$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa File: 7412D892977011EB891B1662C4F9AE02.roa (raw, json) Hash identifier: +9xv+vkDz8Hq9U7Z8+cArmy8XukfEF9/mBmYAPGAElM= Subject key identifier: E1:2C:B0:4C:19:5E:5D:B2:81:D6:97:0D:4D:34:3F:15:C6:A5:CF:9B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F03 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa Signing time: Wed 10 May 2023 16:36:44 +0000 ROA not before: Wed 10 May 2023 16:36:44 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141804 IP address blocks: 103.165.168.0/23 maxlen: 24 103.171.4.0/23 maxlen: 24 103.182.10.0/23 maxlen: 24 2001:df7:2f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28419 (0x6f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:36:44 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc81c-e2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:92:7c:05:a8:97:8f:6d:ee:0f:41:02:06: fb:a8:cd:b6:57:e6:e9:85:ba:c5:25:c4:58:a7:a8: ad:92:27:f2:86:ed:d4:45:86:91:3e:41:79:78:6c: f0:3b:6e:a8:bd:34:f3:32:49:d9:0f:bb:f4:90:ac: 17:d8:42:eb:32:b0:a0:df:88:20:e9:4f:00:ed:a9: 20:34:22:a6:fd:dc:52:37:c1:80:29:9a:79:c8:be: ba:d1:8b:3f:45:20:7b:81:28:e5:98:c0:d8:f8:c9: 83:2c:e6:4d:3e:5f:79:07:c3:1a:6a:5f:ee:cd:68: c3:08:47:77:4e:3c:63:13:45:0c:93:e6:f0:16:e0: f4:cb:ff:fe:2b:f3:63:72:99:c0:c3:77:93:d8:3e: 36:1d:dc:c9:0e:cf:66:3f:74:ac:b4:5c:4d:ed:5d: 78:c6:eb:81:83:c0:60:8b:eb:d8:25:90:a4:fe:92: 3c:11:6d:fb:1f:7c:c7:ac:6b:cd:d2:96:93:7c:99: 14:1d:ee:1f:bc:7b:48:d9:3a:31:47:79:56:79:56: 75:2e:83:82:f8:4e:cd:73:ec:25:23:26:c4:1a:3b: ad:bb:4f:81:89:b8:ce:36:d1:44:30:97:8d:f2:ea: 45:0d:6a:20:2b:8d:e9:92:71:8d:8f:82:a7:3c:70: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2C:B0:4C:19:5E:5D:B2:81:D6:97:0D:4D:34:3F:15:C6:A5:CF:9B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7412D892977011EB891B1662C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.168.0/23 103.171.4.0/23 103.182.10.0/23 IPv6: 2001:df7:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 1b:77:5c:fc:99:98:fc:8c:ef:f3:34:4d:60:1a:5e:bc:d7:b8: 43:98:56:0c:58:74:9a:f9:75:4f:be:30:8a:0c:a3:c9:e0:24: 9c:39:99:eb:c5:95:92:4b:d0:c5:1d:3a:76:39:72:88:e9:cb: 76:45:ed:c1:38:fb:ae:5a:21:53:80:5b:db:78:ee:67:93:26: 03:36:21:f0:48:f2:0e:7c:12:58:64:c5:09:15:c8:b8:75:8d: 71:f0:2c:90:83:40:3a:55:af:56:95:10:37:48:99:63:1a:98: 72:09:ac:fe:de:75:2f:f9:ec:7e:b8:f1:6a:cd:1e:05:3d:52: 82:28:73:93:2d:b6:f6:23:21:26:ad:b2:4a:0b:a6:90:a7:e3: 1c:a7:e0:de:43:d0:70:42:a8:f9:31:bc:c6:27:6f:6a:55:ac: a9:99:bc:90:b8:7c:db:3d:53:33:dd:d0:45:1f:3d:ea:00:60: 27:49:0b:ad:38:50:0b:af:53:18:29:dc:cc:ea:ed:7c:9b:57: 1f:f8:ab:5e:2d:71:d8:ae:1f:11:cf:c6:38:e6:92:af:14:74: 85:df:da:83:be:d8:5a:11:86:5d:49:71:c9:0c:10:28:2e:15: a7:86:8c:52:99:ff:c6:70:a2:6d:2e:07:73:6d:e5:ad:95:61: ec:bf:dd:3f -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICbwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjQ0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzgxYy1lMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3CSfAWol49t7g9BAgb7qM22V+bphbrFJcRYp6itkifyhu3URYaRPkF5eGzw O26ovTTzMknZD7v0kKwX2ELrMrCg34gg6U8A7akgNCKm/dxSN8GAKZp5yL660Ys/ RSB7gSjlmMDY+MmDLOZNPl95B8Maal/uzWjDCEd3TjxjE0UMk+bwFuD0y//+K/Nj cpnAw3eT2D42HdzJDs9mP3SstFxN7V14xuuBg8Bgi+vYJZCk/pI8EW37H3zHrGvN 0paTfJkUHe4fvHtI2ToxR3lWeVZ1LoOC+E7Nc+wlIybEGjutu0+BibjONtFEMJeN 8upFDWogK43pknGNj4KnPHCHywIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOEssEwZ Xl2ygdaXDU00PxXGpc+bMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzQxMkQ4OTI5 NzcwMTFFQjg5MUIxNjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnpagDBAFnqwQDBAFntgowDwQCAAIwCQMHACABDfcvgDAN BgkqhkiG9w0BAQsFAAOCAQEAG3dc/JmY/Izv8zRNYBpevNe4Q5hWDFh0mvl1T74w igyjyeAknDmZ68WVkkvQxR06djlyiOnLdkXtwTj7rlohU4Bb23juZ5MmAzYh8Ejy DnwSWGTFCRXIuHWNcfAskINAOlWvVpUQN0iZYxqYcgms/t51L/nsfrjxas0eBT1S gihzky229iMhJq2ySgumkKfjHKfg3kPQcEKo+TG8xidvalWsqZm8kLh82z1TM93Q RR896gBgJ0kLrThQC69TGCnczOrtfJtXH/irXi1x2K4fEc/GOOaSrxR0hd/ag77Y WhGGXUlxyQwQKC4Vp4aMUpn/xnCibS4Hc23lrZVh7L/dPw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org