$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa File: 74F91AE464DA11ED8D290065C4F9AE02.roa (raw, json) Hash identifier: HIvpxNIN2fqcfEokz6DIljJi9GtLlrJwxZo5j7IAS3s= Subject key identifier: 5C:B8:0E:9F:C2:E0:A9:00:05:AC:D1:BE:19:F9:31:65:DD:18:04:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B04 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa Signing time: Wed 10 May 2023 16:17:37 +0000 ROA not before: Wed 10 May 2023 16:17:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134251 IP address blocks: 103.194.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27396 (0x6b04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:17:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3a1-2de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:55:1b:74:28:b6:f7:07:5c:6c:1c:83:7f: 65:69:6e:18:8f:2c:a5:5c:6f:38:80:bf:6d:76:32: 45:56:8a:7c:e0:fd:44:90:55:a5:42:e0:99:32:35: 89:aa:38:cb:fc:fc:20:ff:f0:ff:55:eb:47:f7:27: 03:a6:6b:5b:fa:e1:2d:b6:74:82:5d:f0:ce:6b:2d: 67:52:df:20:51:6a:9d:b5:a5:66:03:42:c2:1a:57: 17:1d:7b:89:a3:1a:af:ab:93:de:c0:36:93:9a:f5: 1c:72:b6:1b:05:31:6c:cc:6b:ec:d5:af:38:ef:2e: 4d:ae:12:e8:00:c7:0d:7b:6e:90:1d:5b:43:62:78: 55:b2:a6:48:2d:d7:4e:a5:8a:ef:a7:d0:67:fe:59: e1:6d:b0:8f:74:02:02:6c:4f:08:f6:36:f5:76:72: d3:63:c5:9f:61:f8:c1:4b:bb:0b:33:db:6b:b9:53: 3c:f6:86:2e:38:5d:73:4d:3a:c3:62:14:19:b8:b5: 20:0c:63:8e:e5:ce:27:71:ec:68:36:92:69:a5:33: 2a:90:33:5b:40:33:c2:69:64:30:5b:b2:ee:ed:97: 2a:ce:c3:f4:a4:82:bb:02:d7:d7:0e:e4:f5:99:42: 7a:44:58:63:63:11:a4:58:f9:6b:23:54:72:20:74: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B8:0E:9F:C2:E0:A9:00:05:AC:D1:BE:19:F9:31:65:DD:18:04:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.194.45.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:bd:70:e1:15:d3:4e:d9:6a:b0:2d:60:1a:19:40:cd:7b:ac: a3:8b:91:d0:d8:bd:7c:f7:0f:f8:dc:4b:20:12:5e:bf:14:42: c7:f2:5f:5d:c1:15:f0:d1:7b:df:d6:41:95:ee:b1:c1:bf:c2: 3e:28:79:bb:b5:b2:28:85:e2:cc:b9:c4:b5:58:c0:d4:97:8e: 41:96:fc:5f:04:a0:03:50:48:96:a6:dd:ee:5d:36:4b:85:ec: f3:3f:d9:ae:8b:18:24:65:8f:d6:f7:44:56:6d:12:c1:07:e2: f3:f5:66:f9:58:bb:e0:64:3b:5c:b8:ba:61:ee:3f:0b:12:11: f4:ae:f5:1a:00:15:86:39:5d:81:5e:9c:d1:14:f4:76:79:23: 15:6f:f1:99:1c:ce:09:2a:b4:a9:d7:c7:84:09:c5:37:82:ff: 35:12:2a:95:e2:00:ea:68:55:06:92:16:47:27:a4:9d:48:eb: 17:e6:95:2d:2c:45:6b:52:9f:25:9f:77:48:59:88:a1:16:30: 1f:a7:9d:64:93:f0:f5:8a:ab:ec:00:13:91:7f:94:ac:5d:f0: cd:9a:11:c5:7f:49:0e:62:c0:30:55:f4:2d:c2:f2:dd:9e:4f: 12:21:5a:86:a7:c7:9d:6c:8e:f9:07:5f:0c:ba:5b:99:1f:96: 7c:c1:65:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICawQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNzM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNhMS0yZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA271VG3QotvcHXGwcg39laW4YjyylXG84gL9tdjJFVop84P1EkFWlQuCZMjWJ qjjL/Pwg//D/VetH9ycDpmtb+uEttnSCXfDOay1nUt8gUWqdtaVmA0LCGlcXHXuJ oxqvq5PewDaTmvUccrYbBTFszGvs1a847y5NrhLoAMcNe26QHVtDYnhVsqZILddO pYrvp9Bn/lnhbbCPdAICbE8I9jb1dnLTY8WfYfjBS7sLM9truVM89oYuOF1zTTrD YhQZuLUgDGOO5c4ncexoNpJppTMqkDNbQDPCaWQwW7Lu7ZcqzsP0pIK7AtfXDuT1 mUJ6RFhjYxGkWPlrI1RyIHTjRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFy4Dp/C 4KkABazRvhn5MWXdGASxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzRGOTFBRTQ2 NERBMTFFRDhEMjkwMDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnwi0wDQYJKoZIhvcNAQELBQADggEBAA69cOEV007ZarAt YBoZQM17rKOLkdDYvXz3D/jcSyASXr8UQsfyX13BFfDRe9/WQZXuscG/wj4oebu1 siiF4sy5xLVYwNSXjkGW/F8EoANQSJam3e5dNkuF7PM/2a6LGCRlj9b3RFZtEsEH 4vP1ZvlYu+BkO1y4umHuPwsSEfSu9RoAFYY5XYFenNEU9HZ5IxVv8ZkczgkqtKnX x4QJxTeC/zUSKpXiAOpoVQaSFkcnpJ1I6xfmlS0sRWtSnyWfd0hZiKEWMB+nnWST 8PWKq+wAE5F/lKxd8M2aEcV/SQ5iwDBV9C3C8t2eTxIhWoanx51sjvkHXwy6W5kf lnzBZdY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org