$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa File: 675BE610FD6611EAB965EC15C4F9AE02.roa (raw, json) Hash identifier: SAHmEuFB/dymWSW3RgjifRwZqF3Ngl4ddRu+ssSYoes= Subject key identifier: 2F:B2:37:FB:D8:2D:FC:15:8D:E6:88:C4:ED:9C:0F:3F:F3:73:78:4D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa Signing time: Wed 10 May 2023 16:15:33 +0000 ROA not before: Wed 10 May 2023 16:15:33 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133658 IP address blocks: 103.148.119.0/24 maxlen: 24 2001:df0:8640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27289 (0x6a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:15:33 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc325-c2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:7a:cf:2d:3c:95:5f:f7:7c:6d:70:f7:89: 49:8b:1b:d7:54:f8:16:88:f8:19:24:f8:bc:d8:ac: 1a:6d:86:b9:79:40:08:8a:fc:60:4f:a8:5a:54:35: 3d:b9:14:cc:95:56:de:5d:f5:32:f9:46:e5:e6:29: 35:cc:37:49:10:12:0c:09:8a:bb:b7:09:5d:8e:b2: 21:62:44:5f:49:31:55:13:b9:64:bf:61:92:97:2b: ce:05:5d:f5:b1:93:6b:f9:72:ba:98:3d:84:10:92: aa:f2:80:4f:9d:99:a9:0a:26:01:be:1a:73:92:ec: 62:76:0a:e3:93:76:de:dc:c5:e7:c9:0e:77:53:27: dc:cf:00:ca:b0:a1:6a:ff:ba:f5:1d:c6:24:9d:76: 6d:e8:99:d6:3a:12:47:18:38:d1:39:97:c6:7c:1f: d4:86:7b:0e:5a:b7:72:38:c1:9d:4b:ce:21:3f:11: 05:77:54:8f:f8:0a:da:f5:62:e2:d1:15:06:ad:01: c9:57:e9:a0:ac:72:73:68:db:7a:f4:5e:00:37:1b: e9:a5:91:8c:f2:67:66:75:7f:53:96:19:6f:c4:6b: a3:df:2d:5c:91:11:fc:00:68:39:50:e1:60:3e:9e: de:d3:c1:86:a9:76:d7:e6:35:92:df:8f:8a:8c:8f: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:37:FB:D8:2D:FC:15:8D:E6:88:C4:ED:9C:0F:3F:F3:73:78:4D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.119.0/24 IPv6: 2001:df0:8640::/48 Signature Algorithm: sha256WithRSAEncryption 91:72:b6:b8:13:84:27:7b:f6:6c:6b:ce:5a:2e:a7:62:0d:af: fb:26:44:ed:19:09:1a:96:33:2e:79:7b:81:42:74:06:b7:0e: db:78:cd:d6:28:a1:c6:b5:58:e4:c7:72:4d:1f:ad:9b:07:75: 37:24:07:8e:c0:cc:85:1e:18:98:40:9a:15:ac:bf:bf:d8:b3: 34:f8:5c:97:a6:25:92:ea:f9:cc:00:3d:52:2e:a1:3e:c7:ac: 2b:39:3e:9b:4c:70:d6:a7:d5:a6:9e:3e:51:1a:5b:ad:5f:cc: 5f:dd:f3:11:a6:8a:89:d3:8f:66:45:00:ad:ca:02:d8:e0:f2: 9d:ae:bb:9b:9f:15:ca:62:97:6c:99:58:9a:a8:fa:95:9e:7f: f3:60:09:fb:f9:bf:7a:5a:6f:a6:9f:75:13:8f:38:b8:64:1c: f9:64:c1:a1:59:5f:a9:a1:0b:3c:78:ef:00:99:19:0d:e1:8a: ae:59:01:09:ee:5c:fa:6f:04:bd:e6:e3:09:4f:fb:c9:79:5c: 83:92:76:a8:49:3b:81:58:5d:43:26:f7:93:2f:5b:df:cd:93: c4:03:71:3d:1d:89:c4:5b:f0:eb:03:5e:9e:80:0e:c9:0f:bc: ec:df:6c:09:1e:31:95:12:1d:40:e7:a8:3b:c7:67:cd:c6:66: 61:b8:7a:18 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICapkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzMyNS1jMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX16zy08lV/3fG1w94lJixvXVPgWiPgZJPi82KwabYa5eUAIivxgT6haVDU9 uRTMlVbeXfUy+Ubl5ik1zDdJEBIMCYq7twldjrIhYkRfSTFVE7lkv2GSlyvOBV31 sZNr+XK6mD2EEJKq8oBPnZmpCiYBvhpzkuxidgrjk3be3MXnyQ53UyfczwDKsKFq /7r1HcYknXZt6JnWOhJHGDjROZfGfB/UhnsOWrdyOMGdS84hPxEFd1SP+Ara9WLi 0RUGrQHJV+mgrHJzaNt69F4ANxvppZGM8mdmdX9TlhlvxGuj3y1ckRH8AGg5UOFg Pp7e08GGqXbX5jWS34+KjI9QQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFC+yN/vY LfwVjeaIxO2cDz/zc3hNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjc1QkU2MTBG RDY2MTFFQUI5NjVFQzE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlHcwDwQCAAIwCQMHACABDfCGQDANBgkqhkiG9w0BAQsF AAOCAQEAkXK2uBOEJ3v2bGvOWi6nYg2v+yZE7RkJGpYzLnl7gUJ0BrcO23jN1iih xrVY5MdyTR+tmwd1NyQHjsDMhR4YmECaFay/v9izNPhcl6Ylkur5zAA9Ui6hPses Kzk+m0xw1qfVpp4+URpbrV/MX93zEaaKidOPZkUArcoC2ODyna67m58VymKXbJlY mqj6lZ5/82AJ+/m/elpvpp91E484uGQc+WTBoVlfqaELPHjvAJkZDeGKrlkBCe5c +m8EvebjCU/7yXlcg5J2qEk7gVhdQyb3ky9b382TxANxPR2JxFvw6wNenoAOyQ+8 7N9sCR4xlRIdQOeoO8dnzcZmYbh6GA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org