$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63378316BDD611EA97CDF72CC4F9AE02.roa File: 63378316BDD611EA97CDF72CC4F9AE02.roa (raw, json) Hash identifier: y9UVX2srL7gBww1YONIwKfrXUHpfnYMKkkeQiGdzyxc= Subject key identifier: 3F:11:29:17:53:02:BF:BA:71:5B:CB:A9:1D:92:A8:08:7E:C8:5F:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E04 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63378316BDD611EA97CDF72CC4F9AE02.roa Signing time: Wed 10 May 2023 16:32:08 +0000 ROA not before: Wed 10 May 2023 16:32:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139562 IP address blocks: 103.80.60.0/22 maxlen: 22 103.80.60.0/24 maxlen: 24 103.80.61.0/24 maxlen: 24 103.80.62.0/24 maxlen: 24 103.80.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28164 (0x6e04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:32:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc707-7401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:02:f7:4d:54:50:4a:0d:d1:ec:48:be:74: 88:cc:9d:1c:c9:65:e7:e1:ee:01:33:50:61:a0:9c: 9f:52:cc:be:94:10:11:ea:83:e4:24:8e:3e:7a:63: 4a:c1:8d:bc:c1:64:56:3d:e8:23:cc:38:1b:9a:a5: 0b:48:e5:0b:02:93:d1:b2:00:3c:b3:98:dc:99:97: 9a:e7:88:cb:ab:60:ed:d3:44:19:e3:3d:a8:53:ed: a8:e4:b0:ce:76:7a:8d:08:48:72:80:84:1f:20:f5: 59:11:b9:55:17:e1:bb:40:01:69:bf:06:9b:c5:d8: d0:df:16:40:2d:83:d4:ad:4f:5c:75:c1:41:25:1c: cf:2f:e5:b3:6d:da:30:c0:67:b2:aa:9f:4a:f7:0e: 2e:0b:7e:c8:7a:a1:fc:22:b3:2a:b2:64:4b:df:9c: 46:71:25:4c:57:31:83:91:e0:d3:c0:0d:df:a5:fa: 65:20:4d:c8:a8:08:11:22:d5:c7:77:28:69:88:44: 23:be:47:63:db:ad:69:8d:0b:09:53:43:38:c3:b7: 27:d7:2c:b0:fb:49:2e:b6:f2:9f:6c:24:0a:f4:a6: c9:47:61:f5:8d:12:e0:a4:bc:08:28:29:48:1c:a1: aa:ec:e5:3e:4c:fc:fe:a2:42:4f:62:98:69:52:86: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:11:29:17:53:02:BF:BA:71:5B:CB:A9:1D:92:A8:08:7E:C8:5F:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63378316BDD611EA97CDF72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.60.0/22 Signature Algorithm: sha256WithRSAEncryption 38:17:f3:24:f4:88:2c:9a:0b:21:ca:36:4b:f7:e6:e8:66:d0: 85:45:c7:2a:f0:10:60:e5:8e:f9:98:a4:f5:98:fb:a2:b8:61: e9:b3:00:36:da:40:60:35:96:f9:ee:31:11:71:94:1e:45:43: c8:ff:56:24:5f:83:2e:66:0a:a4:f6:a0:47:db:ef:6e:13:ca: 20:de:8b:a9:8f:2e:12:4a:f7:d6:ef:2e:64:38:53:74:5f:fb: b1:3d:1d:3d:c9:4b:95:ec:b0:75:c6:10:f8:ca:fa:89:8b:d4: 5d:3a:d6:47:54:1b:15:57:4c:4d:8c:8a:e1:ce:76:e9:b8:de: 16:1a:66:fc:b6:0c:87:0c:c5:b6:bc:f0:ce:e0:a5:8a:a4:b6: 40:12:12:e9:7e:6e:78:4c:e9:29:12:e8:cf:05:82:76:cc:ca: 58:b4:6b:c8:9e:9d:07:57:f2:e0:51:92:b8:06:96:00:fb:70: 86:28:ea:b9:c0:55:39:29:19:1e:b4:33:da:17:54:b1:0d:08: e5:95:26:7d:f1:3c:c7:de:1c:ad:c8:ca:82:71:32:3a:12:1f: 4f:2e:d8:fb:74:fb:cc:1a:2e:40:eb:39:03:15:38:df:47:bf: 97:d2:75:ad:80:10:b9:06:96:a2:12:b3:04:47:c3:c4:17:ee: 36:2e:ad:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzcwNy03NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveIC901UUEoN0exIvnSIzJ0cyWXn4e4BM1BhoJyfUsy+lBAR6oPkJI4+emNK wY28wWRWPegjzDgbmqULSOULApPRsgA8s5jcmZea54jLq2Dt00QZ4z2oU+2o5LDO dnqNCEhygIQfIPVZEblVF+G7QAFpvwabxdjQ3xZALYPUrU9cdcFBJRzPL+Wzbdow wGeyqp9K9w4uC37IeqH8IrMqsmRL35xGcSVMVzGDkeDTwA3fpfplIE3IqAgRItXH dyhpiEQjvkdj261pjQsJU0M4w7cn1yyw+0kutvKfbCQK9KbJR2H1jRLgpLwIKClI HKGq7OU+TPz+okJPYphpUoYVGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD8RKRdT Ar+6cVvLqR2SqAh+yF+ZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjMzNzgzMTZC REQ2MTFFQTk3Q0RGNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnUDwwDQYJKoZIhvcNAQELBQADggEBADgX8yT0iCyaCyHK Nkv35uhm0IVFxyrwEGDljvmYpPWY+6K4YemzADbaQGA1lvnuMRFxlB5FQ8j/ViRf gy5mCqT2oEfb724TyiDei6mPLhJK99bvLmQ4U3Rf+7E9HT3JS5XssHXGEPjK+omL 1F061kdUGxVXTE2MiuHOdum43hYaZvy2DIcMxba88M7gpYqktkASEul+bnhM6SkS 6M8FgnbMyli0a8ienQdX8uBRkrgGlgD7cIYo6rnAVTkpGR60M9oXVLENCOWVJn3x PMfeHK3IyoJxMjoSH08u2Pt0+8waLkDrOQMVON9Hv5fSda2AELkGlqISswRHw8QX 7jYuraQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org