$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa File: 732F297C151E11ECA422CD83C4F9AE02.roa (raw, json) Hash identifier: EO9IDzNEIfedPPPQAJZTwyJeewrdMru1+Po74DwZcrs= Subject key identifier: 09:2C:2B:D5:7D:93:17:8D:FC:D0:5F:54:6E:5B:95:8A:10:89:AE:90 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FAD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa Signing time: Wed 10 May 2023 16:39:57 +0000 ROA not before: Wed 10 May 2023 16:39:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146890 IP address blocks: 103.173.20.0/23 maxlen: 24 2001:df1:cb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28589 (0x6fad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:39:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8dc-5b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:b1:4b:6a:41:b2:a8:29:bd:55:5e:a7:b7: da:90:df:a4:f5:2b:be:22:61:cc:40:8d:33:85:e9: 71:57:be:a2:ff:d6:b3:ca:f6:bb:76:80:14:c1:99: b0:ad:8a:fd:f0:bf:e8:cd:4c:99:6f:29:20:23:72: 74:a9:7d:69:6e:17:22:f7:e1:a3:6d:3f:eb:8a:ce: bc:a6:0e:4a:be:96:26:c0:15:ff:bb:f9:ea:65:f9: d0:90:2a:22:16:6c:47:40:b5:a3:c7:92:96:b8:1e: 7c:c8:5c:a7:f3:6c:0d:cf:d2:f7:55:4b:e5:e2:7f: c1:73:a0:fc:be:9a:36:29:45:f0:ab:16:e6:2f:bf: 7e:85:f4:65:dc:42:ff:51:4a:47:e2:f1:91:3f:33: cf:2b:34:9f:3f:47:b6:b2:85:c9:27:4c:ee:ef:5c: 6b:ac:52:e3:5b:65:79:ab:ae:a2:03:a5:2f:b0:2c: 71:6d:42:54:cb:c9:c0:45:70:41:6e:89:29:7e:ad: ea:ad:0c:0b:8d:36:27:21:5a:2b:a2:57:71:6e:84: e1:13:b2:4a:64:f2:31:03:d1:a6:2d:88:ab:b5:aa: 28:31:c2:03:f0:4a:73:ab:c6:01:cd:7a:1d:94:03: b9:e0:4e:ec:c6:f1:af:2b:9b:62:52:f3:5d:99:8a: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2C:2B:D5:7D:93:17:8D:FC:D0:5F:54:6E:5B:95:8A:10:89:AE:90 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/732F297C151E11ECA422CD83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.20.0/23 IPv6: 2001:df1:cb40::/48 Signature Algorithm: sha256WithRSAEncryption a7:49:f5:a7:f5:bd:03:fc:94:10:7e:51:0f:73:ff:ca:ef:dd: 40:7d:4f:63:8f:82:96:21:f7:d2:03:47:73:b6:17:c6:24:2d: 35:bb:2e:2d:c7:bf:03:94:fa:32:a5:c9:36:98:ec:df:1a:31: 35:bb:fd:a0:5c:ee:2a:86:30:14:f6:a4:19:10:21:38:79:bd: 0c:97:fa:c3:fe:33:9d:fa:9c:a2:f7:d2:80:63:7b:09:84:c6: 49:60:78:58:02:16:92:22:d3:73:e5:6f:24:7c:c0:7e:97:91: 09:ef:86:5a:0e:03:5b:e6:56:38:3a:8f:a7:86:e8:d7:4a:3e: 2c:37:6d:ef:63:8f:4b:06:d3:32:1e:bb:c8:67:0e:18:f7:c4: 83:d4:f9:48:2e:a6:55:c2:7d:73:95:b1:16:8c:a4:f2:79:7c: 96:72:df:d0:52:be:03:b5:c3:6a:94:fe:fa:23:a5:dc:2c:d3: 26:9f:13:c5:8b:8c:87:60:9a:c5:b5:f3:1e:f8:f2:6f:de:4c: 69:3f:15:d7:b3:85:79:51:ce:d1:0b:d6:f5:04:a3:91:a9:f3: 31:43:1c:30:76:d2:09:a4:33:10:69:38:2f:09:ee:3c:fe:ae: da:49:2c:80:15:7a:f4:e7:5c:2c:10:53:fb:dd:90:b9:23:3f: a8:31:a1:b6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTU3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhkYy01YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuROxS2pBsqgpvVVep7fakN+k9Su+ImHMQI0zhelxV76i/9azyva7doAUwZmw rYr98L/ozUyZbykgI3J0qX1pbhci9+GjbT/ris68pg5KvpYmwBX/u/nqZfnQkCoi FmxHQLWjx5KWuB58yFyn82wNz9L3VUvl4n/Bc6D8vpo2KUXwqxbmL79+hfRl3EL/ UUpH4vGRPzPPKzSfP0e2soXJJ0zu71xrrFLjW2V5q66iA6UvsCxxbUJUy8nARXBB bokpfq3qrQwLjTYnIVoroldxboThE7JKZPIxA9GmLYirtaooMcID8Epzq8YBzXod lAO54E7sxvGvK5tiUvNdmYpZ/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAksK9V9 kxeN/NBfVG5blYoQia6QMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzMyRjI5N0Mx NTFFMTFFQ0E0MjJDRDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrRQwDwQCAAIwCQMHACABDfHLQDANBgkqhkiG9w0BAQsF AAOCAQEAp0n1p/W9A/yUEH5RD3P/yu/dQH1PY4+CliH30gNHc7YXxiQtNbsuLce/ A5T6MqXJNpjs3xoxNbv9oFzuKoYwFPakGRAhOHm9DJf6w/4znfqcovfSgGN7CYTG SWB4WAIWkiLTc+VvJHzAfpeRCe+GWg4DW+ZWODqPp4bo10o+LDdt72OPSwbTMh67 yGcOGPfEg9T5SC6mVcJ9c5WxFoyk8nl8lnLf0FK+A7XDapT++iOl3CzTJp8TxYuM h2CaxbXzHvjyb95MaT8V17OFeVHO0QvW9QSjkanzMUMcMHbSCaQzEGk4LwnuPP6u 2kksgBV69OdcLBBT+92QuSM/qDGhtg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org