$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa File: 6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa (raw, json) Hash identifier: 4HCddWj8FQUXt3+mIBeLHJ9bnZCHEWoFP/m1bfQgFWw= Subject key identifier: 8C:1A:39:35:1A:2D:68:09:B8:F0:C8:1A:AC:D4:12:F5:D4:B2:09:9D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A0D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa Signing time: Wed 10 May 2023 16:12:51 +0000 ROA not before: Wed 10 May 2023 16:12:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132761 IP address blocks: 43.247.160.0/22 maxlen: 24 103.249.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27149 (0x6a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc282-fcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:9f:a0:a5:1a:58:c6:0c:7b:2e:9b:1c:34: cc:d8:e4:d6:0f:af:3d:6a:d1:dd:45:46:df:56:03: a7:15:13:ee:41:d7:6c:6d:d9:45:c3:ca:3e:69:b3: e8:2b:9b:87:c0:ed:11:be:ed:3c:18:af:60:e7:84: d0:68:a6:7b:87:5f:9f:ab:be:ec:81:0b:54:71:9c: 26:09:39:d6:42:e5:90:82:49:46:4e:d8:08:c0:aa: 2c:00:12:b1:fb:4c:1b:95:cd:dd:2c:c8:bf:17:dc: 34:5b:d0:4b:25:2d:6d:26:56:ad:9c:bb:ce:98:0d: 43:c2:8f:12:ce:c3:1d:9e:4f:cb:9b:0a:de:25:d3: e2:3d:9d:34:9b:be:fb:34:b0:c7:bc:4e:7a:34:c7: 2c:ae:37:d1:86:53:c3:3a:a3:fc:55:4d:46:1c:c6: 45:00:30:1b:cb:d2:05:7b:1f:98:d7:91:b4:dc:79: b5:ca:d9:6e:0a:39:16:3c:68:c7:a5:3e:b6:6d:b5: bf:11:46:8a:5f:fc:84:fb:f1:96:2e:eb:19:c9:61: 2b:43:49:49:f0:98:68:58:af:53:af:36:69:eb:9a: 10:d8:70:97:b3:76:b6:b5:e3:c0:8c:f7:51:da:19: c6:f5:01:ec:e2:27:22:ac:e3:bb:b4:4d:98:15:97: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1A:39:35:1A:2D:68:09:B8:F0:C8:1A:AC:D4:12:F5:D4:B2:09:9D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.160.0/22 103.249.24.0/22 Signature Algorithm: sha256WithRSAEncryption 08:ac:1f:e8:d8:8f:50:4f:ba:3f:52:00:f8:f2:e6:18:1d:60: a3:47:b7:66:be:55:0f:d0:fc:b7:dc:4d:a3:d9:7f:56:e5:06: 96:e5:0e:94:a3:54:04:f1:9f:5a:a3:36:01:2f:a4:78:f5:ce: 3e:17:81:0e:e5:ee:f1:96:bf:73:e6:86:9f:86:e7:02:a8:10: f8:ad:c0:30:65:8d:47:c8:4c:f1:83:5d:f6:49:5f:7b:b9:91: 01:4e:a7:c6:2d:ef:1b:20:d8:08:09:cc:24:4a:90:b7:7a:09: 23:91:92:dc:2f:fe:f9:9a:46:f6:ec:47:94:f8:60:fb:5a:20: fe:17:95:92:fe:20:fb:48:64:55:b5:17:cb:57:e6:f4:88:99: 04:af:8f:a1:f5:47:5d:c4:91:0f:0b:9e:db:ac:ad:fc:0b:fb: eb:00:b2:db:99:df:33:d0:80:59:3a:d1:4d:14:c9:4b:8b:23: d6:c3:cf:df:27:45:cb:19:0e:62:68:5c:6f:1e:d9:e4:45:1f: f6:22:18:30:f3:40:64:42:fe:8a:51:ff:01:4f:43:fe:fe:fe: 02:05:80:b3:f3:17:17:90:1b:48:cf:db:65:5d:c8:3d:83:45: d0:57:c1:22:1a:5e:59:d9:1f:98:5c:40:f0:c7:46:87:83:54: 20:20:55:d2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICag0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI4Mi1mY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgyfoKUaWMYMey6bHDTM2OTWD689atHdRUbfVgOnFRPuQddsbdlFw8o+abPo K5uHwO0Rvu08GK9g54TQaKZ7h1+fq77sgQtUcZwmCTnWQuWQgklGTtgIwKosABKx +0wblc3dLMi/F9w0W9BLJS1tJlatnLvOmA1Dwo8SzsMdnk/LmwreJdPiPZ00m777 NLDHvE56NMcsrjfRhlPDOqP8VU1GHMZFADAby9IFex+Y15G03Hm1ytluCjkWPGjH pT62bbW/EUaKX/yE+/GWLusZyWErQ0lJ8JhoWK9TrzZp65oQ2HCXs3a2tePAjPdR 2hnG9QHs4icirOO7tE2YFZdGawIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIwaOTUa LWgJuPDIGqzUEvXUsgmdMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkRBQ0VFMEMx MUVDMTFFQkE4NEEzRTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr96ADBAJn+RgwDQYJKoZIhvcNAQELBQADggEBAAisH+jY j1BPuj9SAPjy5hgdYKNHt2a+VQ/Q/LfcTaPZf1blBpblDpSjVATxn1qjNgEvpHj1 zj4XgQ7l7vGWv3Pmhp+G5wKoEPitwDBljUfITPGDXfZJX3u5kQFOp8Yt7xsg2AgJ zCRKkLd6CSORktwv/vmaRvbsR5T4YPtaIP4XlZL+IPtIZFW1F8tX5vSImQSvj6H1 R13EkQ8LntusrfwL++sAstuZ3zPQgFk60U0UyUuLI9bDz98nRcsZDmJoXG8e2eRF H/YiGDDzQGRC/opR/wFPQ/7+/gIFgLPzFxeQG0jP22VdyD2DRdBXwSIaXlnZH5hc QPDHRoeDVCAgVdI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org