$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BA00047A1B11EE91851116C4F9AE02.roa File: 66BA00047A1B11EE91851116C4F9AE02.roa (raw, json) Hash identifier: 7wiG5CNu+gxOvIpVTuyDaHDaAe4a9bCkTSzHRBXbUPI= Subject key identifier: 18:6E:18:70:E4:7D:24:D8:CF:63:AC:B9:93:DC:13:2A:38:D1:67:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7D12 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BA00047A1B11EE91851116C4F9AE02.roa Signing time: Fri 03 Nov 2023 07:34:20 +0000 ROA not before: Fri 03 Nov 2023 07:34:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134866 IP address blocks: 103.119.192.0/24 maxlen: 24 103.119.193.0/24 maxlen: 24 103.119.194.0/24 maxlen: 24 103.119.195.0/24 maxlen: 24 2403:49c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32018 (0x7d12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 3 07:34:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6544a27c-9363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:59:ba:1d:c5:19:4f:08:d6:44:fa:08:15: d1:bd:ec:2b:bc:96:3e:04:66:6c:a7:06:4a:4a:40: 86:55:3e:6d:65:ba:8c:38:0b:37:82:c9:e6:04:c0: f0:19:1b:20:50:ba:df:8b:c1:9e:8a:00:95:6d:6c: f0:6f:33:4b:21:43:ae:46:99:89:cc:6f:98:f1:13: f2:11:53:89:a5:ce:ae:db:6e:cd:57:b6:fa:64:16: f8:86:48:ff:e9:85:ad:95:47:d2:86:59:93:a4:72: ca:1a:1e:f2:3b:65:b0:35:fb:57:5d:ee:cf:06:c8: 90:47:3c:01:eb:f6:e2:f5:26:b3:02:2e:dc:75:01: 0a:7d:d9:29:35:3f:28:eb:5f:ba:4e:a9:ea:a3:8b: 88:2a:e6:17:17:21:bd:63:5c:7b:35:d4:e9:58:f8: 6a:18:30:b7:56:0f:b3:51:56:ce:fd:17:4f:5d:48: 41:16:7b:fa:98:b9:5b:be:7c:14:fe:11:0a:67:d3: b9:43:19:18:ed:30:3e:66:83:06:cb:ba:8a:c0:c4: 97:5d:88:3c:9c:c0:04:1c:9e:df:2b:d7:7c:3a:af: eb:47:fc:df:66:7c:2d:63:b1:7c:65:16:7e:b8:28: c3:ff:6d:e8:25:0c:b3:31:44:92:73:40:8c:7d:4a: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:18:70:E4:7D:24:D8:CF:63:AC:B9:93:DC:13:2A:38:D1:67:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66BA00047A1B11EE91851116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.192.0/22 IPv6: 2403:49c0::/32 Signature Algorithm: sha256WithRSAEncryption 60:ad:eb:19:e6:43:89:61:86:18:5f:92:75:7f:b4:57:4a:7e: 53:87:7a:09:ac:39:00:7f:6a:d6:7b:22:43:2c:c3:c9:a9:28: e6:06:00:38:23:19:02:01:01:4e:b7:47:7f:07:c2:91:8c:15: 0d:6b:f9:56:40:0a:71:4d:8e:a0:c5:9f:12:64:e2:5a:d4:25: 16:b4:26:bf:a1:8f:22:5e:ed:f7:e0:b6:1a:cb:2f:85:29:9b: 7a:73:96:18:e9:ea:42:3f:5a:9f:44:51:f0:5d:41:18:d3:72: 2f:e4:9d:0f:27:87:21:a1:7b:56:9e:c7:b4:9b:87:57:a7:c8: e3:8d:b9:12:07:c4:12:f8:aa:1d:d8:69:00:31:ac:17:da:df: 92:54:c9:c0:9f:69:03:cd:25:a2:09:f3:ba:5d:3d:b3:94:70: 51:2f:fa:be:06:1a:cb:ed:02:0a:14:fd:1a:86:af:5b:10:33: ce:1e:58:44:ad:a8:e5:1a:69:96:53:9b:e5:51:22:1c:94:a9: 57:27:70:fc:de:c6:39:6b:77:09:cb:ab:71:90:b8:1f:53:70: 5a:1a:80:93:a2:22:9e:c2:54:44:0c:c3:6b:69:3f:bb:6a:66: 89:0c:e2:42:51:6c:3f:c2:3e:04:55:bf:ed:c3:4f:c2:3b:b8: 6d:2f:3c:6b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICfRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTAzMDczNDIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0YTI3Yy05MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDdZuh3FGU8I1kT6CBXRvewrvJY+BGZspwZKSkCGVT5tZbqMOAs3gsnmBMDw GRsgULrfi8GeigCVbWzwbzNLIUOuRpmJzG+Y8RPyEVOJpc6u227NV7b6ZBb4hkj/ 6YWtlUfShlmTpHLKGh7yO2WwNftXXe7PBsiQRzwB6/bi9SazAi7cdQEKfdkpNT8o 61+6Tqnqo4uIKuYXFyG9Y1x7NdTpWPhqGDC3Vg+zUVbO/RdPXUhBFnv6mLlbvnwU /hEKZ9O5QxkY7TA+ZoMGy7qKwMSXXYg8nMAEHJ7fK9d8Oq/rR/zfZnwtY7F8ZRZ+ uCjD/23oJQyzMUSSc0CMfUqkIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBhuGHDk fSTYz2OsuZPcEyo40Wf/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjZCQTAwMDQ3 QTFCMTFFRTkxODUxMTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnd8AwDQQCAAIwBwMFACQDScAwDQYJKoZIhvcNAQELBQAD ggEBAGCt6xnmQ4lhhhhfknV/tFdKflOHegmsOQB/atZ7IkMsw8mpKOYGADgjGQIB AU63R38HwpGMFQ1r+VZACnFNjqDFnxJk4lrUJRa0Jr+hjyJe7ffgthrLL4Upm3pz lhjp6kI/Wp9EUfBdQRjTci/knQ8nhyGhe1aex7Sbh1enyOONuRIHxBL4qh3YaQAx rBfa35JUycCfaQPNJaIJ87pdPbOUcFEv+r4GGsvtAgoU/RqGr1sQM84eWEStqOUa aZZTm+VRIhyUqVcncPzexjlrdwnLq3GQuB9TcFoagJOiIp7CVEQMw2tpP7tqZokM 4kJRbD/CPgRVv+3DT8I7uG0vPGs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org