$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa File: 6800413CC72111EEA33F0529C4F9AE02.roa (raw, json) Hash identifier: xfW9JoWTVxg+5Yxqu5tYlt5pNV92F+eSct9d29L0z2E= Subject key identifier: DA:F7:73:A3:92:D1:E4:B5:8F:E1:C4:A7:2A:8F:82:07:AD:E9:68:E4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 829C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa Signing time: Fri 09 Feb 2024 08:01:19 +0000 ROA not before: Fri 09 Feb 2024 08:01:19 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137647 IP address blocks: 103.119.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33436 (0x829c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 9 08:01:19 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65c5dbcf-2dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:28:c1:6a:4f:3a:5c:90:ff:12:5e:01:fa: 9c:db:dc:39:24:be:9b:e9:f7:64:06:d0:94:78:d4: 42:33:b9:58:93:0b:07:2e:7c:a4:62:3e:4d:d0:0c: 90:44:fc:56:97:46:ff:01:64:17:34:f6:19:81:b2: f0:0b:42:eb:76:e6:6d:ae:48:ed:d9:d8:78:5c:40: 72:26:3f:71:6f:92:76:6e:4f:94:6c:86:67:93:3b: d9:d8:0e:42:1e:fb:bd:b2:02:f1:de:53:65:43:32: 65:3e:4a:c1:50:76:e0:eb:0b:53:13:de:91:c7:c9: 98:22:5c:2b:8e:36:9d:e1:89:73:72:fb:0e:cb:a2: 2d:01:04:af:58:c8:85:dd:21:3a:4a:b2:c2:0f:86: 81:fc:81:d1:e9:3e:10:76:83:ff:86:1e:07:35:14: c0:13:4d:55:f1:96:a7:66:98:1d:87:c3:5a:b0:e2: be:75:f1:1a:8f:18:46:91:ef:64:e1:cd:a6:2a:47: c5:4b:eb:43:8b:84:39:8f:57:e0:af:ef:d0:6e:a2: 1f:62:b0:04:85:7a:61:99:02:c7:a1:aa:4c:68:00: 45:e4:55:77:bb:3e:ec:50:f9:b3:22:54:2a:de:67: c8:e5:08:fc:2f:10:b2:57:86:17:89:42:9f:b7:36: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F7:73:A3:92:D1:E4:B5:8F:E1:C4:A7:2A:8F:82:07:AD:E9:68:E4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.238.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:3d:6f:5c:71:44:0a:f0:e5:bb:b4:7b:2b:e8:38:0f:dc:01: 43:c9:0f:c4:07:23:12:54:74:d5:ac:cf:30:14:89:64:88:17: 7f:b7:b8:d5:7b:84:ee:fe:73:77:4a:c0:ca:dd:71:fa:c1:b0: c0:cd:da:97:22:ae:e0:a8:e3:d7:d1:62:5c:01:a2:8e:43:bf: e3:fd:5a:b8:96:db:d3:f1:1d:10:6e:3e:61:f4:fc:fc:a4:54: f9:2a:d6:6b:56:b5:f2:67:1f:f5:e6:d5:b6:38:9b:d9:05:68: c0:17:6a:6a:63:4f:56:3a:34:4d:e5:0e:75:ea:a7:c6:9f:02: 47:f8:1f:1d:83:49:15:3f:33:91:76:52:28:40:fe:7b:00:fd: a0:7a:a5:68:2a:f8:3b:79:1b:71:f5:d4:93:dc:50:a1:28:67: 7a:0d:fb:f0:00:18:43:dc:5a:5a:4d:82:d9:d5:6c:6c:33:ae: 66:82:b5:e6:c0:8e:15:2e:1c:34:4f:09:84:12:11:aa:0c:5e: 7e:db:a2:bf:29:8d:de:00:77:41:d6:52:ff:07:00:f6:c7:70: e4:19:26:85:fb:11:62:84:76:dd:e6:e4:54:f2:7b:e5:d0:f9: fa:31:f8:ea:e4:97:06:09:80:eb:56:de:5b:46:ce:6d:80:d2: 1c:05:20:00 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIKcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIwOTA4MDExOVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVjNWRiY2YtMmRjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsNKMFqTzpckP8SXgH6nNvcOSS+m+n3ZAbQlHjUQjO5WJMLBy58pGI+TdAM kET8VpdG/wFkFzT2GYGy8AtC63bmba5I7dnYeFxAciY/cW+Sdm5PlGyGZ5M72dgO Qh77vbIC8d5TZUMyZT5KwVB24OsLUxPekcfJmCJcK442neGJc3L7DsuiLQEEr1jI hd0hOkqywg+GgfyB0ek+EHaD/4YeBzUUwBNNVfGWp2aYHYfDWrDivnXxGo8YRpHv ZOHNpipHxUvrQ4uEOY9X4K/v0G6iH2KwBIV6YZkCx6GqTGgAReRVd7s+7FD5syJU Kt5nyOUI/C8QsleGF4lCn7c2HqkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTa93Oj ktHktY/hxKcqj4IHrelo5DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY4MDA0MTND QzcyMTExRUVBMzNGMDUyOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ3fuMA0GCSqGSIb3DQEBCwUAA4IBAQCfPW9ccUQK8OW7 tHsr6DgP3AFDyQ/EByMSVHTVrM8wFIlkiBd/t7jVe4Tu/nN3SsDK3XH6wbDAzdqX Iq7gqOPX0WJcAaKOQ7/j/Vq4ltvT8R0Qbj5h9Pz8pFT5KtZrVrXyZx/15tW2OJvZ BWjAF2pqY09WOjRN5Q516qfGnwJH+B8dg0kVPzORdlIoQP57AP2geqVoKvg7eRtx 9dST3FChKGd6DfvwABhD3FpaTYLZ1WxsM65mgrXmwI4VLhw0TwmEEhGqDF5+26K/ KY3eAHdB1lL/BwD2x3DkGSaF+xFihHbd5uRU8nvl0Pn6Mfjq5JcGCYDrVt5bRs5t gNIcBSAA -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:35 2024 by rpki-client on console-ams.rpki-client.org