$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691120A84F5C11EC83151584C4F9AE02.roa File: 691120A84F5C11EC83151584C4F9AE02.roa (raw, json) Hash identifier: zcA8Afxp/VPY5ANmfjYYMP7Ei2gxJJnIQ08/LhahHrk= Subject key identifier: F3:81:51:EC:A4:B5:95:BB:22:A8:D8:1A:95:BB:85:C9:05:35:E9:3D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FFE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691120A84F5C11EC83151584C4F9AE02.roa Signing time: Wed 10 May 2023 16:41:27 +0000 ROA not before: Wed 10 May 2023 16:41:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 147254 IP address blocks: 103.177.4.0/23 maxlen: 24 2001:df0:1840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28670 (0x6ffe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:41:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc937-2c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:29:c1:45:cb:82:8b:ed:5d:73:da:11:79: b6:37:42:15:4d:96:fe:ab:d1:9b:16:c8:08:55:6d: 2d:d8:82:7e:6e:b8:48:4e:38:93:94:cb:9e:d2:b9: 4e:cf:a1:4e:70:71:ba:cc:8e:14:3c:87:57:02:a8: 7a:92:19:b8:08:6e:13:2a:4a:32:be:04:d5:bf:c1: 46:d7:90:bd:37:5c:1d:d6:39:2c:c6:45:7b:1c:87: a4:7e:39:53:ee:7f:9d:c4:7f:a3:ee:46:36:0a:ca: bf:d1:95:00:4c:c7:b9:34:35:65:14:30:2e:92:ad: c4:3b:0c:fd:4d:72:ff:6f:f3:28:b6:09:e2:07:f7: 72:da:ea:08:8b:8e:ba:dc:56:c1:b4:f5:eb:40:8f: 6d:11:b8:4d:62:07:9c:74:7d:f3:6d:da:0f:cd:31: 22:47:f6:3f:0b:00:69:c5:65:1c:a0:66:bb:62:9e: 05:ee:1f:d3:10:90:85:77:e1:b5:89:95:59:bc:b4: 72:38:57:24:f6:7e:9a:cc:9f:5b:90:ec:a9:92:f0: 02:c6:6c:14:8d:7a:ad:6f:0c:be:14:94:c8:79:1d: 5f:87:a1:3a:6b:9a:b2:45:28:b8:e5:7e:24:85:64: a8:6b:b0:16:1c:3a:be:e1:b4:53:ee:38:35:2d:b4: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:51:EC:A4:B5:95:BB:22:A8:D8:1A:95:BB:85:C9:05:35:E9:3D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/691120A84F5C11EC83151584C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.4.0/23 IPv6: 2001:df0:1840::/48 Signature Algorithm: sha256WithRSAEncryption ab:0a:57:cc:a5:d0:f4:c5:a7:15:de:b5:c9:2a:87:44:a8:62: 0d:a5:46:0d:89:0e:34:6a:30:68:93:76:36:7e:81:ba:49:30: 78:a9:72:1a:7d:aa:dc:c9:b0:fd:2f:30:8b:9b:56:8b:aa:69: c2:97:ca:e5:80:f6:75:66:e9:c9:45:74:27:41:0b:e0:26:a7: fc:ed:84:a7:ce:ae:1d:02:79:c0:d9:09:a6:f2:b2:d2:82:a6: 9f:cc:e8:f5:ba:2b:c2:3c:5d:58:06:1e:9a:b2:1c:38:7f:72: 49:fa:7c:8c:82:f9:92:04:d1:75:98:32:db:39:c9:2d:c5:83: 78:38:54:91:a4:1b:2e:7e:b2:cd:86:5f:64:31:d6:69:f9:88: 58:2b:c2:12:16:b2:fe:e7:0c:2a:4b:99:ac:ec:d9:e7:4d:7c: d5:00:48:3d:6d:37:2b:80:38:de:6b:6a:4b:75:ee:02:28:ac: 85:c0:3f:6e:94:3e:b6:57:1a:8e:af:51:d3:dd:6f:f6:55:fb: 04:79:3a:b4:0e:48:ff:40:6d:22:b5:38:8d:65:51:a2:7a:e3: b3:68:ab:ef:e7:ef:b1:f0:fa:34:3c:51:7a:a7:d7:d0:3a:6f: e2:11:6a:9f:4d:cf:d1:bc:f9:e4:cf:4c:96:d8:1e:ee:4b:85: 27:5f:62:6c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MTI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzkzNy0yYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dYpwUXLgovtXXPaEXm2N0IVTZb+q9GbFsgIVW0t2IJ+brhITjiTlMue0rlO z6FOcHG6zI4UPIdXAqh6khm4CG4TKkoyvgTVv8FG15C9N1wd1jksxkV7HIekfjlT 7n+dxH+j7kY2Csq/0ZUATMe5NDVlFDAukq3EOwz9TXL/b/MotgniB/dy2uoIi466 3FbBtPXrQI9tEbhNYgecdH3zbdoPzTEiR/Y/CwBpxWUcoGa7Yp4F7h/TEJCFd+G1 iZVZvLRyOFck9n6azJ9bkOypkvACxmwUjXqtbwy+FJTIeR1fh6E6a5qyRSi45X4k hWSoa7AWHDq+4bRT7jg1LbTf5QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPOBUeyk tZW7IqjYGpW7hckFNek9MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjkxMTIwQTg0 RjVDMTFFQzgzMTUxNTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsQQwDwQCAAIwCQMHACABDfAYQDANBgkqhkiG9w0BAQsF AAOCAQEAqwpXzKXQ9MWnFd61ySqHRKhiDaVGDYkONGowaJN2Nn6BukkweKlyGn2q 3Mmw/S8wi5tWi6ppwpfK5YD2dWbpyUV0J0EL4Can/O2Ep86uHQJ5wNkJpvKy0oKm n8zo9borwjxdWAYemrIcOH9ySfp8jIL5kgTRdZgy2znJLcWDeDhUkaQbLn6yzYZf ZDHWafmIWCvCEhay/ucMKkuZrOzZ50181QBIPW03K4A43mtqS3XuAiishcA/bpQ+ tlcajq9R091v9lX7BHk6tA5I/0BtIrU4jWVRonrjs2ir7+fvsfD6NDxReqfX0Dpv 4hFqn03P0bz55M9Mltge7kuFJ19ibA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org