$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BD1F6A67F811EEBD70480FC4F9AE02.roa File: 77BD1F6A67F811EEBD70480FC4F9AE02.roa (raw, json) Hash identifier: CzJxZ2FjzFxYdjGF8OIOFntLwtEiHsSG5Ad6fY0N4f8= Subject key identifier: E8:C7:0C:8D:C2:84:98:D1:F0:3E:88:FA:DA:A1:B9:FA:7A:41:99:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7B99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BD1F6A67F811EEBD70480FC4F9AE02.roa Signing time: Wed 11 Oct 2023 05:38:55 +0000 ROA not before: Wed 11 Oct 2023 05:38:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138235 IP address blocks: 103.134.96.0/24 maxlen: 24 103.134.97.0/24 maxlen: 24 103.134.98.0/24 maxlen: 24 103.134.99.0/24 maxlen: 24 103.171.191.0/24 maxlen: 24 2407:5140::/48 maxlen: 48 2407:5140:1::/48 maxlen: 48 2407:5140:2::/48 maxlen: 48 2407:5140:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31641 (0x7b99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 11 05:38:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=652634ef-4943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:80:a6:f5:47:76:b7:ff:23:4d:24:0b:b0: 5d:2b:fc:94:51:2d:a9:80:c7:03:44:7c:a1:81:84: 17:f9:26:6a:93:50:59:74:da:3c:99:2e:3c:87:83: 21:b5:b7:20:a8:36:b7:6f:0c:3d:af:aa:4c:7f:56: 94:13:b5:fa:1e:d1:20:79:18:41:52:3d:d5:8a:7b: d6:67:2b:f0:f7:91:d5:f1:b7:95:a6:ed:b4:3d:83: d1:01:fa:29:bd:ed:e0:de:3d:8e:41:1b:af:90:2b: e1:c2:04:66:da:31:d1:5f:77:00:c4:6c:7f:74:ef: 47:d0:27:80:9c:2c:4c:57:c0:76:b5:35:10:84:7c: 89:21:fe:cd:b0:3d:bb:ca:7b:03:c4:1b:6c:07:3c: 24:85:eb:39:60:a8:f9:2e:33:e5:46:90:22:c6:c9: a5:5f:65:7e:c6:c8:4c:97:54:9e:fe:4c:16:b3:84: 17:81:75:85:7a:7d:53:92:74:50:ed:39:b9:47:ba: 75:b5:57:13:e5:c4:93:91:cf:9e:37:69:fc:30:33: 2a:8a:bd:ef:e9:87:81:5c:e0:f1:27:c5:e2:70:de: 30:1f:f6:80:91:b9:21:c7:38:ba:97:4a:1e:c3:d0: d9:92:05:ef:23:3a:c7:23:82:af:60:dd:b7:25:da: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C7:0C:8D:C2:84:98:D1:F0:3E:88:FA:DA:A1:B9:FA:7A:41:99:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BD1F6A67F811EEBD70480FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.96.0/22 103.171.191.0/24 IPv6: 2407:5140::/46 Signature Algorithm: sha256WithRSAEncryption 03:c4:15:a4:c6:c4:d5:a6:c5:70:29:f4:1a:6f:e1:70:97:43: b2:b7:3b:85:40:30:8d:19:17:df:82:bd:78:ac:36:c0:90:36: c9:7a:34:57:15:33:66:63:16:16:a1:41:ab:d3:0a:aa:a6:76: 0c:7f:65:2f:1a:48:b4:e2:00:6f:a2:c3:c7:5a:98:b6:26:96: 97:ed:7f:06:79:b5:e8:df:0b:7e:9c:d7:f7:4f:60:9c:e8:93: f6:a3:83:b5:87:c6:77:6c:ea:77:ad:96:14:a6:31:cc:01:75: 53:38:eb:d8:ea:eb:b1:e6:8b:6d:c8:5a:eb:41:46:49:13:4d: a2:c8:82:77:92:70:7d:6f:9b:74:5b:96:7a:c7:96:bd:03:d1: 8f:9c:39:f7:e2:96:bf:26:04:ce:fd:80:a9:2e:24:fb:c7:72: 9e:e4:7a:20:cb:43:f3:31:b4:dd:06:02:ed:98:eb:5b:09:b7: e2:e6:24:54:57:46:a6:53:7f:7e:98:25:59:e5:52:64:db:8f: cc:03:fc:8f:78:8b:e1:95:91:7b:ca:3d:9a:3e:d1:ff:d1:8a: a8:1f:81:d5:ad:29:ba:9f:7d:8d:fb:00:e6:4a:39:0d:40:7a: 9c:47:4f:c3:25:d7:a1:34:b6:b9:30:5c:9c:3a:10:ba:3c:35: 7b:55:d8:4b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICe5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDExMDUzODU1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI2MzRlZi00OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrGApvVHdrf/I00kC7BdK/yUUS2pgMcDRHyhgYQX+SZqk1BZdNo8mS48h4Mh tbcgqDa3bww9r6pMf1aUE7X6HtEgeRhBUj3VinvWZyvw95HV8beVpu20PYPRAfop ve3g3j2OQRuvkCvhwgRm2jHRX3cAxGx/dO9H0CeAnCxMV8B2tTUQhHyJIf7NsD27 ynsDxBtsBzwkhes5YKj5LjPlRpAixsmlX2V+xshMl1Se/kwWs4QXgXWFen1TknRQ 7Tm5R7p1tVcT5cSTkc+eN2n8MDMqir3v6YeBXODxJ8XicN4wH/aAkbkhxzi6l0oe w9DZkgXvIzrHI4KvYN23JdptQwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOjHDI3C hJjR8D6I+tqhufp6QZl3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzdCRDFGNkE2 N0Y4MTFFRUJENzA0ODBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnhmADBABnq78wDwQCAAIwCQMHAiQHUUAAADANBgkqhkiG 9w0BAQsFAAOCAQEAA8QVpMbE1abFcCn0Gm/hcJdDsrc7hUAwjRkX34K9eKw2wJA2 yXo0VxUzZmMWFqFBq9MKqqZ2DH9lLxpItOIAb6LDx1qYtiaWl+1/Bnm16N8LfpzX 909gnOiT9qODtYfGd2zqd62WFKYxzAF1Uzjr2OrrseaLbcha60FGSRNNosiCd5Jw fW+bdFuWeseWvQPRj5w59+KWvyYEzv2AqS4k+8dynuR6IMtD8zG03QYC7ZjrWwm3 4uYkVFdGplN/fpglWeVSZNuPzAP8j3iL4ZWRe8o9mj7R/9GKqB+B1a0pup99jfsA 5ko5DUB6nEdPwyXXoTS2uTBcnDoQujw1e1XYSw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org