$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa File: 71389AA6BDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: ghjdFlIdVCYEYVFE5sv3cWqmCxp9XJgo2pkWh4O+uZ4= Subject key identifier: D6:95:41:8D:0D:E4:B2:6B:FF:74:AB:06:AA:C5:D4:AF:0D:F4:08:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71D8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa Signing time: Wed 10 May 2023 16:50:13 +0000 ROA not before: Wed 10 May 2023 16:50:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59195 IP address blocks: 103.142.166.0/24 maxlen: 24 2001:df5:1180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29144 (0x71d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb45-0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:18:e2:87:8f:a8:a1:81:02:ff:de:87:4b: 18:7d:c5:22:5a:74:de:d8:ed:61:ff:7e:95:c1:e1: 14:68:b7:7f:bf:e9:5b:bf:7f:b9:19:6d:43:88:d9: 57:d9:af:b8:4a:63:77:3d:61:c3:fe:a1:28:08:5d: 65:f2:8a:b0:a8:26:10:cd:4c:53:d7:a1:b3:14:57: dc:7f:e9:41:7b:a9:59:5b:bd:48:61:76:35:27:e6: 3c:3b:7d:d3:a5:f9:66:f3:2d:28:e8:89:15:f4:c5: 3f:05:16:f4:47:92:16:c9:ba:f5:7c:55:a3:d0:01: d6:8d:5e:6d:5e:48:cf:2d:85:05:0a:6d:9d:09:a9: 1c:4d:6d:0e:b9:d9:13:85:f1:fb:1b:2d:e8:d9:36: c2:31:28:0c:e2:b4:d9:a4:c4:2e:92:dd:8d:bf:cb: fc:bf:df:77:4c:83:14:2e:3c:39:2c:da:f3:67:aa: 4f:a0:06:7a:bb:13:81:05:64:17:74:11:fc:08:26: 0f:34:3d:9a:80:d3:d1:61:54:4a:51:1f:b1:27:95: d2:d6:05:c3:61:38:fc:2d:b2:86:f5:9e:6e:46:39: 09:6a:65:b1:01:60:0f:eb:f2:d9:92:c7:e2:67:bb: c0:7b:cd:a0:5d:f8:18:39:b0:7f:9d:99:55:12:20: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:41:8D:0D:E4:B2:6B:FF:74:AB:06:AA:C5:D4:AF:0D:F4:08:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.166.0/24 IPv6: 2001:df5:1180::/48 Signature Algorithm: sha256WithRSAEncryption a8:49:1b:e6:e3:d3:d5:6c:07:b9:51:4a:33:17:d7:71:3f:75: a8:9b:97:71:d8:39:7c:ae:1f:82:43:8f:5c:c6:88:09:0a:0b: d0:39:e2:b6:9f:e0:55:96:c9:11:b1:b4:71:0a:c2:d2:6d:4a: 40:df:1b:9a:34:43:bf:ed:11:08:0c:ed:b0:1e:d1:6d:21:7a: 3f:b6:7b:4b:40:b7:7c:83:36:f5:48:20:63:4b:63:fe:36:d0: ae:3c:05:c5:e4:cd:4d:38:3e:11:2b:01:38:eb:18:ba:ef:a1: 5f:43:f9:b4:8a:ae:5a:b2:1d:aa:ff:20:3d:1d:66:91:b3:7d: 83:b5:34:a7:75:34:ef:04:1c:d5:db:bc:16:59:ba:c2:9d:0a: 86:e0:11:07:f0:0f:78:cd:fd:81:7a:d8:73:53:b8:e9:f5:6c: f9:7b:77:9a:4d:39:45:0f:e6:3a:04:c3:c7:cd:5a:a4:f7:51: 77:9b:60:f7:de:1e:a8:8b:be:df:d4:e7:53:57:73:cb:f6:f8: 27:8d:5f:33:7f:9b:a5:ed:87:9c:a8:ea:22:e0:ce:63:ab:f1: 18:85:52:b2:83:13:d1:04:8b:bf:50:67:7f:bf:84:f4:24:01: b5:45:c8:f3:36:e6:3f:7d:d9:c5:96:73:6c:bb:bf:f8:41:66: 25:04:54:3f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2I0NS0wOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpgY4oePqKGBAv/eh0sYfcUiWnTe2O1h/36VweEUaLd/v+lbv3+5GW1DiNlX 2a+4SmN3PWHD/qEoCF1l8oqwqCYQzUxT16GzFFfcf+lBe6lZW71IYXY1J+Y8O33T pflm8y0o6IkV9MU/BRb0R5IWybr1fFWj0AHWjV5tXkjPLYUFCm2dCakcTW0OudkT hfH7Gy3o2TbCMSgM4rTZpMQukt2Nv8v8v993TIMULjw5LNrzZ6pPoAZ6uxOBBWQX dBH8CCYPND2agNPRYVRKUR+xJ5XS1gXDYTj8LbKG9Z5uRjkJamWxAWAP6/LZksfi Z7vAe82gXfgYObB/nZlVEiCeVQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNaVQY0N 5LJr/3SrBqrF1K8N9Aj/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzEzODlBQTZC RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnjqYwDwQCAAIwCQMHACABDfURgDANBgkqhkiG9w0BAQsF AAOCAQEAqEkb5uPT1WwHuVFKMxfXcT91qJuXcdg5fK4fgkOPXMaICQoL0Dnitp/g VZbJEbG0cQrC0m1KQN8bmjRDv+0RCAztsB7RbSF6P7Z7S0C3fIM29UggY0tj/jbQ rjwFxeTNTTg+ESsBOOsYuu+hX0P5tIquWrIdqv8gPR1mkbN9g7U0p3U07wQc1du8 Flm6wp0KhuARB/APeM39gXrYc1O46fVs+Xt3mk05RQ/mOgTDx81apPdRd5tg994e qIu+39TnU1dzy/b4J41fM3+bpe2HnKjqIuDOY6vxGIVSsoMT0QSLv1Bnf7+E9CQB tUXI8zbmP33ZxZZzbLu/+EFmJQRUPw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org