$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa File: 72BB0EE8024B11EB8A413121C4F9AE02.roa (raw, json) Hash identifier: 263P8Yj0AsaV3j+prT0d1yoA1MfyDOpv1kEFbglYnfc= Subject key identifier: 2F:86:67:EB:07:8C:A1:A9:18:A4:E9:18:C7:41:8F:7D:6B:04:7A:FC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7184 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:38 +0000 ROA not before: Wed 10 May 2023 16:48:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45189 IP address blocks: 122.99.124.0/22 maxlen: 24 203.175.176.0/24 maxlen: 24 203.185.191.0/24 maxlen: 24 223.26.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29060 (0x7184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcae6-0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:01:8e:04:87:07:3b:38:9a:27:e8:ad:17: ae:9c:c3:16:e8:67:da:79:f3:64:c5:29:d3:fc:49: 66:56:f3:3b:56:34:38:45:32:f6:82:73:35:e9:60: 0d:24:69:42:45:a7:cf:4e:56:d9:78:b0:cd:af:20: 32:42:cc:6a:71:dc:6b:72:e7:f1:28:ed:8f:1b:97: da:9c:55:13:71:1b:fb:6b:d6:dd:f0:a9:b7:60:85: 14:2b:fd:e9:7c:a2:20:e2:33:41:e8:e4:15:02:ea: 96:c2:3a:39:f4:67:34:b4:ee:66:85:af:ee:2b:8c: ba:6c:15:41:fd:66:95:31:1d:d0:7c:ac:ab:6c:4c: 5e:98:e8:b2:b1:52:15:6c:60:9a:98:e0:f6:14:d1: 90:20:eb:a9:b0:4e:51:dd:fa:e3:18:bb:8d:d6:69: 57:b0:e0:35:21:2c:3a:e3:64:02:07:9e:6d:80:1c: 4a:5b:a8:cf:a8:e6:c4:a5:92:79:b1:2a:c6:37:f8: 79:23:64:b6:3a:7e:11:7e:a5:85:fe:d7:0e:74:99: bb:44:37:ef:7b:6f:4d:85:f5:b3:7d:3a:3e:1b:0c: d5:57:2f:18:ff:cd:b1:99:5c:e9:79:c4:74:c7:e1: 78:44:3c:82:59:59:84:c2:4a:2b:33:e7:2a:3f:34: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:67:EB:07:8C:A1:A9:18:A4:E9:18:C7:41:8F:7D:6B:04:7A:FC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.99.124.0/22 203.175.176.0/24 203.185.191.0/24 223.26.32.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:32:93:62:60:59:60:83:fa:18:2b:bc:10:c1:d5:1c:31:f6: ec:16:e9:31:eb:06:85:59:71:20:04:67:43:c6:a0:6a:e0:f8: 68:a5:fc:04:1d:2c:be:84:a5:57:4e:21:cc:f7:ae:46:0b:d5: aa:7f:34:88:7c:3e:d1:1e:66:df:e2:85:c7:72:ca:85:1c:5a: 60:8d:ea:27:ee:71:e3:cd:ac:f1:c9:41:4a:b7:83:8a:f9:76: e5:a8:3c:f6:3b:a0:7e:97:5f:45:c4:da:48:87:fd:b7:06:95: 35:8a:b0:e7:be:94:87:01:1b:2a:89:6c:cc:34:8b:5b:35:5c: 4c:21:4a:79:4d:15:a5:f6:86:e6:6c:33:a0:e9:38:ef:57:50: cf:f0:91:e9:06:91:dd:ac:9e:c1:22:3e:b9:a7:7d:73:30:8a: a2:70:de:58:4b:f8:1b:1e:5c:55:29:d4:8c:74:c0:3b:7e:8e: 23:17:09:e2:d7:30:26:d0:97:82:22:55:25:df:b6:c2:02:0a: 67:67:cd:cb:e1:84:f5:86:25:8b:00:f1:89:de:68:4c:c5:78: 00:e5:1f:d1:75:b7:b6:5b:6a:42:ff:29:04:99:2a:f1:f6:11: 69:9a:00:74:4a:cb:86:a5:7d:b7:5e:ab:6d:9e:95:cb:de:24: c4:e3:39:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICcYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FlNi0wYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9wBjgSHBzs4miforReunMMW6GfaefNkxSnT/ElmVvM7VjQ4RTL2gnM16WAN JGlCRafPTlbZeLDNryAyQsxqcdxrcufxKO2PG5fanFUTcRv7a9bd8Km3YIUUK/3p fKIg4jNB6OQVAuqWwjo59Gc0tO5mha/uK4y6bBVB/WaVMR3QfKyrbExemOiysVIV bGCamOD2FNGQIOupsE5R3frjGLuN1mlXsOA1ISw642QCB55tgBxKW6jPqObEpZJ5 sSrGN/h5I2S2On4RfqWF/tcOdJm7RDfve29NhfWzfTo+GwzVVy8Y/82xmVzpecR0 x+F4RDyCWVmEwkorM+cqPzRekwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFC+GZ+sH jKGpGKTpGMdBj31rBHr8MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJCQjBFRTgw MjRCMTFFQjhBNDEzMTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJ6Y3wDBADLr7ADBADLub8DBATfGiAwDQYJKoZIhvcNAQEL BQADggEBAIsyk2JgWWCD+hgrvBDB1Rwx9uwW6THrBoVZcSAEZ0PGoGrg+Gil/AQd LL6EpVdOIcz3rkYL1ap/NIh8PtEeZt/ihcdyyoUcWmCN6ifucePNrPHJQUq3g4r5 duWoPPY7oH6XX0XE2kiH/bcGlTWKsOe+lIcBGyqJbMw0i1s1XEwhSnlNFaX2huZs M6DpOO9XUM/wkekGkd2snsEiPrmnfXMwiqJw3lhL+BseXFUp1Ix0wDt+jiMXCeLX MCbQl4IiVSXftsICCmdnzcvhhPWGJYsA8YneaEzFeADlH9F1t7ZbakL/KQSZKvH2 EWmaAHRKy4alfbdeq22elcveJMTjOeg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org