$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CBE01242FEC11ECB35A414FC4F9AE02.roa File: 6CBE01242FEC11ECB35A414FC4F9AE02.roa (raw, json) Hash identifier: k3/R1cau1Zv27967kGin5z+eZSQy+sl7U3Y/rqagEh0= Subject key identifier: 41:1A:95:1A:AC:78:5B:7E:4D:C0:B9:E2:89:86:A5:64:8C:30:E2:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EE7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CBE01242FEC11ECB35A414FC4F9AE02.roa Signing time: Wed 10 May 2023 16:36:14 +0000 ROA not before: Wed 10 May 2023 16:36:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141560 IP address blocks: 103.163.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28391 (0x6ee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:36:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7fe-8f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:da:67:fd:76:7e:2c:bc:70:a1:96:dc:82: b4:79:07:df:7b:b5:f0:fd:ff:ee:44:ab:ab:11:2b: a7:b6:ac:89:08:6c:9a:0f:4b:a9:06:7a:d2:3b:bd: a6:f6:e9:3a:49:f8:f2:68:51:58:60:f7:90:26:da: 68:1e:d0:2c:e0:f2:0d:c9:a1:3f:7e:06:22:cc:34: 3f:20:be:ae:41:2c:fa:1b:0f:18:ca:21:fd:0d:06: de:57:43:25:24:49:67:db:5f:ff:35:fc:3a:5a:b4: e7:11:e0:46:2f:86:0a:d0:36:a7:31:0f:ab:85:87: 72:fa:82:ed:48:41:af:e5:a6:8f:94:0b:b7:1e:27: 6a:41:fa:1a:35:d6:16:b1:6f:0b:4c:a4:27:ce:3a: 03:c2:00:6e:f4:81:b1:27:85:5f:08:df:51:9d:a1: 6b:07:96:c4:74:8a:37:7f:14:be:92:f4:16:18:4c: 44:db:ad:58:ce:38:70:43:8c:cc:02:af:5f:79:7b: bf:e6:78:8c:07:df:5d:c8:14:91:0d:87:7b:02:71: 56:e6:8c:f6:28:f9:4d:00:81:cb:d1:8f:e1:90:3a: ee:38:37:6f:f6:31:2a:06:e7:55:df:9d:d4:9b:10: 90:01:63:e4:1e:64:37:80:6d:68:db:df:25:01:83: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1A:95:1A:AC:78:5B:7E:4D:C0:B9:E2:89:86:A5:64:8C:30:E2:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CBE01242FEC11ECB35A414FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.202.0/23 Signature Algorithm: sha256WithRSAEncryption b9:7d:41:48:d5:93:d6:d9:fd:1f:ef:4b:a1:82:d8:d8:0c:0f: cb:86:a0:11:85:39:52:f4:d1:90:54:93:eb:49:1b:fc:f2:af: a9:1d:5e:01:a6:eb:0d:b0:a3:2c:11:08:9a:ea:cb:3e:75:30: f7:22:68:bf:14:73:e6:8d:8b:c4:23:b5:61:88:92:3a:fb:c1: be:90:42:35:ca:eb:16:e4:3f:e6:2a:25:7f:ea:6a:09:5e:23: 5d:c9:b3:c0:c3:d9:d0:f7:e0:a3:3b:12:13:aa:9b:b4:20:b5: c7:5a:ce:c2:06:81:d2:bd:db:63:fa:29:89:44:75:21:fb:a5: 55:dd:01:67:b3:5d:5e:6f:0b:9b:b7:2a:62:f0:a4:95:f5:55: ba:8a:77:7f:a2:78:10:b1:0d:45:79:01:d9:98:19:3f:b3:3a: 5a:f5:aa:c0:0b:c2:c8:17:92:59:66:c3:ed:78:5a:5a:48:ae: 87:09:47:e9:ca:81:b9:ea:a1:5f:00:20:0f:79:de:9b:f8:e9: 35:60:e9:ff:cf:1e:73:4e:9a:b1:20:6b:ce:c0:ab:d8:51:7e: 77:f4:81:84:d7:e4:52:c6:b8:1d:f8:7a:e7:0e:b7:23:2e:3e: 12:5f:79:49:06:9a:e8:ca:64:6c:c6:60:bb:e4:da:c7:e4:9c: 6a:7d:5d:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdmZS04ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EnaZ/12fiy8cKGW3IK0eQffe7Xw/f/uRKurESuntqyJCGyaD0upBnrSO72m 9uk6SfjyaFFYYPeQJtpoHtAs4PINyaE/fgYizDQ/IL6uQSz6Gw8YyiH9DQbeV0Ml JEln21//Nfw6WrTnEeBGL4YK0DanMQ+rhYdy+oLtSEGv5aaPlAu3HidqQfoaNdYW sW8LTKQnzjoDwgBu9IGxJ4VfCN9RnaFrB5bEdIo3fxS+kvQWGExE261YzjhwQ4zM Aq9feXu/5niMB99dyBSRDYd7AnFW5oz2KPlNAIHL0Y/hkDruODdv9jEqBudV353U mxCQAWPkHmQ3gG1o298lAYOsGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEalRqs eFt+TcC54omGpWSMMOIBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkNCRTAxMjQy RkVDMTFFQ0IzNUE0MTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFno8owDQYJKoZIhvcNAQELBQADggEBALl9QUjVk9bZ/R/v S6GC2NgMD8uGoBGFOVL00ZBUk+tJG/zyr6kdXgGm6w2woywRCJrqyz51MPciaL8U c+aNi8QjtWGIkjr7wb6QQjXK6xbkP+YqJX/qagleI13Js8DD2dD34KM7EhOqm7Qg tcdazsIGgdK922P6KYlEdSH7pVXdAWezXV5vC5u3KmLwpJX1VbqKd3+ieBCxDUV5 AdmYGT+zOlr1qsALwsgXkllmw+14WlpIrocJR+nKgbnqoV8AIA953pv46TVg6f/P HnNOmrEga87Aq9hRfnf0gYTX5FLGuB34eucOtyMuPhJfeUkGmujKZGzGYLvk2sfk nGp9XXI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org