$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729D426E7A2E11EAB9C9B47EC4F9AE02.roa File: 729D426E7A2E11EAB9C9B47EC4F9AE02.roa (raw, json) Hash identifier: yiLm41lRRdLyk4bxC8Z3Y4YUSV25BBDksZgjckqcChg= Subject key identifier: 95:CB:F0:7E:E4:85:C8:7F:7B:85:88:7C:74:DC:8F:1E:9D:21:47:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 718C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729D426E7A2E11EAB9C9B47EC4F9AE02.roa Signing time: Wed 10 May 2023 16:48:47 +0000 ROA not before: Wed 10 May 2023 16:48:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45536 IP address blocks: 103.224.32.0/22 maxlen: 24 2405:e8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29068 (0x718c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaef-fc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:be:a8:36:93:3f:69:ef:10:a1:70:fe:75: 59:5a:1f:6c:14:e9:65:79:12:6a:4f:b8:22:a5:5b: 74:40:46:04:50:9b:d0:1d:00:81:83:39:e9:bb:8c: 8a:00:90:ca:6e:e7:4f:dc:95:77:3c:77:85:fb:1b: 9e:ef:99:b7:0c:9b:bb:44:53:ca:4c:7b:30:de:5a: 50:46:ee:7f:33:0e:8d:c2:af:fb:2e:cc:4a:a8:87: 54:a0:e0:c6:98:71:21:73:1a:0b:19:e1:27:15:b9: 46:ec:81:4a:41:ed:fa:ef:75:bf:2e:91:40:ea:fe: a1:99:d9:9e:e9:73:09:77:07:41:13:af:62:d0:a0: 4e:95:d7:0e:f8:f2:bc:c5:3a:27:1d:44:7f:97:21: 5c:01:19:c3:32:11:d0:1a:fb:f1:29:20:76:e4:cd: 22:f7:b9:3d:dc:44:14:eb:ee:8a:78:ab:fe:7b:79: 1f:f9:28:b1:e1:d0:60:77:60:85:7e:17:bc:d5:98: 58:5d:aa:79:2b:e9:59:e8:71:5e:dd:31:2a:af:bd: 6c:ef:ba:61:ec:65:9f:dc:42:1c:5e:21:c3:b4:c2: df:2a:1d:09:df:a0:89:27:41:59:e9:ab:f2:de:14: 70:e8:0d:5c:32:99:2e:f1:75:15:27:71:b6:37:82: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CB:F0:7E:E4:85:C8:7F:7B:85:88:7C:74:DC:8F:1E:9D:21:47:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/729D426E7A2E11EAB9C9B47EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.32.0/22 IPv6: 2405:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:62:dd:7a:93:dc:df:7f:4b:ae:4d:78:79:9a:09:68:c1:f2: 51:b7:8d:50:59:42:be:fd:af:05:8c:69:dd:e3:ef:c9:3e:65: 2a:80:46:6d:0e:de:53:4e:18:cc:40:88:b2:41:c9:17:5d:bf: 77:14:ef:84:59:80:60:0f:ac:83:27:d3:2b:ae:f6:17:9d:be: d1:fb:3f:bf:d3:8d:d1:9e:39:f8:0e:a6:f7:3d:11:5f:cf:f6: b2:79:21:42:ed:98:46:56:8f:bb:f6:5b:2f:21:5a:d1:4b:8c: 87:2b:bb:c9:aa:0a:28:1f:5e:f6:c3:4a:0b:14:83:41:2f:bc: 06:10:73:13:81:64:03:09:6c:06:ff:16:36:a0:98:e3:1e:7c: be:fb:a9:59:c4:04:33:4e:3f:33:02:62:02:53:b1:af:9b:b3: 51:b5:01:31:38:39:2a:db:dc:b3:f1:13:53:f2:7c:4b:36:42: 89:e8:e8:70:82:13:d7:a5:84:74:53:fd:67:9f:9f:01:dd:ea: c4:42:7c:4f:a7:51:d6:03:81:e0:f5:3f:d2:fd:9e:4f:31:66: b9:81:8b:ac:a5:e7:b2:ba:2f:f4:19:a7:9b:3d:e9:10:b9:f7: e0:12:72:1a:bb:28:85:24:18:16:46:43:98:9a:7e:df:f7:f9: 89:89:fa:c0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICcYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FlZi1mYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEK+qDaTP2nvEKFw/nVZWh9sFOlleRJqT7gipVt0QEYEUJvQHQCBgznpu4yK AJDKbudP3JV3PHeF+xue75m3DJu7RFPKTHsw3lpQRu5/Mw6Nwq/7LsxKqIdUoODG mHEhcxoLGeEnFblG7IFKQe3673W/LpFA6v6hmdme6XMJdwdBE69i0KBOldcO+PK8 xTonHUR/lyFcARnDMhHQGvvxKSB25M0i97k93EQU6+6KeKv+e3kf+Six4dBgd2CF fhe81ZhYXap5K+lZ6HFe3TEqr71s77ph7GWf3EIcXiHDtMLfKh0J36CJJ0FZ6avy 3hRw6A1cMpku8XUVJ3G2N4IGxQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJXL8H7k hch/e4WIfHTcjx6dIUdMMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzI5RDQyNkU3 QTJFMTFFQUI5QzlCNDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn4CAwDQQCAAIwBwMFACQF6MAwDQYJKoZIhvcNAQELBQAD ggEBAI5i3XqT3N9/S65NeHmaCWjB8lG3jVBZQr79rwWMad3j78k+ZSqARm0O3lNO GMxAiLJByRddv3cU74RZgGAPrIMn0yuu9hedvtH7P7/TjdGeOfgOpvc9EV/P9rJ5 IULtmEZWj7v2Wy8hWtFLjIcru8mqCigfXvbDSgsUg0EvvAYQcxOBZAMJbAb/Fjag mOMefL77qVnEBDNOPzMCYgJTsa+bs1G1ATE4OSrb3LPxE1PyfEs2Qono6HCCE9el hHRT/WefnwHd6sRCfE+nUdYDgeD1P9L9nk8xZrmBi6yl57K6L/QZp5s96RC59+AS chq7KIUkGBZGQ5iaft/3+YmJ+sA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org