$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa File: 7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa (raw, json) Hash identifier: 20kji0IlcNetBODJEAUzD1ka9qTLFI//5I8p+yFc4EQ= Subject key identifier: 19:F5:AC:44:6E:D9:7F:57:D1:D8:A4:13:20:CC:4E:7B:E1:1A:A0:40 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EBF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa Signing time: Wed 10 May 2023 16:35:30 +0000 ROA not before: Wed 10 May 2023 16:35:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141512 IP address blocks: 103.161.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28351 (0x6ebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7d2-b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:f6:6d:e1:24:8c:2f:91:53:09:54:4b:a0: 12:6a:a4:af:a8:1d:af:b7:7c:54:ff:15:f6:85:c9: 21:ec:46:cc:f1:8c:63:e7:d4:62:54:ab:5e:e2:4d: eb:6b:24:e1:ca:af:33:dc:a3:98:8d:b6:cc:bd:7c: cc:79:ad:cf:9e:19:35:a8:5f:6f:06:23:e6:a9:04: ea:31:e4:ea:79:7c:a3:aa:fc:a5:ee:f9:46:f4:76: 92:65:43:9c:9d:a9:2b:da:93:99:30:4d:d1:e6:39: 50:2b:15:99:97:86:ca:c5:cb:2c:dd:50:4e:c3:33: a0:4c:bb:bf:28:aa:54:1f:fc:fe:e4:24:50:ec:d4: 41:ab:35:51:2e:09:e5:b8:eb:72:c8:dc:cb:a1:6c: a1:ad:ef:1d:1d:2b:e0:89:a3:28:c2:05:44:7e:ec: e3:a1:e8:75:a8:0a:6d:d9:fd:fe:0e:6d:58:cb:4a: e1:9d:3d:60:83:70:e0:e0:d9:33:8c:27:d3:fa:37: 7f:59:1d:58:fc:0e:84:5a:07:4e:d1:fc:d4:4c:8d: 01:ae:fe:4e:9b:2b:50:ac:3d:f8:f3:da:bc:fe:8d: 80:0e:b6:cf:ef:bc:25:a0:51:c7:4f:13:d7:82:48: ad:b4:25:0d:18:e3:c2:90:82:20:9c:c1:b3:4b:86: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F5:AC:44:6E:D9:7F:57:D1:D8:A4:13:20:CC:4E:7B:E1:1A:A0:40 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5DDCCA4C1511EB8C9F1D7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.40.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:1b:a9:e6:07:4e:6e:63:d8:3a:44:40:b7:b5:b8:15:e1:35: 12:fc:23:83:22:84:17:b8:64:54:a4:4e:84:20:ec:33:b4:47: 0f:7d:76:18:9e:3e:96:a7:29:0b:7c:41:be:c7:37:19:71:22: 18:3c:b3:e8:2e:18:25:a1:98:f3:3c:42:17:e7:68:9f:4a:6c: 5b:cc:f4:e6:a7:44:13:46:e4:2e:c5:ec:73:25:c9:2e:7e:35: fa:b3:82:74:aa:f3:22:8c:e2:00:fc:9f:80:ec:ca:65:4c:e7: 32:a1:13:3d:d3:8a:4d:5c:80:51:7e:1c:c9:00:94:3c:cb:b5: c7:d8:40:b7:54:a1:5a:c6:a3:30:a9:bf:77:8d:06:d5:d8:65: 47:a8:f5:5c:4b:7e:1a:53:7e:5f:39:ad:a7:d7:48:85:cf:e6: 9a:2b:d3:24:28:20:ba:0a:3b:29:d7:ee:bb:5c:b0:74:c7:8c: ab:a1:35:34:6f:e0:42:17:e6:c8:4e:79:20:7a:df:8f:ff:5b: e8:af:ae:d8:2a:d5:49:ff:53:2b:d1:1b:27:c6:90:1a:e1:6c: f1:a6:0c:9d:23:a4:70:1a:ce:55:05:cd:b3:6a:f3:61:2b:d7: e9:8d:24:84:6a:1a:f8:11:64:54:28:76:b2:a0:3d:4f:9a:fe: 12:e0:f9:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTMwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdkMi1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc72beEkjC+RUwlUS6ASaqSvqB2vt3xU/xX2hckh7EbM8Yxj59RiVKte4k3r ayThyq8z3KOYjbbMvXzMea3Pnhk1qF9vBiPmqQTqMeTqeXyjqvyl7vlG9HaSZUOc nakr2pOZME3R5jlQKxWZl4bKxcss3VBOwzOgTLu/KKpUH/z+5CRQ7NRBqzVRLgnl uOtyyNzLoWyhre8dHSvgiaMowgVEfuzjoeh1qApt2f3+Dm1Yy0rhnT1gg3Dg4Nkz jCfT+jd/WR1Y/A6EWgdO0fzUTI0Brv5OmytQrD3489q8/o2ADrbP77wloFHHTxPX gkittCUNGOPCkIIgnMGzS4abOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBn1rERu 2X9X0dikEyDMTnvhGqBAMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0E1RERDQ0E0 QzE1MTFFQjhDOUYxRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoSgwDQYJKoZIhvcNAQELBQADggEBAA0bqeYHTm5j2DpE QLe1uBXhNRL8I4MihBe4ZFSkToQg7DO0Rw99dhiePpanKQt8Qb7HNxlxIhg8s+gu GCWhmPM8QhfnaJ9KbFvM9OanRBNG5C7F7HMlyS5+NfqzgnSq8yKM4gD8n4DsymVM 5zKhEz3Tik1cgFF+HMkAlDzLtcfYQLdUoVrGozCpv3eNBtXYZUeo9VxLfhpTfl85 rafXSIXP5por0yQoILoKOynX7rtcsHTHjKuhNTRv4EIX5shOeSB634//W+ivrtgq 1Un/UyvRGyfGkBrhbPGmDJ0jpHAazlUFzbNq82Er1+mNJIRqGvgRZFQodrKgPU+a /hLg+YU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org