$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E83A3669FC411EE9D70D30AC4F9AE02.roa File: 6E83A3669FC411EE9D70D30AC4F9AE02.roa (raw, json) Hash identifier: IXL9dmUnVaiinLGladY3GSa/X23lqA+EvKhFHVR/52A= Subject key identifier: 08:50:0D:A4:32:80:76:FC:AE:78:1D:A3:34:8B:B3:FA:B2:E9:99:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 805F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E83A3669FC411EE9D70D30AC4F9AE02.roa Signing time: Thu 21 Dec 2023 05:47:31 +0000 ROA not before: Thu 21 Dec 2023 05:47:31 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137651 IP address blocks: 103.124.11.0/24 maxlen: 24 103.148.1.0/24 maxlen: 24 103.152.114.0/24 maxlen: 24 103.176.70.0/24 maxlen: 24 2001:df3:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32863 (0x805f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 21 05:47:31 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6583d173-ea87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:f1:97:f3:e6:63:3f:25:30:8d:0d:df:98: d8:74:95:1f:d1:22:05:20:fc:42:f4:20:cc:b6:c8: d4:44:3a:5a:f7:f6:e0:ce:a4:7b:26:cc:9d:79:45: 7a:11:14:02:1e:0a:84:ad:c2:5b:ee:bb:2a:25:c9: 08:46:6d:8c:01:a8:78:34:7f:bf:b4:df:3b:ce:98: c8:0c:4e:34:34:35:5e:13:d0:e9:54:d9:90:89:08: 07:eb:82:17:88:3b:37:9e:4a:be:85:55:d9:34:64: f3:6c:48:d0:4f:e4:b7:4f:65:97:79:05:79:2c:2b: d2:e8:43:60:f8:40:9f:97:b2:99:e1:c0:51:7c:a1: 91:4a:96:88:5a:f5:33:97:55:eb:e9:d9:99:87:ee: d3:13:0e:86:8c:e8:47:83:28:f9:11:46:33:9f:d5: 34:c4:ad:67:c4:9d:cb:c2:db:ee:4b:62:c7:84:ce: 2d:34:41:da:77:da:bc:27:22:36:f9:8e:78:81:e3: b5:b2:42:40:a1:61:a0:6a:46:47:3a:31:5a:59:d9: 53:aa:3b:f3:69:5d:48:fb:1d:89:3b:3c:4b:15:4f: 1d:77:ae:75:0c:ca:b0:ba:13:41:66:21:37:fa:07: bb:70:55:d6:3b:bc:11:74:4e:6c:92:82:9c:ad:35: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:0D:A4:32:80:76:FC:AE:78:1D:A3:34:8B:B3:FA:B2:E9:99:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E83A3669FC411EE9D70D30AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.11.0/24 103.148.1.0/24 103.152.114.0/24 103.176.70.0/24 IPv6: 2001:df3:f080::/48 Signature Algorithm: sha256WithRSAEncryption ba:ce:04:56:f9:20:9d:95:c5:60:f7:26:c6:d3:db:5c:38:70: 56:1e:2b:cf:12:a3:4c:37:4c:1a:27:e6:84:be:13:a8:cb:e7: bd:8f:ea:4b:9e:96:6a:53:f7:dd:4b:24:cd:71:ce:ac:d8:f3: 04:86:ab:fb:c6:f4:04:f7:a1:5c:0d:3c:25:c9:10:97:35:52: 50:13:ce:ab:63:fb:db:74:69:46:31:a1:29:c2:ad:50:f4:6d: 17:61:8e:13:05:fd:33:73:3b:63:a7:6a:46:16:79:9c:ad:83: e7:57:61:6e:6f:32:3b:be:6e:4f:ba:c0:09:e4:d5:d3:b8:73: 48:32:f4:57:65:45:8e:96:5c:9c:d1:16:2e:3c:87:b9:0d:96: 65:2a:54:7e:f3:3b:7f:cf:26:b2:d6:d4:e1:f4:2c:7f:9f:51: 5d:f6:b0:06:03:52:ff:cb:9b:7f:0a:7d:02:77:d6:60:e4:db: 99:d9:1b:62:92:c7:df:da:c4:37:98:df:a2:4c:1c:be:5f:a3: c7:b7:2e:2b:4a:37:41:9a:3e:49:63:7f:c4:f1:e4:3e:09:c0: f0:f5:d7:8b:a3:bf:2e:92:a6:34:10:08:f1:32:d8:25:71:1d: eb:45:f5:d6:37:48:94:ea:8a:62:c7:ea:a4:60:1d:02:fa:9c: 62:37:89:f7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAIBfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTIzMTIyMTA1NDczMVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU4M2QxNzMtZWE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5e8Zfz5mM/JTCNDd+Y2HSVH9EiBSD8QvQgzLbI1EQ6Wvf24M6keybMnXlF ehEUAh4KhK3CW+67KiXJCEZtjAGoeDR/v7TfO86YyAxONDQ1XhPQ6VTZkIkIB+uC F4g7N55KvoVV2TRk82xI0E/kt09ll3kFeSwr0uhDYPhAn5eymeHAUXyhkUqWiFr1 M5dV6+nZmYfu0xMOhozoR4Mo+RFGM5/VNMStZ8Sdy8Lb7ktix4TOLTRB2nfavCci NvmOeIHjtbJCQKFhoGpGRzoxWlnZU6o782ldSPsdiTs8SxVPHXeudQzKsLoTQWYh N/oHu3BV1ju8EXRObJKCnK01LOUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQIUA2k MoB2/K54HaM0i7P6sumZ/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZFODNBMzY2 OUZDNDExRUU5RDcwRDMwQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQAZ3wLAwQAZ5QBAwQAZ5hyAwQAZ7BGMA8EAgACMAkDBwAg AQ3z8IAwDQYJKoZIhvcNAQELBQADggEBALrOBFb5IJ2VxWD3JsbT21w4cFYeK88S o0w3TBon5oS+E6jL572P6kuelmpT991LJM1xzqzY8wSGq/vG9AT3oVwNPCXJEJc1 UlATzqtj+9t0aUYxoSnCrVD0bRdhjhMF/TNzO2OnakYWeZytg+dXYW5vMju+bk+6 wAnk1dO4c0gy9FdlRY6WXJzRFi48h7kNlmUqVH7zO3/PJrLW1OH0LH+fUV32sAYD Uv/Lm38KfQJ31mDk25nZG2KSx9/axDeY36JMHL5fo8e3LitKN0GaPkljf8Tx5D4J wPD114ujvy6SpjQQCPEy2CVxHetF9dY3SJTqimLH6qRgHQL6nGI3ifc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org