$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa File: 72C90EBE528911EC8E8FCB87C4F9AE02.roa (raw, json) Hash identifier: DM/c0ckq8nwANLda0prP0v3v1QY6NZH/wR4rBWdF8ek= Subject key identifier: C4:E9:21:36:17:C4:28:CD:39:E5:94:23:C5:93:2B:B6:1D:0F:78:BF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A74 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa Signing time: Wed 20 Sep 2023 12:34:08 +0000 ROA not before: Wed 20 Sep 2023 12:34:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138565 IP address blocks: 103.133.22.0/24 maxlen: 24 103.152.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31348 (0x7a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 20 12:34:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=650ae6bf-4ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:50:e4:a2:2f:98:4d:30:9e:33:7a:4c:66: 5b:b6:20:8f:66:33:89:ea:43:ea:61:78:ba:fe:96: b8:84:f9:67:0e:6c:88:33:4c:85:62:95:92:cb:96: 15:77:12:1d:49:3e:9e:54:ac:93:5c:0d:7d:03:06: d6:d2:c4:7a:dc:94:9e:e8:85:a6:b4:19:ca:a1:19: de:4f:ff:5a:49:6f:96:2a:f2:2f:8f:16:cb:1a:ff: 3c:00:db:8b:14:d2:3a:30:54:10:8c:0a:63:bd:3d: 71:c1:18:9e:60:e1:be:f1:50:b3:d1:4c:29:e4:5a: e3:86:b4:63:97:cc:12:87:64:c7:62:09:fb:38:70: 5f:5e:5b:e5:24:12:5b:82:b0:d1:6e:dc:37:5e:c5: 7b:d7:5f:0e:ac:c8:ab:53:58:64:55:60:ed:78:51: 5e:2f:1e:45:8d:8a:73:e5:08:f4:55:17:65:82:38: c4:d2:1f:5e:f9:9e:cf:a6:ed:7e:b8:7b:e6:d0:09: 52:d4:56:2f:02:be:0e:4d:9d:f3:7c:e0:8d:a3:28: 92:ff:d3:05:d0:e7:ac:2c:05:e8:ec:26:35:e2:ae: 7f:13:47:48:b2:4b:79:99:af:6c:32:f6:90:8d:7e: 60:7a:ee:54:0c:62:ce:2b:a0:23:06:84:be:66:aa: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:21:36:17:C4:28:CD:39:E5:94:23:C5:93:2B:B6:1D:0F:78:BF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72C90EBE528911EC8E8FCB87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.22.0/24 103.152.6.0/24 Signature Algorithm: sha256WithRSAEncryption a3:88:90:95:ba:e3:c2:32:ab:19:b6:7a:27:ac:ab:95:af:9e: 6f:7a:18:05:ce:8e:9d:31:2f:5c:29:a5:4c:45:a5:0e:b2:0e: ae:53:4b:b5:d4:cf:fb:56:d2:48:6d:e9:98:34:96:69:c1:9a: 63:9f:19:95:7e:fc:9c:17:d6:00:63:78:8c:61:12:18:ba:ec: 64:c3:e3:78:70:29:e5:d8:4a:66:bc:e6:87:61:d1:c8:ad:6b: 2d:1a:fd:68:09:d2:3a:7d:cc:7a:80:d5:9a:79:92:fe:8b:0a: 81:0f:8a:2d:68:47:df:3f:f5:00:43:a8:58:d0:78:30:2c:d2: a7:1a:33:3a:8c:23:a6:f1:50:21:19:8d:f5:ca:0a:eb:b0:24: b3:60:d7:a5:16:f1:20:87:aa:d0:bc:81:45:00:96:37:16:1a: a6:78:df:f5:2f:5a:0e:a9:7f:59:5e:e1:9f:84:5a:28:78:f9: dc:4a:cf:6b:67:0d:e0:f3:0c:47:83:f1:9e:01:26:de:66:09: 82:d7:18:9b:c1:d8:7b:72:a3:90:38:04:23:fd:64:0e:5b:cb: 21:a6:f0:cf:d6:08:7a:17:98:b0:8b:40:77:84:d2:71:b3:af: 21:13:eb:84:af:4b:c5:10:04:92:72:84:43:9a:02:6a:9e:88: 30:44:b7:ce -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICenQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTIwMTIzNDA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBhZTZiZi00ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydNQ5KIvmE0wnjN6TGZbtiCPZjOJ6kPqYXi6/pa4hPlnDmyIM0yFYpWSy5YV dxIdST6eVKyTXA19AwbW0sR63JSe6IWmtBnKoRneT/9aSW+WKvIvjxbLGv88ANuL FNI6MFQQjApjvT1xwRieYOG+8VCz0Uwp5FrjhrRjl8wSh2THYgn7OHBfXlvlJBJb grDRbtw3XsV7118OrMirU1hkVWDteFFeLx5FjYpz5Qj0VRdlgjjE0h9e+Z7Ppu1+ uHvm0AlS1FYvAr4OTZ3zfOCNoyiS/9MF0OesLAXo7CY14q5/E0dIskt5ma9sMvaQ jX5geu5UDGLOK6AjBoS+ZqqT7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMTpITYX xCjNOeWUI8WTK7YdD3i/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJDOTBFQkU1 Mjg5MTFFQzhFOEZDQjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnhRYDBABnmAYwDQYJKoZIhvcNAQELBQADggEBAKOIkJW6 48Iyqxm2eiesq5Wvnm96GAXOjp0xL1wppUxFpQ6yDq5TS7XUz/tW0kht6Zg0lmnB mmOfGZV+/JwX1gBjeIxhEhi67GTD43hwKeXYSma85odh0citay0a/WgJ0jp9zHqA 1Zp5kv6LCoEPii1oR98/9QBDqFjQeDAs0qcaMzqMI6bxUCEZjfXKCuuwJLNg16UW 8SCHqtC8gUUAljcWGqZ43/UvWg6pf1le4Z+EWih4+dxKz2tnDeDzDEeD8Z4BJt5m CYLXGJvB2Htyo5A4BCP9ZA5byyGm8M/WCHoXmLCLQHeE0nGzryET64SvS8UQBJJy hEOaAmqeiDBEt84= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org