$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa File: 6C43880E9B7711EB8C945B26C4F9AE02.roa (raw, json) Hash identifier: jvj/HRJrFjFLVthakeK4pGVPp45GQtpphFv7wE7Z3eE= Subject key identifier: AE:18:F8:D9:5A:C1:C0:B7:77:10:56:95:99:D1:16:12:04:54:7B:68 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EC9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:42 +0000 ROA not before: Wed 10 May 2023 16:35:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141524 IP address blocks: 103.162.66.0/23 maxlen: 24 2001:df6:7580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28361 (0x6ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7dd-962e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:60:aa:31:76:0f:6a:83:e5:e4:eb:9f:98: 2f:96:7e:91:d8:03:1b:58:50:d0:6f:49:29:30:46: 48:e9:f5:7b:07:33:7b:34:73:37:86:88:9e:13:ad: 37:cf:a1:9f:a6:1f:fa:d5:a5:61:59:a5:a2:e5:4b: 9c:d2:8b:7b:42:96:c9:79:9b:ba:fb:8f:30:eb:df: 0d:ff:73:cc:39:cf:e0:b9:e5:d1:0e:40:07:b3:d7: 28:a8:97:ee:c4:0d:8f:b4:84:b2:ec:d3:26:97:9c: a9:b1:ab:52:93:68:fd:ec:ff:ac:ae:6f:0f:95:24: 4e:43:67:8f:c4:e5:c1:84:d9:a0:22:93:d7:9d:fc: 32:b9:ce:bb:5d:da:14:90:b8:e5:82:14:13:b9:45: 37:95:d2:68:14:a7:3a:ca:44:e6:54:43:17:07:4a: 87:9f:7c:f3:96:10:5d:a1:7c:85:1c:9e:e9:a2:d4: 88:fd:23:0c:87:cc:b9:ee:f7:af:d1:f4:17:1d:56: 8b:48:a9:7a:a7:ef:94:00:c8:c8:81:45:c8:71:47: 0c:17:1f:74:30:8e:15:61:ae:46:ef:99:6c:c7:63: cf:7a:ad:28:df:d9:04:7f:f0:87:2b:2e:30:d1:46: d4:bc:4c:88:ba:f3:db:bc:19:04:6c:0c:40:0a:5b: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:F8:D9:5A:C1:C0:B7:77:10:56:95:99:D1:16:12:04:54:7B:68 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.66.0/23 IPv6: 2001:df6:7580::/48 Signature Algorithm: sha256WithRSAEncryption aa:d4:f7:fc:46:bd:99:99:d6:b0:99:58:53:d7:dd:73:f6:66: 04:12:c9:04:38:22:98:c5:a5:3f:9b:3e:b7:fb:be:56:b9:80: 64:03:89:39:ad:96:9b:2e:74:c4:1a:ef:0a:da:1d:d7:51:c4: a7:7f:ba:a8:6d:ec:9e:09:e5:14:9f:1b:e3:6a:2e:40:46:d7: 34:8f:bf:c9:42:96:ed:76:a1:97:e4:b9:58:cc:4f:52:7b:11: 6f:de:46:f1:5c:45:91:58:bc:32:b8:4c:43:ef:b9:96:1c:3a: 31:ce:c9:b5:42:55:56:3a:c4:08:9d:e3:7a:79:99:b7:cd:03: 0c:40:51:75:6a:c7:48:d8:9b:7b:68:10:37:18:f3:89:03:4d: 92:c3:b6:c0:95:b8:5f:87:e9:0c:c7:0f:a4:5c:4f:3c:74:a4: 41:58:c8:08:95:60:92:45:3e:fa:c3:bb:ee:c1:19:97:e2:b8: 9e:ee:ac:9c:9e:9d:aa:58:ce:a0:d0:23:60:00:67:bd:4d:39: 71:b3:d7:75:98:01:b1:ac:1d:91:ba:39:52:c5:6c:41:f6:b1: 2b:37:f0:16:f2:b2:d6:6e:7f:b1:5e:eb:5b:ef:73:91:36:07: 11:7c:a5:da:5c:3f:a8:36:70:ff:cd:91:74:5d:ce:e9:3b:eb: 0c:96:44:99 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdkZC05NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6tgqjF2D2qD5eTrn5gvln6R2AMbWFDQb0kpMEZI6fV7BzN7NHM3hoieE603 z6Gfph/61aVhWaWi5Uuc0ot7QpbJeZu6+48w698N/3PMOc/gueXRDkAHs9coqJfu xA2PtISy7NMml5ypsatSk2j97P+srm8PlSROQ2ePxOXBhNmgIpPXnfwyuc67XdoU kLjlghQTuUU3ldJoFKc6ykTmVEMXB0qHn3zzlhBdoXyFHJ7potSI/SMMh8y57vev 0fQXHVaLSKl6p++UAMjIgUXIcUcMFx90MI4VYa5G75lsx2PPeq0o39kEf/CHKy4w 0UbUvEyIuvPbvBkEbAxAClvLjQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK4Y+Nla wcC3dxBWlZnRFhIEVHtoMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkM0Mzg4MEU5 Qjc3MTFFQjhDOTQ1QjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnokIwDwQCAAIwCQMHACABDfZ1gDANBgkqhkiG9w0BAQsF AAOCAQEAqtT3/Ea9mZnWsJlYU9fdc/ZmBBLJBDgimMWlP5s+t/u+VrmAZAOJOa2W my50xBrvCtod11HEp3+6qG3sngnlFJ8b42ouQEbXNI+/yUKW7Xahl+S5WMxPUnsR b95G8VxFkVi8MrhMQ++5lhw6Mc7JtUJVVjrECJ3jenmZt80DDEBRdWrHSNibe2gQ NxjziQNNksO2wJW4X4fpDMcPpFxPPHSkQVjICJVgkkU++sO77sEZl+K4nu6snJ6d qljOoNAjYABnvU05cbPXdZgBsawdkbo5UsVsQfaxKzfwFvKy1m5/sV7rW+9zkTYH EXyl2lw/qDZw/82RdF3O6TvrDJZEmQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org