$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa File: 8152D222387B11EB85E94170C4F9AE02.roa (raw, json) Hash identifier: pbxdwczi66I5fveN3nojN7LYZ+Ll2kZHcBNa8Ikz4KE= Subject key identifier: 47:9F:CA:51:EC:18:CD:6B:48:7D:96:88:B1:29:A5:9A:CB:C3:C3:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CE8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa Signing time: Wed 10 May 2023 16:26:47 +0000 ROA not before: Wed 10 May 2023 16:26:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137128 IP address blocks: 103.112.106.0/24 maxlen: 24 2001:df1:cec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27880 (0x6ce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:26:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5c7-250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:66:a1:69:1c:a4:f4:04:57:c2:9a:d5:93: ee:c1:55:66:0c:b2:8d:f6:fe:8a:12:f6:e7:84:33: 43:62:58:b9:b6:36:d2:9a:c4:60:e9:90:ea:90:9a: 54:2f:53:7a:5c:aa:dc:a2:b6:76:53:d4:3f:c7:90: eb:f6:6f:4f:d3:bf:9d:19:66:5f:91:2c:28:e9:b8: ab:00:87:78:69:9f:36:d7:13:f9:67:98:5f:5f:23: 80:f8:c6:ba:9a:81:35:05:05:97:62:61:5d:c8:59: 44:76:45:13:8c:be:f0:e1:6c:93:61:f0:08:f7:d3: e4:e1:21:93:fe:a2:45:58:92:21:ea:76:46:6c:f2: 99:f6:61:a0:f8:7b:49:14:d9:81:5d:2d:ed:45:84: 77:a5:81:5b:2e:9a:1d:17:14:d9:c5:92:bc:1b:4c: f4:9d:87:a4:6e:c2:5d:fa:1d:68:04:cc:43:64:12: 14:96:a9:0d:1d:f3:e5:99:db:32:a5:5b:0a:db:95: 96:95:30:90:38:21:94:7b:24:d6:89:f0:99:17:b5: 16:1b:d9:62:6c:af:0b:40:bf:74:c9:68:6a:71:bd: f4:0f:68:b3:51:85:7b:46:7b:53:7e:54:ef:cc:48: 5c:ba:2c:1f:bc:a2:f8:c6:79:3f:13:96:4f:63:87: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:CA:51:EC:18:CD:6B:48:7D:96:88:B1:29:A5:9A:CB:C3:C3:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.106.0/24 IPv6: 2001:df1:cec0::/48 Signature Algorithm: sha256WithRSAEncryption 34:ca:31:e6:76:82:92:82:e7:c9:d5:29:e5:e9:1b:f1:d0:dc: 12:c6:57:85:e1:85:cb:4a:40:cc:17:80:f5:c3:ed:2a:4e:9f: 8c:a7:1c:69:14:45:78:d1:53:48:37:3f:56:1a:23:ec:ff:1a: 76:20:9a:71:ac:90:cf:5f:b1:f1:7b:72:99:89:1f:83:f3:ed: 5e:93:69:56:31:b9:e2:08:02:73:97:bd:36:39:62:6c:86:d5: 08:2d:8d:45:04:07:f0:6e:e4:d7:40:61:c4:c4:a2:9d:ba:7e: 1a:11:21:0f:59:55:25:5d:59:0b:cc:2c:63:03:e9:aa:e6:77: 03:de:67:0e:f5:e7:d2:d5:94:95:58:df:1a:4b:67:e4:37:fd: 4e:08:63:5d:a4:62:e9:b6:3a:86:2d:78:e2:8e:59:54:09:69: d7:27:98:9e:c0:f5:cc:1f:5a:64:9c:bf:48:3e:72:f5:b2:3e: cf:a1:a2:25:aa:ab:1d:a2:c8:e7:f0:fe:99:5c:46:ad:0a:25: 4a:99:41:fb:2e:7a:54:6a:31:f4:5a:fd:ff:d5:11:b9:be:63: c9:60:cf:1e:f2:3d:c5:41:de:cb:99:f1:56:77:fe:4f:46:e6: 82:43:2a:26:da:d1:ee:31:46:17:81:63:2c:a6:3b:d8:84:ba: 05:49:d2:6d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNjQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVjNy0yNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EpmoWkcpPQEV8Ka1ZPuwVVmDLKN9v6KEvbnhDNDYli5tjbSmsRg6ZDqkJpU L1N6XKrcorZ2U9Q/x5Dr9m9P07+dGWZfkSwo6birAId4aZ821xP5Z5hfXyOA+Ma6 moE1BQWXYmFdyFlEdkUTjL7w4WyTYfAI99Pk4SGT/qJFWJIh6nZGbPKZ9mGg+HtJ FNmBXS3tRYR3pYFbLpodFxTZxZK8G0z0nYekbsJd+h1oBMxDZBIUlqkNHfPlmdsy pVsK25WWlTCQOCGUeyTWifCZF7UWG9libK8LQL90yWhqcb30D2izUYV7RntTflTv zEhcuiwfvKL4xnk/E5ZPY4fflwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEefylHs GM1rSH2WiLEppZrLw8PHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODE1MkQyMjIz ODdCMTFFQjg1RTk0MTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABncGowDwQCAAIwCQMHACABDfHOwDANBgkqhkiG9w0BAQsF AAOCAQEANMox5naCkoLnydUp5ekb8dDcEsZXheGFy0pAzBeA9cPtKk6fjKccaRRF eNFTSDc/Vhoj7P8adiCacayQz1+x8XtymYkfg/PtXpNpVjG54ggCc5e9NjlibIbV CC2NRQQH8G7k10BhxMSinbp+GhEhD1lVJV1ZC8wsYwPpquZ3A95nDvXn0tWUlVjf Gktn5Df9TghjXaRi6bY6hi144o5ZVAlp1yeYnsD1zB9aZJy/SD5y9bI+z6GiJaqr HaLI5/D+mVxGrQolSplB+y56VGox9Fr9/9URub5jyWDPHvI9xUHey5nxVnf+T0bm gkMqJtrR7jFGF4FjLKY72IS6BUnSbQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org