$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7166EE48A06611EDB0EA346DC4F9AE02.roa File: 7166EE48A06611EDB0EA346DC4F9AE02.roa (raw, json) Hash identifier: +PbRudluJpLPEhf8+OoAKSaAIqrI3JVY+022aj22B6g= Subject key identifier: 85:17:A1:61:95:A7:6B:75:12:66:3E:3D:38:04:62:A9:CD:83:55:58 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 712F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7166EE48A06611EDB0EA346DC4F9AE02.roa Signing time: Wed 10 May 2023 16:47:01 +0000 ROA not before: Wed 10 May 2023 16:47:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150639 IP address blocks: 103.76.118.0/24 maxlen: 24 103.76.119.0/24 maxlen: 24 2001:df1:df40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28975 (0x712f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:01 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca85-a86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:cd:1a:12:96:1c:d7:55:67:c4:34:1c:db: 3c:e1:52:b8:be:f8:28:cd:8d:dd:39:81:ba:e8:23: 51:0b:45:f6:eb:4e:8c:09:f6:33:31:a7:1f:40:bb: 73:d3:ce:bf:17:e2:03:8b:7e:d0:9e:af:a6:19:23: 19:d9:7f:1e:14:6c:68:b8:7d:48:47:e4:3b:5d:94: f7:9c:8c:70:7d:a1:32:bd:52:a2:62:57:b8:40:f3: 9f:c4:67:ee:0f:08:ec:a5:6f:c2:55:bf:83:12:ab: 3d:b5:e6:32:eb:a1:c5:df:89:a3:72:6e:97:8c:ba: 01:61:dc:9d:39:86:b0:f6:58:69:7b:07:9d:ba:82: 4d:18:f7:d6:d4:54:76:ff:d7:b5:f2:b8:08:82:22: 2d:05:fe:65:b5:fe:9a:d6:45:97:dd:fa:cc:65:31: b3:65:21:10:7f:4e:93:92:a5:7b:72:e1:78:ea:08: a0:39:45:2b:b9:d2:1c:91:cf:70:98:a8:1d:c3:3f: e0:6a:37:72:86:4e:5a:1d:d6:0d:81:d7:53:a3:55: 64:b3:65:f4:fc:42:bb:b2:01:3e:ff:58:ac:61:94: 54:af:85:4a:f5:08:62:62:20:ac:34:43:cd:30:61: 61:71:d0:08:6b:e4:0b:ed:1a:86:8c:b4:71:0f:21: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:17:A1:61:95:A7:6B:75:12:66:3E:3D:38:04:62:A9:CD:83:55:58 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7166EE48A06611EDB0EA346DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.118.0/23 IPv6: 2001:df1:df40::/48 Signature Algorithm: sha256WithRSAEncryption 60:d5:cd:1f:60:74:c8:75:a5:5e:88:83:d4:27:e3:11:a8:14: 5c:a7:b6:dd:5b:77:c6:8d:a6:b0:d4:24:7f:b9:c3:98:65:ad: 9d:6f:00:4c:97:19:95:3c:9a:69:4e:69:82:80:08:80:20:d4: b1:42:df:75:e4:b6:dc:28:af:b5:a4:6d:7d:7c:ab:33:49:84: bd:84:16:e3:04:e7:a9:d5:e6:e6:9a:07:9f:e6:41:09:8d:9f: 18:0f:63:02:87:da:01:f6:08:2f:d9:af:c2:35:c6:9c:b7:f3: bb:5b:52:30:17:0b:5b:b7:cf:c1:1e:55:43:26:f6:85:1c:a5: 46:99:8a:fd:ce:7e:fb:6c:f6:8d:b7:ad:10:d3:07:8d:6f:15: 6e:32:a7:28:74:19:a4:19:0a:a0:33:3c:77:4c:eb:49:69:aa: bf:6d:aa:3a:56:5e:bf:11:68:59:ef:2c:5c:c9:80:68:55:b8: 71:7c:85:9e:50:b0:81:61:da:2b:db:ca:ef:fc:01:8f:9d:8d: 01:3b:b9:37:55:e3:e5:79:35:e5:45:72:41:98:8d:8c:ad:b4: 56:48:06:1c:fe:c0:af:38:71:29:44:f2:45:35:b1:c6:67:b0: 6a:13:39:8b:3b:b6:87:f7:e4:46:c7:5a:e6:c5:d5:9b:b5:59: d9:49:13:d3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzAxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E4NS1hODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HvNGhKWHNdVZ8Q0HNs84VK4vvgozY3dOYG66CNRC0X2606MCfYzMacfQLtz 086/F+IDi37Qnq+mGSMZ2X8eFGxouH1IR+Q7XZT3nIxwfaEyvVKiYle4QPOfxGfu DwjspW/CVb+DEqs9teYy66HF34mjcm6XjLoBYdydOYaw9lhpeweduoJNGPfW1FR2 /9e18rgIgiItBf5ltf6a1kWX3frMZTGzZSEQf06TkqV7cuF46gigOUUrudIckc9w mKgdwz/gajdyhk5aHdYNgddTo1Vks2X0/EK7sgE+/1isYZRUr4VK9QhiYiCsNEPN MGFhcdAIa+QL7RqGjLRxDyG0cwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIUXoWGV p2t1EmY+PTgEYqnNg1VYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzE2NkVFNDhB MDY2MTFFREIwRUEzNDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnTHYwDwQCAAIwCQMHACABDfHfQDANBgkqhkiG9w0BAQsF AAOCAQEAYNXNH2B0yHWlXoiD1CfjEagUXKe23Vt3xo2msNQkf7nDmGWtnW8ATJcZ lTyaaU5pgoAIgCDUsULfdeS23CivtaRtfXyrM0mEvYQW4wTnqdXm5poHn+ZBCY2f GA9jAofaAfYIL9mvwjXGnLfzu1tSMBcLW7fPwR5VQyb2hRylRpmK/c5++2z2jbet ENMHjW8VbjKnKHQZpBkKoDM8d0zrSWmqv22qOlZevxFoWe8sXMmAaFW4cXyFnlCw gWHaK9vK7/wBj52NATu5N1Xj5Xk15UVyQZiNjK20VkgGHP7ArzhxKUTyRTWxxmew ahM5izu2h/fkRsda5sXVm7VZ2UkT0w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org