$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735DCBA211E511EBAE110D2AC4F9AE02.roa File: 735DCBA211E511EBAE110D2AC4F9AE02.roa (raw, json) Hash identifier: prsV7hTSlGUVQaHu/J6b9HWhG9hP4rZhT42t6Q0YwAg= Subject key identifier: FE:39:07:B0:89:30:28:A8:C9:90:5C:0A:36:15:36:D1:6D:F0:ED:4E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B6E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735DCBA211E511EBAE110D2AC4F9AE02.roa Signing time: Wed 10 May 2023 16:19:39 +0000 ROA not before: Wed 10 May 2023 16:19:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134917 IP address blocks: 103.88.54.0/23 maxlen: 24 103.210.112.0/23 maxlen: 24 2001:df4:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27502 (0x6b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:39 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc41b-093c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ee:5d:f8:bb:c1:10:8c:ac:5d:06:6d:87:5e: ca:5d:db:fb:c7:b5:de:b4:2b:b9:b2:bb:32:6d:e0: 41:6d:d8:96:f5:ed:e1:bf:cf:cc:39:3b:26:d1:4e: f9:c9:ba:10:5f:e5:c7:c9:55:74:7a:97:9f:42:f7: f9:1d:34:df:9e:29:e3:c0:be:b8:51:f2:d3:9f:12: b4:fe:41:14:92:1d:d0:99:67:df:69:82:9e:38:73: f2:cb:bf:73:bf:d4:3e:b0:ed:3f:d2:42:22:bd:81: a9:10:ed:ac:d1:41:cd:8f:73:6b:9c:29:7c:88:d7: 68:8b:97:a9:a5:07:b9:73:88:83:41:59:0a:5a:d7: 36:b8:e1:81:b2:9a:68:62:b3:bf:17:85:3b:9d:9f: 5f:2e:57:40:3d:c5:0d:be:0c:49:90:cd:c2:03:3b: 23:7b:37:6b:31:5b:b7:a0:10:16:da:c0:63:c3:88: ae:7e:66:e4:3a:91:7c:7b:20:1c:67:89:b2:fd:37: 02:d5:9f:2e:d0:48:d7:77:ef:d4:14:0d:1f:ea:68: 1e:13:5c:88:d9:da:e9:b2:28:d4:fb:11:63:20:09: d9:61:76:fa:d4:4f:d2:a7:54:b6:64:e2:65:d7:30: ff:f1:70:8f:d1:5a:02:4e:1b:a4:c4:c5:bb:95:09: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:39:07:B0:89:30:28:A8:C9:90:5C:0A:36:15:36:D1:6D:F0:ED:4E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/735DCBA211E511EBAE110D2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.54.0/23 103.210.112.0/23 IPv6: 2001:df4:d780::/48 Signature Algorithm: sha256WithRSAEncryption 7c:d0:4c:d8:56:91:fb:1c:03:d2:64:a9:8c:09:29:b1:9a:a9: 47:cf:07:39:04:3f:ed:f4:c4:e5:32:73:97:db:46:6b:06:5c: 28:5a:84:8c:9d:9d:5e:e3:86:32:50:1a:ae:19:28:b5:38:09: c3:3b:9a:87:b9:a6:c0:eb:2a:9f:79:f8:34:4e:49:a0:fc:2f: ba:12:f7:a4:a7:95:6f:5a:56:02:5e:4d:ca:68:8f:fd:ec:cb: 7b:c8:61:cf:7c:91:f1:1f:37:ae:32:37:2b:42:a5:9f:3c:0a: 24:36:87:d4:90:17:32:d0:6f:7c:6e:cc:d6:59:41:f6:df:c0: d2:4f:d5:55:89:46:4a:78:00:5e:2c:91:5a:37:1a:63:ec:38: b5:df:58:05:b9:ef:3c:28:88:d3:d0:2f:c9:0f:db:71:3a:11: 32:2f:18:00:b0:5f:4b:69:6d:38:7f:e6:fe:d0:62:92:a8:db: dc:98:d9:4e:72:65:80:06:ce:c5:47:4d:9b:8b:f0:d6:ac:df: 6f:8c:3b:7e:ba:42:f1:6c:cc:37:d3:0e:b6:05:87:95:85:d7: 28:c8:e7:a5:c3:9b:d0:ae:ef:62:32:f5:1a:63:31:f1:e0:78: 7b:17:ac:5b:96:5b:b8:4c:8a:aa:2b:8e:54:9c:5b:fb:16:e8: ab:b2:03:58 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICa24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQxYi0wOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2e5d+LvBEIysXQZth17KXdv7x7XetCu5srsybeBBbdiW9e3hv8/MOTsm0U75 yboQX+XHyVV0epefQvf5HTTfninjwL64UfLTnxK0/kEUkh3QmWffaYKeOHPyy79z v9Q+sO0/0kIivYGpEO2s0UHNj3NrnCl8iNdoi5eppQe5c4iDQVkKWtc2uOGBsppo YrO/F4U7nZ9fLldAPcUNvgxJkM3CAzsjezdrMVu3oBAW2sBjw4iufmbkOpF8eyAc Z4my/TcC1Z8u0EjXd+/UFA0f6mgeE1yI2drpsijU+xFjIAnZYXb61E/Sp1S2ZOJl 1zD/8XCP0VoCThukxMW7lQnerwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFP45B7CJ MCioyZBcCjYVNtFt8O1OMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzM1RENCQTIx MUU1MTFFQkFFMTEwRDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnWDYDBAFn0nAwDwQCAAIwCQMHACABDfTXgDANBgkqhkiG 9w0BAQsFAAOCAQEAfNBM2FaR+xwD0mSpjAkpsZqpR88HOQQ/7fTE5TJzl9tGawZc KFqEjJ2dXuOGMlAarhkotTgJwzuah7mmwOsqn3n4NE5JoPwvuhL3pKeVb1pWAl5N ymiP/ezLe8hhz3yR8R83rjI3K0KlnzwKJDaH1JAXMtBvfG7M1llB9t/A0k/VVYlG SngAXiyRWjcaY+w4td9YBbnvPCiI09AvyQ/bcToRMi8YALBfS2ltOH/m/tBikqjb 3JjZTnJlgAbOxUdNm4vw1qzfb4w7frpC8WzMN9MOtgWHlYXXKMjnpcOb0K7vYjL1 GmMx8eB4exesW5ZbuEyKqiuOVJxb+xboq7IDWA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org