$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/753A2E54989B11EDB8D0C33FC4F9AE02.roa File: 753A2E54989B11EDB8D0C33FC4F9AE02.roa (raw, json) Hash identifier: KQwvzLUQ06wWr3YIGtqvodNe96/Ct+OnkrKSuC9wXQY= Subject key identifier: 6B:05:07:6E:69:00:A6:00:7E:30:D1:E0:EF:DF:B9:A2:CA:DE:D9:09 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7103 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/753A2E54989B11EDB8D0C33FC4F9AE02.roa Signing time: Wed 10 May 2023 16:46:13 +0000 ROA not before: Wed 10 May 2023 16:46:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150575 IP address blocks: 103.49.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28931 (0x7103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca55-fc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:7b:ca:7d:62:26:58:3d:33:05:4d:24:98: 50:0e:81:4e:82:ea:d6:2d:24:a1:18:64:14:0c:8b: 87:dc:46:35:6c:14:a7:7e:11:0e:c3:92:97:eb:2e: ac:27:80:7e:60:46:ef:14:8a:21:28:a8:e8:ec:e3: ea:a1:e6:b4:b9:8c:b5:14:89:79:e9:1d:65:af:2f: 9f:54:ac:f3:a8:22:5e:4f:6b:17:8b:27:68:bd:44: b3:63:77:0c:35:a0:d6:60:f4:81:e8:d2:3d:c0:e9: ed:77:f0:96:2d:82:78:54:e1:34:91:df:36:f4:50: 0f:cc:37:8c:61:74:d9:c6:11:89:6f:d1:4d:64:f7: aa:a4:10:52:f5:6e:f6:0c:13:a4:28:a9:de:c3:34: bf:19:90:4b:b3:d4:ad:e2:5c:c6:b9:e7:96:65:a9: e1:e7:80:46:9d:ca:d4:64:91:2f:d8:2b:0e:4a:1d: fb:72:ef:21:6e:2a:0c:a9:39:18:78:9d:45:6f:c2: 45:e5:61:5f:e8:4d:1f:07:b6:95:88:71:f9:91:47: 45:45:0b:8d:3a:7b:15:16:45:ab:e4:63:b4:31:12: ab:c9:e8:cc:11:d4:2f:a4:f1:f5:30:73:2c:e0:42: a9:de:9e:09:77:53:82:44:c7:f6:43:5c:1f:98:d6: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:05:07:6E:69:00:A6:00:7E:30:D1:E0:EF:DF:B9:A2:CA:DE:D9:09 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/753A2E54989B11EDB8D0C33FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.102.0/23 Signature Algorithm: sha256WithRSAEncryption 05:bb:9d:b9:81:4c:38:55:3c:d0:e1:e3:44:2d:cf:8b:16:a6: ac:0d:f2:7a:fe:bf:32:7c:a6:43:d4:5e:10:b4:22:c7:de:30: b4:2e:cd:57:aa:dd:ca:0a:0f:b9:64:cb:41:86:4d:11:26:d4: 57:4d:a8:28:e6:54:7e:a6:18:ce:17:9d:12:ea:8d:62:2e:ff: 99:9a:75:a8:d0:0d:e7:a2:76:8f:62:b6:f7:c8:44:16:0d:74: 52:dd:95:b8:ba:7f:3d:6d:1f:66:c2:55:be:4c:fb:7e:79:9b: 89:cf:50:99:0d:24:2f:28:81:45:fd:f0:09:0e:df:cd:7f:7a: 5a:6d:38:63:cd:2d:8c:11:e3:d9:8b:e9:21:af:fa:9c:e3:a1: fd:e0:a4:3e:00:01:3c:29:c7:eb:5d:b7:03:f4:c0:86:28:37: 3e:86:f2:56:28:c7:71:fe:5f:98:a3:c5:9e:f0:a6:a9:4a:c1: 3e:33:23:ac:75:5f:69:18:9f:df:f8:d7:4e:57:cd:5c:95:36: 64:9c:31:41:11:d7:88:87:2d:d0:ff:28:88:7f:b4:c3:aa:0e: ad:11:30:d2:b6:00:9a:6b:64:64:f9:3e:7d:d4:b7:74:8a:25: d8:15:2b:60:95:09:55:e6:1d:be:7c:dd:58:d9:a2:62:8b:f4: ca:bb:11:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E1NS1mYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqt7yn1iJlg9MwVNJJhQDoFOgurWLSShGGQUDIuH3EY1bBSnfhEOw5KX6y6s J4B+YEbvFIohKKjo7OPqoea0uYy1FIl56R1lry+fVKzzqCJeT2sXiydovUSzY3cM NaDWYPSB6NI9wOntd/CWLYJ4VOE0kd829FAPzDeMYXTZxhGJb9FNZPeqpBBS9W72 DBOkKKnewzS/GZBLs9St4lzGueeWZanh54BGncrUZJEv2CsOSh37cu8hbioMqTkY eJ1Fb8JF5WFf6E0fB7aViHH5kUdFRQuNOnsVFkWr5GO0MRKryejMEdQvpPH1MHMs 4EKp3p4Jd1OCRMf2Q1wfmNZJLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGsFB25p AKYAfjDR4O/fuaLK3tkJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzUzQTJFNTQ5 ODlCMTFFREI4RDBDMzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnMWYwDQYJKoZIhvcNAQELBQADggEBAAW7nbmBTDhVPNDh 40Qtz4sWpqwN8nr+vzJ8pkPUXhC0IsfeMLQuzVeq3coKD7lky0GGTREm1FdNqCjm VH6mGM4XnRLqjWIu/5madajQDeeido9itvfIRBYNdFLdlbi6fz1tH2bCVb5M+355 m4nPUJkNJC8ogUX98AkO381/elptOGPNLYwR49mL6SGv+pzjof3gpD4AATwpx+td twP0wIYoNz6G8lYox3H+X5ijxZ7wpqlKwT4zI6x1X2kYn9/4105XzVyVNmScMUER 14iHLdD/KIh/tMOqDq0RMNK2AJprZGT5Pn3Ut3SKJdgVK2CVCVXmHb583VjZomKL 9Mq7Edk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org