$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76364338334C11EDB6DAC86EC4F9AE02.roa File: 76364338334C11EDB6DAC86EC4F9AE02.roa (raw, json) Hash identifier: JHjRjHCu5Gz9DMg03OoIex5b2s2s54VlBa75uUytZww= Subject key identifier: 23:01:E7:F1:AD:FC:F1:18:86:D7:9D:82:6F:23:64:7C:E8:E7:68:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BD2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76364338334C11EDB6DAC86EC4F9AE02.roa Signing time: Wed 10 May 2023 16:21:32 +0000 ROA not before: Wed 10 May 2023 16:21:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135702 IP address blocks: 103.74.140.0/23 maxlen: 24 2406:6440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27602 (0x6bd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc48c-215b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:de:ed:d5:81:41:be:9c:34:af:5a:5d:df: 1e:93:94:76:82:0a:fe:05:fb:7a:66:37:6c:5c:3e: b5:d0:28:d4:b3:84:8c:78:97:2c:91:6c:a7:b0:c5: 4e:fe:b5:b6:90:33:c4:f1:42:59:8b:8b:b3:f9:43: ca:d6:a7:85:2e:c8:15:34:10:c4:73:9e:c6:55:65: 1c:16:48:ca:cb:f5:6e:d8:38:9a:1d:3d:b5:ef:74: 4e:79:eb:5b:40:95:eb:68:42:17:7f:70:30:92:eb: cf:8e:fd:57:66:70:f4:6c:02:b9:2a:10:fb:53:8e: cc:ce:7c:7c:d3:4c:fb:5c:57:89:21:c5:93:bb:03: 01:59:5d:da:a7:5d:68:bf:28:15:11:84:d8:3f:a6: e4:fa:aa:d1:98:c4:15:e8:b6:69:f3:95:16:59:b0: cf:c0:d1:f2:ae:85:fd:21:b6:7c:3c:d2:bd:92:37: 35:5f:23:d5:68:32:25:b3:22:fb:6a:24:3e:93:ca: 48:69:af:57:e3:e5:da:64:77:c9:23:73:0f:68:b6: 71:9e:6f:57:18:4b:b3:3f:85:6c:40:a9:55:ad:2a: e0:ee:56:a3:c0:15:9b:c3:95:0f:d6:bf:6e:ab:27: 5c:2e:f5:d3:6a:d9:a8:38:a4:01:d5:6d:3c:9d:c7: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:E7:F1:AD:FC:F1:18:86:D7:9D:82:6F:23:64:7C:E8:E7:68:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76364338334C11EDB6DAC86EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.140.0/23 IPv6: 2406:6440::/32 Signature Algorithm: sha256WithRSAEncryption 3a:d2:c4:9e:5d:e1:ab:1a:7a:7b:42:d5:fc:0e:c8:a0:a6:b3: 18:32:dc:c1:75:ba:f2:07:3c:c1:20:db:95:82:ce:26:c4:2a: a7:61:03:06:f8:17:30:4a:90:b1:fd:5d:b3:ef:f9:96:7a:7d: e0:a1:33:6f:7f:7d:0c:0e:20:83:c8:e1:ec:5c:af:97:3f:e3: d1:c0:f0:fd:1b:0a:39:71:dc:fa:73:16:2e:dd:d8:2c:1e:a3: 38:58:4e:39:26:f1:08:93:3a:f4:ab:80:aa:81:ca:27:95:6a: f6:fc:c4:59:fa:b1:ac:eb:25:78:a0:95:fb:a9:22:ec:39:72: 36:50:eb:82:8f:d5:f0:74:50:30:6a:c4:d7:24:0d:d9:27:bd: 6d:cf:19:bf:6d:aa:ec:a0:73:8c:87:14:f4:99:a0:9c:4c:ca: 9b:bd:ac:07:f9:b6:3c:52:92:21:1b:bd:de:de:00:41:e8:a1: 63:e3:e2:40:18:4a:0e:0a:78:f1:3e:b7:7f:38:a1:68:c1:19: f5:f6:8b:f6:a0:42:84:21:6c:78:f9:e7:03:07:d4:ec:33:c0: 16:71:4c:02:cb:b1:08:47:18:4c:5d:82:f5:da:08:df:65:81: 48:44:aa:7f:9b:f0:3f:cc:f7:d1:6a:b5:dc:49:4b:53:b6:7b: 69:61:a5:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICa9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ4Yy0yMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCPe7dWBQb6cNK9aXd8ek5R2ggr+Bft6ZjdsXD610CjUs4SMeJcskWynsMVO /rW2kDPE8UJZi4uz+UPK1qeFLsgVNBDEc57GVWUcFkjKy/Vu2DiaHT2173ROeetb QJXraEIXf3AwkuvPjv1XZnD0bAK5KhD7U47Mznx800z7XFeJIcWTuwMBWV3ap11o vygVEYTYP6bk+qrRmMQV6LZp85UWWbDPwNHyroX9IbZ8PNK9kjc1XyPVaDIlsyL7 aiQ+k8pIaa9X4+XaZHfJI3MPaLZxnm9XGEuzP4VsQKlVrSrg7lajwBWbw5UP1r9u qydcLvXTatmoOKQB1W08nccI9wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCMB5/Gt /PEYhtedgm8jZHzo52gCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzYzNjQzMzgz MzRDMTFFREI2REFDODZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnSowwDQQCAAIwBwMFACQGZEAwDQYJKoZIhvcNAQELBQAD ggEBADrSxJ5d4asaentC1fwOyKCmsxgy3MF1uvIHPMEg25WCzibEKqdhAwb4FzBK kLH9XbPv+ZZ6feChM29/fQwOIIPI4excr5c/49HA8P0bCjlx3PpzFi7d2CweozhY Tjkm8QiTOvSrgKqByieVavb8xFn6sazrJXiglfupIuw5cjZQ64KP1fB0UDBqxNck DdknvW3PGb9tquygc4yHFPSZoJxMypu9rAf5tjxSkiEbvd7eAEHooWPj4kAYSg4K ePE+t384oWjBGfX2i/agQoQhbHj55wMH1OwzwBZxTALLsQhHGExdgvXaCN9lgUhE qn+b8D/M99FqtdxJS1O2e2lhpQg= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:25 2024 by rpki-client on console-fra.rpki-client.org