27:e9:38:d3:67: 34:5e:36:01:47:55:ca:0e:a0:33:4a:a8:e6:3f:f5: 6c:5a:29:1d:01:ab:d2:06:9d:5b:4e:04:9c:60:3d: 17:e1:9d:32:9e:b7:5c:13:40:70:4b:8a:39:f9:1d: 1f:0b:9a:df:a1:28:d4:41:43:82:7f:7b:45:08:99: ed:08:42:fc:b7:58:8b:4c:da:86:b6:55:f1:e3:17: 67:04:92:bf:c4:2f:41:b6:6a:5d:aa:e9:4e:5c:78: bd:0c:d5:8d:e2:89:60:e8:cc:9a:ff:f8:a2:b3:04: c7:a4:d8:73:51:2a:49:37:2d:0e:c8:05:74:58:69: 1f:77:a4:f9:e7:c3:a6:14:dd:da:40:3a:76:a3:ca: fa:56:18:dd:8f:b4:d5:b9:07:84:72:fe:f2:80:c0: 94:cf:b1:05:85:ac:b1:7c:08:80:07:46:64:67:c9: 17:1d:fb:d6:11:5b:5c:2a:74:b7:39:cb:02:44:09: d7:35:de:94:32:85:42:7d:a5:0a:f9:a9:89:6b:41: b6:a2:45:03:e8:e7:90:27:b6:2d:b4:69:cb:ee:a4: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BC:81:DF:35:A6:17:5D:18:5C:AD:EA:24:7E:9D:BF:F7:A3:9E:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61DF064ED25311ED922D7209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.104.0/23 IPv6: 2001:df1:6c40::/48 Signature Algorithm: sha256WithRSAEncryption 73:80:e4:75:b5:ca:80:4c:db:fc:2a:01:ed:46:e8:85:e4:fd: b1:14:8f:38:e4:2f:ad:b8:8f:6f:2f:90:d7:06:c5:a7:e4:83: 29:20:0c:9c:e1:ac:44:80:c9:c1:cd:80:15:1e:98:7f:d9:a4: 68:5f:3f:00:0d:b9:51:93:8c:88:fc:e6:d7:b7:7f:69:34:87: 32:a8:f4:de:fd:63:af:8c:32:ec:d6:56:9b:0d:2b:11:72:99: 43:a1:79:49:19:15:c6:c6:00:d2:3e:8a:0f:1e:91:1d:4c:0b: 84:5e:b5:00:c2:42:88:ef:6d:13:f8:7c:13:95:fe:73:ba:c1: 8d:6a:9f:6e:26:a4:a5:5f:1f:22:53:b0:7a:26:d7:f4:ad:79: c6:69:ef:0f:aa:8a:c9:af:6b:6b:ec:32:48:d1:36:03:41:18: 30:cd:d0:ae:17:e1:bf:6b:62:ce:c9:a1:91:7f:32:ba:af:04: 4e:bb:6d:bf:e4:d2:6b:3b:57:cf:57:9b:38:c3:a9:fc:da:d7: 14:a8:20:e9:3c:01:8b:46:cd:b2:e0:4c:a9:45:39:80:e4:f3: 07:9c:51:e9:1d:37:49:d0:a9:0c:ed:69:81:30:85:00:5d:99: 1a:7f:c4:0c:3c:db:54:68:23:12:bc:8b:32:08:bc:d3:00:96: 97:5c:ef:5e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjMwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk3NS0xY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RIcN86JCsUuszLGckrlGLd9Dh+nO1FT0zkbU288K8YevgmbXIFUJ+k402c0 XjYBR1XKDqAzSqjmP/VsWikdAavSBp1bTgScYD0X4Z0ynrdcE0BwS4o5+R0fC5rf oSjUQUOCf3tFCJntCEL8t1iLTNqGtlXx4xdnBJK/xC9BtmpdqulOXHi9DNWN4olg 6Mya//iiswTHpNhzUSpJNy0OyAV0WGkfd6T558OmFN3aQDp2o8r6Vhjdj7TVuQeE cv7ygMCUz7EFhayxfAiAB0ZkZ8kXHfvWEVtcKnS3OcsCRAnXNd6UMoVCfaUK+amJ a0G2okUD6OeQJ7YttGnL7qTcLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLm8gd81 phddGFyt6iR+nb/3o57cMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjFERjA2NEVE MjUzMTFFRDkyMkQ3MjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFns2gwDwQCAAIwCQMHACABDfFsQDANBgkqhkiG9w0BAQsF AAOCAQEAc4DkdbXKgEzb/CoB7UboheT9sRSPOOQvrbiPby+Q1wbFp+SDKSAMnOGs RIDJwc2AFR6Yf9mkaF8/AA25UZOMiPzm17d/aTSHMqj03v1jr4wy7NZWmw0rEXKZ Q6F5SRkVxsYA0j6KDx6RHUwLhF61AMJCiO9tE/h8E5X+c7rBjWqfbiakpV8fIlOw eibX9K15xmnvD6qKya9ra+wySNE2A0EYMM3Qrhfhv2tizsmhkX8yuq8ETrttv+TS aztXz1ebOMOp/NrXFKgg6TwBi0bNsuBMqUU5gOTzB5xR6R03SdCpDO1pgTCFAF2Z Gn/EDDzbVGgjEryLMgi80wCWl1zvXg== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:23 2024 by rpki-client on console-fra.rpki-client.org