$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6439D6689E2C11EDABD7A684C4F9AE02.roa File: 6439D6689E2C11EDABD7A684C4F9AE02.roa (raw, json) Hash identifier: LCtNkHMYgy76s15nqWGpjuUB9DYx6XS43RkYMzWXwnA= Subject key identifier: D0:B7:AC:1A:B1:30:43:01:61:C9:9D:43:C0:13:F0:BC:52:5E:19:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7102 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6439D6689E2C11EDABD7A684C4F9AE02.roa Signing time: Wed 10 May 2023 16:46:12 +0000 ROA not before: Wed 10 May 2023 16:46:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150574 IP address blocks: 103.163.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28930 (0x7102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca54-5654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:02:b5:b6:75:94:dd:16:e8:5d:c5:c7:46: 05:c0:15:8a:d0:7d:cf:f6:e1:35:4d:80:73:7d:5f: e1:0d:02:dc:fe:c5:08:8c:74:e2:f5:f7:e3:e4:d5: fe:54:14:f2:3c:78:06:b2:52:7a:85:9d:8b:76:a0: 74:43:ba:20:11:bb:5d:84:f3:d6:91:b9:dc:7f:e7: 01:35:ab:e2:be:ef:1e:8c:36:a4:09:5b:9d:5d:b5: 4a:6e:54:d9:86:00:42:29:d8:5f:09:80:f0:4c:4d: 0e:25:7b:27:da:87:c7:e0:45:99:c6:d8:ae:b5:20: 37:31:41:e4:c2:8f:df:0b:69:c0:f4:07:66:5b:c3: 5a:21:5b:31:aa:7e:6d:9a:14:13:cb:16:d4:99:80: a5:cc:05:b2:e5:94:d3:dc:05:6e:ab:86:b4:22:ff: d0:1d:71:8b:00:bd:2b:55:84:a5:1b:00:0a:f6:30: 7e:33:8e:34:e7:e8:07:6f:6b:ad:fe:9f:dc:86:76: aa:3e:83:9d:84:d5:18:0e:44:9b:ac:f4:38:40:31: 40:97:05:83:29:79:a7:1b:23:96:f4:5e:8d:2c:fe: 81:52:d6:21:f8:0d:f3:68:40:97:03:6b:61:f6:ee: 6c:d4:8f:0e:2a:0e:fb:0a:d9:fb:51:aa:19:bd:ab: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B7:AC:1A:B1:30:43:01:61:C9:9D:43:C0:13:F0:BC:52:5E:19:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6439D6689E2C11EDABD7A684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.98.0/23 Signature Algorithm: sha256WithRSAEncryption 38:a7:30:42:23:e1:49:9c:e4:f1:89:e9:20:a6:fa:7b:6a:c5: e3:36:89:e5:16:e9:2d:1d:fe:38:df:bd:55:1c:28:89:81:21: 91:b0:d3:12:2f:b8:4c:db:5f:74:f7:a5:aa:31:d9:5f:c8:49: 53:b9:20:4d:e3:7e:cc:ef:9c:c3:a1:6c:cb:e9:15:71:c2:1d: 8c:f3:d4:10:c9:eb:7f:9c:10:50:9e:a7:d2:4f:81:ee:0a:52: 5a:2d:71:48:c2:ac:43:81:75:0b:41:8c:95:ce:c5:a9:0e:62: f7:49:b1:eb:22:ed:21:d4:af:64:f6:cf:bc:be:00:a0:94:5d: 7a:3c:e9:c3:5e:a2:1b:93:58:23:c0:cb:13:df:54:00:e2:36: 3c:9f:c5:0a:a3:ec:3a:a9:5c:69:3d:9f:d1:81:f1:64:b1:48: 65:2d:20:ca:6b:38:ae:a9:12:eb:4b:e6:77:c4:b2:bf:df:67: e2:4b:72:f9:a9:ee:31:ed:b5:6c:0e:ee:25:8a:40:5a:4a:57: 9e:5b:37:c9:99:c4:7f:4d:ad:5f:43:4d:84:8a:34:33:bf:90: 9c:70:96:58:e7:ca:03:c0:83:ff:c1:d9:4e:97:ad:ad:23:ea: b2:ac:8d:43:1f:15:12:22:2c:73:42:ec:5d:63:0f:e8:36:89: d6:bd:2f:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E1NC01NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl4CtbZ1lN0W6F3Fx0YFwBWK0H3P9uE1TYBzfV/hDQLc/sUIjHTi9ffj5NX+ VBTyPHgGslJ6hZ2LdqB0Q7ogEbtdhPPWkbncf+cBNavivu8ejDakCVudXbVKblTZ hgBCKdhfCYDwTE0OJXsn2ofH4EWZxtiutSA3MUHkwo/fC2nA9AdmW8NaIVsxqn5t mhQTyxbUmYClzAWy5ZTT3AVuq4a0Iv/QHXGLAL0rVYSlGwAK9jB+M4405+gHb2ut /p/chnaqPoOdhNUYDkSbrPQ4QDFAlwWDKXmnGyOW9F6NLP6BUtYh+A3zaECXA2th 9u5s1I8OKg77Ctn7UaoZvavraQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNC3rBqx MEMBYcmdQ8AT8LxSXhm0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjQzOUQ2Njg5 RTJDMTFFREFCRDdBNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFno2IwDQYJKoZIhvcNAQELBQADggEBADinMEIj4Umc5PGJ 6SCm+ntqxeM2ieUW6S0d/jjfvVUcKImBIZGw0xIvuEzbX3T3paox2V/ISVO5IE3j fszvnMOhbMvpFXHCHYzz1BDJ63+cEFCep9JPge4KUlotcUjCrEOBdQtBjJXOxakO YvdJsesi7SHUr2T2z7y+AKCUXXo86cNeohuTWCPAyxPfVADiNjyfxQqj7DqpXGk9 n9GB8WSxSGUtIMprOK6pEutL5nfEsr/fZ+JLcvmp7jHttWwO7iWKQFpKV55bN8mZ xH9NrV9DTYSKNDO/kJxwlljnygPAg//B2U6Xra0j6rKsjUMfFRIiLHNC7F1jD+g2 ida9L2w= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org