$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C1C43CE5AFF11EBBFAE4238C4F9AE02.roa File: 6C1C43CE5AFF11EBBFAE4238C4F9AE02.roa (raw, json) Hash identifier: estszYj1E8Kc5aczdZvs8kh0JsD6OdH+Zlh07uPMSL8= Subject key identifier: 5B:D3:AE:F9:A9:F3:0A:54:9A:0C:84:4B:38:D2:37:BF:BD:34:68:6C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EAF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C1C43CE5AFF11EBBFAE4238C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:12 +0000 ROA not before: Wed 10 May 2023 16:35:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141488 IP address blocks: 103.161.28.0/23 maxlen: 24 2400:aee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28335 (0x6eaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7c0-df8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:3d:c4:7a:d1:b0:28:8e:11:ee:64:f5:46: 23:a8:8f:4c:f3:fe:e5:51:92:95:2f:c5:ad:fe:bb: a0:e9:b6:c3:38:4e:83:40:1d:0c:71:be:c3:46:11: ac:0b:2c:8b:69:b9:06:5e:c0:de:a0:36:84:71:b2: 5e:5e:f0:f3:14:66:32:37:6f:68:13:13:b6:78:9a: d2:dd:ea:f5:51:a6:03:0e:21:94:5f:63:63:59:9c: 1c:e2:0e:9a:b2:d1:3e:e9:f9:27:89:25:97:c7:a4: 61:bf:12:69:8f:8c:86:af:c5:5c:b8:a2:83:bc:58: 49:98:26:1d:9c:64:05:d1:63:fd:22:b6:03:4c:0a: a2:94:e1:e8:81:d5:f0:b0:fe:93:9e:4b:ac:f9:92: 8e:d2:0c:2a:7c:98:b6:f8:1b:2b:72:0e:13:74:00: 54:5a:de:43:0c:d4:b4:25:1e:8f:ba:f2:2e:9d:b4: 97:6b:db:cc:47:b9:0c:a5:fb:a0:f1:8f:11:11:e7: 67:ac:d7:72:59:8f:35:86:c4:38:5b:e4:5c:bd:71: b7:7f:d6:ac:84:43:7a:d9:b4:0e:03:08:80:88:b0: d4:5a:38:7d:1b:fc:ff:88:38:cf:84:1d:42:ce:ec: 59:f6:cd:5f:a3:db:0f:e5:3f:a2:3d:c0:0e:df:c2: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:AE:F9:A9:F3:0A:54:9A:0C:84:4B:38:D2:37:BF:BD:34:68:6C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C1C43CE5AFF11EBBFAE4238C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.28.0/23 IPv6: 2400:aee0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:e9:f4:d3:ac:50:df:0f:4a:9f:c8:69:58:2f:b5:79:eb:66: 99:62:0a:2e:5c:31:64:cb:2f:0f:09:83:79:e2:d0:8e:40:e0: 9f:e9:c3:2f:75:f6:03:d4:60:f6:1c:86:95:23:33:d9:c2:4e: 1b:68:14:6d:1d:6a:97:2d:2b:c7:6b:01:c5:f4:be:37:1c:0e: 6d:b2:a8:4f:5c:80:fe:ab:b3:b1:65:a7:ac:30:c8:a7:d0:ad: 1a:17:36:91:d7:a4:6f:ca:a7:45:c9:4f:bd:f2:43:3d:19:ed: c5:d8:67:cd:bb:e2:90:5b:5c:4b:37:b2:7a:e9:2e:70:16:4f: 6a:3a:db:ed:77:99:66:71:2d:3b:ef:01:e2:02:69:f6:7e:98: 31:50:ac:b6:88:36:93:1a:db:42:bd:9c:61:88:4f:6a:a6:4c: 1c:01:47:fe:f0:4c:69:fe:4e:50:37:55:83:d4:42:4b:b9:a2: 83:fc:7a:0c:d8:41:ec:48:f5:45:c5:79:10:d6:f2:03:48:49: f7:46:c5:54:f4:e3:18:26:1a:ab:fd:ea:e0:be:4b:89:4e:a2: 31:e9:5c:a1:78:7e:76:d9:64:f9:cd:a6:dc:05:7f:e3:48:7d: a7:ae:00:52:07:b6:9c:6f:26:f6:98:cc:35:f9:f2:a8:8a:36: c1:4d:bf:9a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdjMC1kZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e49xHrRsCiOEe5k9UYjqI9M8/7lUZKVL8Wt/rug6bbDOE6DQB0Mcb7DRhGs CyyLabkGXsDeoDaEcbJeXvDzFGYyN29oExO2eJrS3er1UaYDDiGUX2NjWZwc4g6a stE+6fkniSWXx6RhvxJpj4yGr8VcuKKDvFhJmCYdnGQF0WP9IrYDTAqilOHogdXw sP6Tnkus+ZKO0gwqfJi2+Bsrcg4TdABUWt5DDNS0JR6PuvIunbSXa9vMR7kMpfug 8Y8REednrNdyWY81hsQ4W+RcvXG3f9ashEN62bQOAwiAiLDUWjh9G/z/iDjPhB1C zuxZ9s1fo9sP5T+iPcAO38LEaQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFvTrvmp 8wpUmgyESzjSN7+9NGhsMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkMxQzQzQ0U1 QUZGMTFFQkJGQUU0MjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoRwwDQQCAAIwBwMFACQAruAwDQYJKoZIhvcNAQELBQAD ggEBADrp9NOsUN8PSp/IaVgvtXnrZpliCi5cMWTLLw8Jg3ni0I5A4J/pwy919gPU YPYchpUjM9nCThtoFG0dapctK8drAcX0vjccDm2yqE9cgP6rs7Flp6wwyKfQrRoX NpHXpG/Kp0XJT73yQz0Z7cXYZ8274pBbXEs3snrpLnAWT2o62+13mWZxLTvvAeIC afZ+mDFQrLaINpMa20K9nGGIT2qmTBwBR/7wTGn+TlA3VYPUQku5ooP8egzYQexI 9UXFeRDW8gNISfdGxVT04xgmGqv96uC+S4lOojHpXKF4fnbZZPnNptwFf+NIfaeu AFIHtpxvJvaYzDX58qiKNsFNv5o= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org