$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa File: 733FFA3203B211EBB4CD2E58C4F9AE02.roa (raw, json) Hash identifier: Yy7imLPuaqdE92iPy0h3mx2X21vKhDIgZMJGwyqfHD4= Subject key identifier: A1:B0:53:67:87:69:BB:84:F6:99:EC:D4:E9:BB:6D:20:2A:13:5A:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 69E4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa Signing time: Wed 10 May 2023 16:12:02 +0000 ROA not before: Wed 10 May 2023 16:12:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 131473 IP address blocks: 103.4.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27108 (0x69e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:12:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc252-9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:58:8d:d6:65:35:e1:bc:b7:8c:70:6b:48: 42:fc:07:1a:47:4f:9e:aa:d3:cd:ec:eb:06:b4:27: 13:44:fc:da:06:da:63:3f:1f:3b:b3:53:1c:8b:61: c7:c7:9f:36:a2:1e:1e:a2:d5:5e:a2:d5:aa:ce:bd: b8:5a:1f:f6:e2:60:3d:cd:33:35:cc:6c:5c:b7:8f: 42:6c:5a:3f:1f:c8:7c:1e:bd:0a:61:e6:cf:97:ba: 57:54:8c:f4:55:93:dc:fd:82:bf:71:22:26:d8:46: 7f:d1:95:f9:c9:6b:98:39:04:9e:e2:69:cc:ab:b2: 90:e8:6f:60:19:77:c0:78:70:38:e9:42:09:71:ab: c0:93:e6:a9:72:a0:04:aa:a4:f7:7f:b1:07:55:12: 81:42:de:0e:f1:62:d7:50:5f:44:bb:57:77:04:81: 68:2a:9e:f1:93:5e:b8:65:3b:b8:e4:52:29:8e:26: 07:f4:94:7f:43:52:93:cb:a2:82:fd:24:c9:a7:76: b0:12:14:fc:f3:91:10:80:a7:bd:45:f4:e8:cf:9f: 70:73:9a:09:16:56:e7:2d:41:2b:4f:6d:51:08:61: 20:b5:cf:29:51:94:a2:15:2a:dc:c7:dd:c6:9a:8a: 60:4c:33:87:a8:61:c7:b7:43:f0:cb:a1:c0:6f:ad: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B0:53:67:87:69:BB:84:F6:99:EC:D4:E9:BB:6D:20:2A:13:5A:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.220.0/22 Signature Algorithm: sha256WithRSAEncryption af:f2:4b:75:27:16:65:a3:94:f9:3f:d2:3b:f6:9b:b2:72:a0: 19:23:ce:8e:32:04:08:49:ea:12:c8:86:2c:78:c5:26:fc:67: 81:5d:84:4a:23:e3:94:d2:00:95:61:9f:86:97:02:8c:28:e3: 72:cc:45:46:ff:ff:c8:41:35:f1:3f:f1:21:7e:e6:54:58:b3: cf:8b:69:7b:af:7b:3d:40:b7:af:d8:95:e5:cc:4e:a2:5c:c9: d5:19:39:59:85:ad:3b:ec:f9:14:b0:b7:c1:f3:12:59:c0:b2: e3:93:bd:09:15:cc:a3:49:2f:af:bc:67:08:43:11:41:5a:a1: bd:0d:7e:c4:19:93:a1:1e:91:bc:7e:86:f7:ef:88:2b:20:86: 91:d7:95:93:52:27:bf:09:2e:87:f4:3e:ce:4b:0c:cc:0c:89: e8:c1:97:64:71:1c:3d:b7:3e:91:d5:4d:2f:d4:55:2e:f7:49: b5:19:6a:7d:c5:e4:96:44:ba:7a:31:49:a5:c7:3e:11:1e:45: b7:a8:46:7a:cf:75:e5:aa:46:cf:f1:f0:08:f5:0c:1c:12:96: 33:98:f4:b9:f6:fe:c6:59:ca:7e:f5:8f:1b:9d:5b:f1:f2:10: 55:e6:da:cb:37:af:c9:e7:a7:5f:21:39:b5:cb:4f:9a:16:84: db:7e:ea:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMjAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI1Mi05YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoBYjdZlNeG8t4xwa0hC/AcaR0+eqtPN7OsGtCcTRPzaBtpjPx87s1Mci2HH x582oh4eotVeotWqzr24Wh/24mA9zTM1zGxct49CbFo/H8h8Hr0KYebPl7pXVIz0 VZPc/YK/cSIm2EZ/0ZX5yWuYOQSe4mnMq7KQ6G9gGXfAeHA46UIJcavAk+apcqAE qqT3f7EHVRKBQt4O8WLXUF9Eu1d3BIFoKp7xk164ZTu45FIpjiYH9JR/Q1KTy6KC /STJp3awEhT885EQgKe9RfToz59wc5oJFlbnLUErT21RCGEgtc8pUZSiFSrcx93G mopgTDOHqGHHt0Pwy6HAb62UWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKGwU2eH abuE9pns1Om7bSAqE1qCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzMzRkZBMzIw M0IyMTFFQkI0Q0QyRTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBNwwDQYJKoZIhvcNAQELBQADggEBAK/yS3UnFmWjlPk/ 0jv2m7JyoBkjzo4yBAhJ6hLIhix4xSb8Z4FdhEoj45TSAJVhn4aXAowo43LMRUb/ /8hBNfE/8SF+5lRYs8+LaXuvez1At6/YleXMTqJcydUZOVmFrTvs+RSwt8HzElnA suOTvQkVzKNJL6+8ZwhDEUFaob0NfsQZk6Eekbx+hvfviCsghpHXlZNSJ78JLof0 Ps5LDMwMiejBl2RxHD23PpHVTS/UVS73SbUZan3F5JZEunoxSaXHPhEeRbeoRnrP deWqRs/x8Aj1DBwSljOY9Ln2/sZZyn71jxudW/HyEFXm2ss3r8nnp18hObXLT5oW hNt+6sA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org