$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa File: 80EFFF14D89311EAAF16BC46C4F9AE02.roa (raw, json) Hash identifier: cHw2O2b/bz1GHsC2sPZY5qfDyifRUKl36RzzU5DId4o= Subject key identifier: CF:67:96:BA:5C:2F:8E:37:DF:B8:83:C9:0D:92:90:5C:DE:B8:A5:38 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B66 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa Signing time: Wed 10 May 2023 16:19:29 +0000 ROA not before: Wed 10 May 2023 16:19:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134905 IP address blocks: 103.211.76.0/22 maxlen: 24 2407:4cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27494 (0x6b66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc410-e479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:51:a0:e0:01:01:81:71:a8:e3:38:a1:44: e6:03:39:0e:26:cc:32:ca:22:74:dc:e8:f0:75:97: 50:46:e3:0b:f9:c4:5e:5c:2f:ba:96:22:b6:f7:c4: d0:d2:5b:d6:ab:89:2b:fe:e5:2d:3a:c9:37:c2:dc: b3:27:84:fd:79:61:aa:b7:a8:52:bc:20:1b:c5:49: 00:a1:9c:7f:4a:22:86:89:f6:6a:7f:89:ad:34:71: ec:a0:c4:78:55:a0:35:9a:3d:fd:fc:f9:e6:95:da: e6:0d:d0:c0:ee:7e:d9:a4:93:ee:95:71:a8:46:3a: c8:64:24:d6:56:0f:94:62:91:fc:f6:05:fe:1e:9a: 54:9a:a4:6c:71:a0:32:4e:9f:5a:b9:78:91:4f:d4: a6:1d:e8:71:b0:b2:87:34:8f:6e:d0:83:45:fb:0e: 06:b1:93:c0:bd:e6:93:c4:1d:57:91:67:93:46:d7: 6e:1c:5a:09:9c:d2:12:e7:61:d0:f3:ca:71:03:a7: d8:9d:f4:28:ea:0a:d0:18:c0:80:80:38:38:32:13: 1c:a5:0f:c4:63:43:3a:6d:c3:d9:c7:51:ac:0b:96: 23:d0:16:60:68:bb:b2:b6:4e:2c:13:f7:70:4d:83: e7:31:1d:aa:a1:5e:70:e1:75:a4:24:21:c0:55:f7: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:67:96:BA:5C:2F:8E:37:DF:B8:83:C9:0D:92:90:5C:DE:B8:A5:38 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.76.0/22 IPv6: 2407:4cc0::/32 Signature Algorithm: sha256WithRSAEncryption 60:87:34:6d:d0:83:34:fd:8e:bb:08:bc:6e:01:27:b6:d4:76: fe:9c:6f:93:49:31:79:da:02:9a:29:ef:83:99:70:7b:36:59: f1:8c:06:43:21:1d:81:c3:dd:63:12:4a:9a:3d:53:ae:aa:8e: 5a:02:f1:9c:1a:ae:8b:21:33:c6:c2:44:1e:c7:81:6f:d2:26: c6:91:a5:58:68:52:73:9b:26:ee:15:4f:3c:f7:86:e9:43:fb: 3d:96:96:34:6f:e5:a1:2c:eb:9d:c2:98:6f:49:60:ee:7d:d9: 5f:61:f3:f2:2d:ce:d3:c3:6e:4f:1b:ae:f8:1c:8f:51:df:b2: e2:e1:2a:0b:d3:a8:18:e5:fb:de:38:34:47:24:b0:fe:34:16: f5:da:31:bf:20:94:e5:b6:21:fc:d8:64:79:fe:d5:1c:97:30: d9:7a:ae:6c:65:15:99:36:0a:46:e4:67:8b:c4:99:09:a1:74: 6a:6c:c5:7c:e1:d2:a8:b0:be:97:68:39:b4:35:7e:d6:fe:5c: 0c:75:10:cf:cf:c8:95:36:0f:19:04:c6:ed:ce:63:6c:04:cb: ce:8a:ff:2a:bc:73:c5:5b:d8:fb:4b:d4:95:87:60:93:67:89: 10:17:7f:82:9c:f4:30:d5:49:4f:06:81:b2:b9:a0:92:ca:c0: 65:8d:e4:bf -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICa2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQxMC1lNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/tRoOABAYFxqOM4oUTmAzkOJswyyiJ03OjwdZdQRuML+cReXC+6liK298TQ 0lvWq4kr/uUtOsk3wtyzJ4T9eWGqt6hSvCAbxUkAoZx/SiKGifZqf4mtNHHsoMR4 VaA1mj39/PnmldrmDdDA7n7ZpJPulXGoRjrIZCTWVg+UYpH89gX+HppUmqRscaAy Tp9auXiRT9SmHehxsLKHNI9u0INF+w4GsZPAveaTxB1XkWeTRtduHFoJnNIS52HQ 88pxA6fYnfQo6grQGMCAgDg4MhMcpQ/EY0M6bcPZx1GsC5Yj0BZgaLuytk4sE/dw TYPnMR2qoV5w4XWkJCHAVfftVwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFM9nlrpc L44337iDyQ2SkFzeuKU4MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODBFRkZGMTRE ODkzMTFFQUFGMTZCQzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn00wwDQQCAAIwBwMFACQHTMAwDQYJKoZIhvcNAQELBQAD ggEBAGCHNG3QgzT9jrsIvG4BJ7bUdv6cb5NJMXnaApop74OZcHs2WfGMBkMhHYHD 3WMSSpo9U66qjloC8ZwaroshM8bCRB7HgW/SJsaRpVhoUnObJu4VTzz3hulD+z2W ljRv5aEs653CmG9JYO592V9h8/ItztPDbk8brvgcj1HfsuLhKgvTqBjl+944NEck sP40FvXaMb8glOW2IfzYZHn+1RyXMNl6rmxlFZk2CkbkZ4vEmQmhdGpsxXzh0qiw vpdoObQ1ftb+XAx1EM/PyJU2DxkExu3OY2wEy86K/yq8c8Vb2PtL1JWHYJNniRAX f4Kc9DDVSU8GgbK5oJLKwGWN5L8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org