$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa File: 7B2DCE6E4B0711EEB154A577C4F9AE02.roa (raw, json) Hash identifier: 2ILLKTSwK3AvFvpggETR0Q/tjmVzUkXGiFvGLw3zI6k= Subject key identifier: 28:D2:20:4F:98:EC:61:9B:9E:6F:6A:12:5E:27:28:30:7A:87:55:FC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 798F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa Signing time: Mon 04 Sep 2023 09:55:13 +0000 ROA not before: Mon 04 Sep 2023 09:55:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151766 IP address blocks: 103.206.144.0/22 maxlen: 24 103.207.124.0/22 maxlen: 24 106.0.40.0/22 maxlen: 24 121.46.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31119 (0x798f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 4 09:55:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64f5a981-59be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:27:11:fc:64:a7:7a:bd:98:8e:4a:cc:96: 12:0c:8a:99:86:84:cb:40:4d:13:f7:c0:9d:73:33: e1:70:18:92:74:21:71:8a:50:0f:6c:33:39:8a:47: 2b:64:07:3f:09:9b:6a:ed:14:d6:43:f8:71:b1:19: 94:df:dd:d1:01:b0:db:bd:f4:c9:95:2f:22:62:aa: 64:8e:c3:6e:c3:d6:07:77:4f:57:91:30:a3:db:08: a2:05:db:17:bf:c0:37:c4:89:84:7e:80:a3:5b:c1: 62:2d:12:b9:bb:9c:b1:56:b2:33:0f:30:b3:c4:cd: 01:bb:61:9a:62:d3:02:92:46:2b:41:3b:e2:36:78: c7:af:d5:38:23:42:2c:7f:1d:f9:65:c5:3f:47:7d: 1d:17:c4:c6:4b:81:86:9a:49:5b:cc:12:26:4c:90: 89:51:0f:a8:dd:55:d9:d3:67:33:ea:0e:92:f7:d3: e3:37:a5:dd:70:ae:14:c4:89:4d:93:9f:4e:ae:ed: 3c:f7:9e:06:69:a9:e5:3f:e0:a8:3c:19:f7:87:df: ef:32:54:ac:cb:3f:eb:2d:09:d1:7c:c6:dd:4e:5a: 76:93:a0:43:42:e2:33:dd:40:c3:66:95:9e:b1:62: 35:54:f3:7e:61:b2:46:21:1c:5c:eb:4c:f2:d7:3b: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:20:4F:98:EC:61:9B:9E:6F:6A:12:5E:27:28:30:7A:87:55:FC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B2DCE6E4B0711EEB154A577C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.144.0/22 103.207.124.0/22 106.0.40.0/22 121.46.92.0/22 Signature Algorithm: sha256WithRSAEncryption 32:37:21:dd:58:c3:d1:e1:04:b2:d4:1e:cc:20:01:2d:e8:a1: c9:c3:67:84:d1:da:7b:84:2c:2a:9e:d1:7d:ff:0c:7c:61:29: c3:5b:60:ba:2f:5a:85:c9:31:82:42:8a:a3:86:ae:a5:14:cd: 73:cc:16:ff:84:1b:75:df:4f:ad:e9:9c:91:5d:e0:de:f5:3f: 62:fd:55:4a:d3:f3:69:8c:f9:3e:4d:de:3b:5a:a5:b2:91:55: 13:9d:14:80:92:44:a9:a8:69:21:db:dd:4e:93:05:1f:ec:e0: 07:48:af:89:20:f2:f4:77:b4:00:57:6e:7d:18:b3:8e:3a:f1: 9a:b7:3b:96:a4:6c:c1:a9:ff:a3:89:b3:92:35:65:e4:b0:09: b1:68:d0:06:89:8c:2d:d2:9c:e4:6f:57:bf:62:41:e5:76:ca: 7a:5e:c7:18:e7:5a:0b:e9:2b:9f:f3:6d:dd:00:68:62:05:c2: e5:28:e4:f1:37:37:e6:e9:3e:fc:3d:78:60:4b:9e:58:2c:a1: fc:f2:3c:7b:5a:58:55:f5:23:d1:ba:86:69:dd:ee:49:27:ba: ef:51:0b:39:60:07:f7:4a:8a:4c:84:41:2a:18:96:6c:8f:da: 0b:e3:57:9c:da:7e:d3:b5:5b:e6:2b:aa:95:6d:98:ae:18:f2: 5d:29:94:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICeY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTA0MDk1NTEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY1YTk4MS01OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uonEfxkp3q9mI5KzJYSDIqZhoTLQE0T98CdczPhcBiSdCFxilAPbDM5ikcr ZAc/CZtq7RTWQ/hxsRmU393RAbDbvfTJlS8iYqpkjsNuw9YHd09XkTCj2wiiBdsX v8A3xImEfoCjW8FiLRK5u5yxVrIzDzCzxM0Bu2GaYtMCkkYrQTviNnjHr9U4I0Is fx35ZcU/R30dF8TGS4GGmklbzBImTJCJUQ+o3VXZ02cz6g6S99PjN6XdcK4UxIlN k59Oru08954GaanlP+CoPBn3h9/vMlSsyz/rLQnRfMbdTlp2k6BDQuIz3UDDZpWe sWI1VPN+YbJGIRxc60zy1zuLwwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCjSIE+Y 7GGbnm9qEl4nKDB6h1X8MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0IyRENFNkU0 QjA3MTFFRUIxNTRBNTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnzpADBAJnz3wDBAJqACgDBAJ5LlwwDQYJKoZIhvcNAQEL BQADggEBADI3Id1Yw9HhBLLUHswgAS3oocnDZ4TR2nuELCqe0X3/DHxhKcNbYLov WoXJMYJCiqOGrqUUzXPMFv+EG3XfT63pnJFd4N71P2L9VUrT82mM+T5N3jtapbKR VROdFICSRKmoaSHb3U6TBR/s4AdIr4kg8vR3tABXbn0Ys4468Zq3O5akbMGp/6OJ s5I1ZeSwCbFo0AaJjC3SnORvV79iQeV2ynpexxjnWgvpK5/zbd0AaGIFwuUo5PE3 N+bpPvw9eGBLnlgsofzyPHtaWFX1I9G6hmnd7kknuu9RCzlgB/dKikyEQSoYlmyP 2gvjV5zaftO1W+YrqpVtmK4Y8l0plHM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org