$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa File: 751B825CBDE111EAAEFB6D58C4F9AE02.roa (raw, json) Hash identifier: m2RTKdX1IaKE/ZenMEBKGYSY+tDG1Hi5pgLbNq5o/Sc= Subject key identifier: 6B:8E:B1:05:F1:89:F5:41:2D:6B:8B:15:45:1C:B9:87:67:F1:6D:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa Signing time: Wed 10 May 2023 16:18:41 +0000 ROA not before: Wed 10 May 2023 16:18:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134392 IP address blocks: 103.132.246.0/24 maxlen: 24 103.132.247.0/24 maxlen: 24 2001:df7:9300::/48 maxlen: 48 2001:df7:9301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27453 (0x6b3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3e1-5cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:a1:db:08:7a:d0:14:66:81:fd:55:16:b4: 10:07:51:10:f5:23:66:f0:d4:fd:fd:aa:13:59:d3: d2:4e:38:0e:7a:8c:64:3f:2a:f5:a8:38:9a:2f:18: 7f:d3:81:7a:2a:15:87:8a:6e:e8:a5:00:a2:9d:b4: f2:31:50:b7:c5:14:64:12:78:f4:d2:0e:95:d4:3b: ac:c1:2f:e4:66:bd:b9:9e:00:6c:80:c1:a1:f0:97: 8b:82:03:6f:af:67:03:8d:bf:41:e0:d3:45:f0:48: d3:4b:3f:d0:9d:b3:b5:60:47:60:9b:3a:f6:6b:9e: c7:63:46:81:96:70:b9:b8:28:ad:97:b2:bf:5b:12: ab:62:66:0a:93:00:14:61:c8:36:5f:9c:af:fc:a5: c2:37:9d:67:c9:60:cb:48:0f:d8:9a:97:bb:de:da: c1:72:31:24:05:dc:0e:35:d0:e1:97:8d:ca:e7:3a: 7d:ca:57:6d:c1:e9:aa:6b:bb:03:dd:7f:a3:59:2c: 58:36:90:b5:f8:44:2f:32:8d:31:3d:c9:ae:16:94: 70:33:00:3f:d8:75:58:52:bf:09:db:45:7b:0e:b8: dc:44:9c:92:25:ba:3b:39:a4:a4:37:fc:22:29:ea: 28:5c:62:64:c3:c1:dc:e2:1e:d3:6a:c7:30:24:74: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8E:B1:05:F1:89:F5:41:2D:6B:8B:15:45:1C:B9:87:67:F1:6D:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/751B825CBDE111EAAEFB6D58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.246.0/23 IPv6: 2001:df7:9300::/47 Signature Algorithm: sha256WithRSAEncryption 58:4f:07:b0:cc:8a:07:95:5f:2d:68:34:85:fc:de:dc:1e:6f: 86:c6:ec:92:f8:f5:15:ab:7b:e1:02:4b:83:38:f2:93:d3:4a: 59:f1:22:86:13:22:f0:bb:8b:e2:2b:65:93:ef:ab:3c:b4:f4: d1:13:1e:2f:53:24:f8:4c:24:f7:29:0d:63:08:6e:89:e1:77: fb:90:84:cd:ee:87:8a:1c:22:fe:ca:0b:b6:dd:84:97:c2:ce: c4:98:57:25:7d:88:c2:75:c6:30:87:1f:a7:07:f6:7a:ee:d7: 09:da:43:09:38:22:16:0d:bb:02:be:d5:f4:f1:ef:f6:9a:37: 41:73:34:6d:48:8f:cc:5b:a2:09:03:81:81:fe:61:d1:95:ce: 94:9d:4c:b4:84:4a:ee:19:89:82:c9:ae:83:d2:6a:0e:ea:96: 20:16:c4:be:84:f9:64:46:02:8b:72:11:4f:1f:ba:d6:45:c7: f4:44:5c:70:a3:ac:76:8a:eb:86:65:8e:90:f7:98:9a:2b:f3: 2a:89:33:d5:19:4d:e0:96:7b:63:7f:13:b4:09:2b:c4:58:e6: e8:d5:18:76:20:92:f5:69:6d:cf:20:67:79:0b:b0:01:ca:ce: 78:05:df:ab:63:a6:e0:c2:18:76:ca:f7:9f:7a:9c:ee:53:cf: ac:e5:7a:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICaz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNlMS01Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61qh2wh60BRmgf1VFrQQB1EQ9SNm8NT9/aoTWdPSTjgOeoxkPyr1qDiaLxh/ 04F6KhWHim7opQCinbTyMVC3xRRkEnj00g6V1DuswS/kZr25ngBsgMGh8JeLggNv r2cDjb9B4NNF8EjTSz/QnbO1YEdgmzr2a57HY0aBlnC5uCitl7K/WxKrYmYKkwAU Ycg2X5yv/KXCN51nyWDLSA/Ympe73trBcjEkBdwONdDhl43K5zp9yldtwemqa7sD 3X+jWSxYNpC1+EQvMo0xPcmuFpRwMwA/2HVYUr8J20V7DrjcRJySJbo7OaSkN/wi KeooXGJkw8Hc4h7TascwJHSMNwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGuOsQXx ifVBLWuLFUUcuYdn8W1BMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzUxQjgyNUNC REUxMTFFQUFFRkI2RDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnhPYwDwQCAAIwCQMHASABDfeTADANBgkqhkiG9w0BAQsF AAOCAQEAWE8HsMyKB5VfLWg0hfze3B5vhsbskvj1Fat74QJLgzjyk9NKWfEihhMi 8LuL4itlk++rPLT00RMeL1Mk+Ewk9ykNYwhuieF3+5CEze6Hihwi/soLtt2El8LO xJhXJX2IwnXGMIcfpwf2eu7XCdpDCTgiFg27Ar7V9PHv9po3QXM0bUiPzFuiCQOB gf5h0ZXOlJ1MtIRK7hmJgsmug9JqDuqWIBbEvoT5ZEYCi3IRTx+61kXH9ERccKOs dorrhmWOkPeYmivzKokz1RlN4JZ7Y38TtAkrxFjm6NUYdiCS9WltzyBneQuwAcrO eAXfq2Om4MIYdsr3n3qc7lPPrOV6LA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org