$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D23AB884D511EC9BB0CA64C4F9AE02.roa File: 74D23AB884D511EC9BB0CA64C4F9AE02.roa (raw, json) Hash identifier: 7xrtor65BsH5J6LcPLdGmr8Qz5zf/BZtKSkYaaIS1oc= Subject key identifier: 68:7F:CF:D0:BA:AC:C0:87:C6:65:6F:39:17:4A:C5:43:D8:D1:54:DA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FA9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D23AB884D511EC9BB0CA64C4F9AE02.roa Signing time: Wed 10 May 2023 16:39:52 +0000 ROA not before: Wed 10 May 2023 16:39:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146884 IP address blocks: 103.172.206.0/23 maxlen: 24 103.187.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28585 (0x6fa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:39:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8d7-f264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:5e:4b:ba:2d:33:29:08:dd:61:16:ba:6b: 51:62:bf:fe:59:5e:d7:33:07:61:b7:27:eb:3e:85: 8e:01:09:54:57:6b:73:2d:22:2d:14:39:3e:c3:44: 47:ef:d4:0b:78:17:a1:e5:db:fd:db:7b:8e:e8:c8: 22:77:58:9f:93:4b:65:04:86:b2:af:df:fe:18:a1: 72:7c:60:93:42:5a:09:e3:0c:d3:dd:3e:16:32:76: 12:e9:bb:6e:d1:6d:5c:83:87:d3:48:08:f4:89:95: 91:83:67:89:27:5b:f8:a2:e2:f2:56:e9:2d:b5:d8: ad:ff:0e:ff:62:d7:dc:71:3e:db:1f:7b:4b:76:e9: c3:42:c4:8c:a8:e0:25:bd:81:21:9e:be:00:ad:24: e9:90:b0:c5:72:52:ba:0e:0b:06:ac:39:84:83:c1: b8:22:19:15:81:86:65:db:15:33:93:0f:a8:a0:10: 5a:61:82:2d:4a:74:33:3b:ea:2f:a3:df:25:26:e7: 52:0d:2d:05:91:cb:8e:cc:32:71:e5:d8:9f:c1:03: 07:ab:58:a1:b2:41:79:df:ab:0f:b4:5a:28:d8:25: 93:11:9f:b7:a9:42:f6:dc:9f:24:d0:73:cb:0e:6e: 33:73:f1:45:24:03:9b:64:6d:c7:37:cf:52:c6:67: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7F:CF:D0:BA:AC:C0:87:C6:65:6F:39:17:4A:C5:43:D8:D1:54:DA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74D23AB884D511EC9BB0CA64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.206.0/23 103.187.194.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:6c:80:8c:aa:3f:79:61:28:00:91:0e:b4:39:04:cf:1d:1a: 4a:71:09:ef:6e:d0:29:22:aa:b2:aa:22:fb:8c:99:e5:be:d8: 1e:14:89:10:9d:c6:7c:0d:49:4a:41:cd:b5:b3:d8:90:c6:10: 91:e3:26:22:cd:c8:be:60:16:97:68:55:9f:ed:a6:76:8e:40: b4:09:7e:ca:37:10:07:bf:e4:86:83:d0:79:20:24:97:a9:14: 3e:44:f6:64:a3:d5:75:41:ad:fa:aa:30:1e:d7:fd:28:6e:c4: 72:70:74:ae:30:9e:a4:d3:4d:7f:f5:81:18:48:46:eb:07:b0: 17:16:a0:d5:c5:90:23:9d:ca:73:a5:88:ba:1e:7e:77:25:f4: c6:25:ee:94:13:f9:fa:5c:a1:9e:51:35:c6:6c:35:7b:f9:d1: 23:39:36:ef:c5:3f:4f:9e:ea:99:e4:e7:7d:6a:e5:5c:df:f6: b6:b6:84:60:13:50:82:08:e4:54:f3:31:4f:d1:96:a5:1b:35: 89:28:3a:fa:8a:30:d6:4c:5a:c5:27:b2:5a:85:f2:3b:c2:0b: fc:4d:06:29:36:06:79:a6:6a:94:3a:4f:64:55:f8:9f:c9:8e: ec:9b:93:aa:3c:ef:13:72:2d:7d:c1:19:ac:63:e5:f6:60:c6: 4a:75:72:4b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICb6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhkNy1mMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwteS7otMykI3WEWumtRYr/+WV7XMwdhtyfrPoWOAQlUV2tzLSItFDk+w0RH 79QLeBeh5dv923uO6Mgid1ifk0tlBIayr9/+GKFyfGCTQloJ4wzT3T4WMnYS6btu 0W1cg4fTSAj0iZWRg2eJJ1v4ouLyVukttdit/w7/YtfccT7bH3tLdunDQsSMqOAl vYEhnr4ArSTpkLDFclK6DgsGrDmEg8G4IhkVgYZl2xUzkw+ooBBaYYItSnQzO+ov o98lJudSDS0FkcuOzDJx5difwQMHq1ihskF536sPtFoo2CWTEZ+3qUL23J8k0HPL Dm4zc/FFJAObZG3HN89SxmcBWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGh/z9C6 rMCHxmVvORdKxUPY0VTaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzREMjNBQjg4 NEQ1MTFFQzlCQjBDQTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnrM4DBAFnu8IwDQYJKoZIhvcNAQELBQADggEBAE5sgIyq P3lhKACRDrQ5BM8dGkpxCe9u0CkiqrKqIvuMmeW+2B4UiRCdxnwNSUpBzbWz2JDG EJHjJiLNyL5gFpdoVZ/tpnaOQLQJfso3EAe/5IaD0HkgJJepFD5E9mSj1XVBrfqq MB7X/ShuxHJwdK4wnqTTTX/1gRhIRusHsBcWoNXFkCOdynOliLoefncl9MYl7pQT +fpcoZ5RNcZsNXv50SM5Nu/FP0+e6pnk531q5Vzf9ra2hGATUIII5FTzMU/RlqUb NYkoOvqKMNZMWsUnslqF8jvCC/xNBik2BnmmapQ6T2RV+J/Jjuybk6o87xNyLX3B Gaxj5fZgxkp1cks= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org