$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C27FDCEEA7A11EDBB837E47C4F9AE02.roa File: 6C27FDCEEA7A11EDBB837E47C4F9AE02.roa (raw, json) Hash identifier: 7aFbbPzLvkaWUu0cUvZGeQsnB4cwn9ZgQ1vvUj3aLlA= Subject key identifier: E8:2A:4F:DC:8B:4C:25:D4:2C:A7:05:FA:3D:88:00:B7:79:04:11:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C27FDCEEA7A11EDBB837E47C4F9AE02.roa Signing time: Wed 10 May 2023 16:16:03 +0000 ROA not before: Wed 10 May 2023 16:16:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133706 IP address blocks: 43.228.220.0/22 maxlen: 24 45.125.60.0/22 maxlen: 24 103.47.236.0/22 maxlen: 24 103.215.248.0/22 maxlen: 24 157.119.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27315 (0x6ab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:16:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc343-f053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:f6:0a:17:9b:91:a0:a7:ce:dc:cb:34:a1: 32:4a:b4:9e:f7:a6:d7:db:0c:b1:c5:0f:eb:36:4d: 13:5a:26:68:7b:6c:ac:39:ee:df:bb:e2:d8:17:94: c6:6d:46:cb:e7:67:f4:69:2e:07:cb:79:8e:66:03: dc:55:6c:6e:94:6d:2b:3f:fc:ef:07:98:89:bd:73: a1:88:e5:9c:ff:03:f4:c0:48:83:4e:26:89:1f:ca: 8e:b5:eb:72:7c:fe:3d:fe:9e:1b:af:d9:11:c6:dd: 0c:26:f3:79:3a:24:e5:a7:43:1f:d5:6e:bb:5e:89: f1:1f:1b:7d:6a:67:9b:23:9e:da:a4:7c:3c:ed:4e: f0:0c:2c:b0:c1:2a:c2:27:07:49:2a:bb:d2:31:54: 77:b1:80:dc:06:33:fc:a6:ad:0c:17:2e:ee:a2:7f: 2e:98:8f:1e:75:a7:00:bf:02:ba:85:2c:3d:7a:4e: dd:5c:6a:83:0d:8c:8f:de:57:e6:a4:31:ae:d3:51: 23:4d:3d:76:7f:07:89:66:1e:c0:17:19:ba:f3:3a: 96:6b:62:61:57:08:e8:ab:50:79:62:f6:42:84:11: f8:b6:2f:98:70:ac:63:dd:43:72:48:4d:de:fe:a9: b4:90:1c:e0:1d:0a:bc:1d:13:67:ed:67:81:b1:24: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:4F:DC:8B:4C:25:D4:2C:A7:05:FA:3D:88:00:B7:79:04:11:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C27FDCEEA7A11EDBB837E47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.220.0/22 45.125.60.0/22 103.47.236.0/22 103.215.248.0/22 157.119.124.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:28:35:27:00:cf:be:a2:cd:1b:a9:e1:33:6a:ad:78:40:0c: d3:58:a9:6d:27:85:33:64:c9:5e:54:71:c7:74:07:35:e9:9c: 5c:6f:d1:05:e2:d9:9c:d1:bd:90:28:81:1f:83:a4:d2:56:c9: 95:71:89:f2:18:2f:76:c4:a6:c1:6f:17:ee:a7:75:26:94:c1: 72:0d:13:d9:64:32:dc:5b:61:4b:89:74:c2:69:64:33:c4:50: 0f:d5:7c:c3:e6:6b:2e:9c:fb:31:b4:5b:6f:76:cf:91:f3:83: 3f:da:99:01:db:8e:fa:a1:c3:d7:78:74:40:3b:c0:85:ee:05: 02:74:f2:92:f3:36:1a:36:6e:ca:c1:99:a8:a5:cb:9c:9c:16: ef:0c:37:f9:58:52:57:61:6a:42:58:ae:8f:1f:19:1b:b9:45: a8:6f:dc:31:15:2c:45:81:12:8b:ad:db:95:0e:3c:a6:c8:99: c6:95:aa:6e:42:d8:a5:cb:f0:32:4a:bc:97:d8:a5:82:ab:f3: f1:d1:21:2c:69:46:4f:33:ba:f4:0c:18:20:0c:b8:a3:2d:98: fa:06:01:4c:0d:3b:de:10:9d:c1:39:04:a0:ac:8e:10:19:c2: ff:5c:f4:24:8f:6a:c5:c2:ba:c1:34:98:11:47:65:98:df:db: 9f:f8:42:92 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICarMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM0My1mMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvz2ChebkaCnztzLNKEySrSe96bX2wyxxQ/rNk0TWiZoe2ysOe7fu+LYF5TG bUbL52f0aS4Hy3mOZgPcVWxulG0rP/zvB5iJvXOhiOWc/wP0wEiDTiaJH8qOtety fP49/p4br9kRxt0MJvN5OiTlp0Mf1W67XonxHxt9amebI57apHw87U7wDCywwSrC JwdJKrvSMVR3sYDcBjP8pq0MFy7uon8umI8edacAvwK6hSw9ek7dXGqDDYyP3lfm pDGu01EjTT12fweJZh7AFxm68zqWa2JhVwjoq1B5YvZChBH4ti+YcKxj3UNySE3e /qm0kBzgHQq8HRNn7WeBsSQEpwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOgqT9yL TCXULKcF+j2IALd5BBETMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkMyN0ZEQ0VF QTdBMTFFREJCODM3RTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAIr5NwDBAItfTwDBAJnL+wDBAJn1/gDBAKdd3wwDQYJKoZI hvcNAQELBQADggEBAJ4oNScAz76izRup4TNqrXhADNNYqW0nhTNkyV5Uccd0BzXp nFxv0QXi2ZzRvZAogR+DpNJWyZVxifIYL3bEpsFvF+6ndSaUwXINE9lkMtxbYUuJ dMJpZDPEUA/VfMPmay6c+zG0W292z5Hzgz/amQHbjvqhw9d4dEA7wIXuBQJ08pLz Nho2bsrBmaily5ycFu8MN/lYUldhakJYro8fGRu5Rahv3DEVLEWBEout25UOPKbI mcaVqm5C2KXL8DJKvJfYpYKr8/HRISxpRk8zuvQMGCAMuKMtmPoGAUwNO94QncE5 BKCsjhAZwv9c9CSPasXCusE0mBFHZZjf25/4QpI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org