$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/822A363CC8A611EDAA11D333C4F9AE02.roa File: 822A363CC8A611EDAA11D333C4F9AE02.roa (raw, json) Hash identifier: m8apczQXIcZlbIH/oKxS3lM1eAoft5Nh5nqxpWN9ob8= Subject key identifier: 11:DA:62:2B:53:19:BB:0F:3F:73:30:FC:2B:0F:42:16:24:8C:0E:3D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 816D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/822A363CC8A611EDAA11D333C4F9AE02.roa Signing time: Fri 12 Jan 2024 10:03:08 +0000 ROA not before: Fri 12 Jan 2024 10:03:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150650 IP address blocks: 103.84.106.0/23 maxlen: 24 2001:df1:f1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33133 (0x816d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 12 10:03:08 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65a10e5c-e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:b9:f9:ba:94:cd:01:05:dd:4d:e9:2f:10: f2:f1:7b:0f:2d:be:48:16:02:e1:a4:4c:cb:56:cb: d8:fb:44:94:e4:cd:9b:84:9d:31:ae:0d:80:9c:73: c2:e7:8d:62:3b:ff:f6:1c:c8:3f:00:46:85:86:ae: 12:c7:3d:cd:60:e0:bc:0f:5b:73:ec:da:08:e2:68: 2d:c9:18:42:a1:b4:1c:69:92:64:ba:6b:82:32:c5: c4:30:db:2e:35:c6:05:8a:00:55:89:8b:61:8d:34: 74:63:8e:39:97:f7:3b:5a:29:ca:02:20:33:70:f7: e9:a4:f4:36:e3:6c:60:66:c6:8b:23:ed:5d:68:e0: 17:88:b6:65:38:35:c4:a8:d8:78:89:d0:6f:7e:29: 34:96:0e:43:73:f7:58:98:c2:0d:c2:97:fc:3a:56: 77:d5:d9:00:55:c9:52:05:2e:c5:d0:5d:38:f6:a9: 02:b3:a8:e9:64:b2:fc:24:d5:7c:ee:c3:07:be:dc: 4a:20:47:ad:9d:50:4c:45:5f:42:59:81:00:90:af: 3e:b3:0d:c8:17:6a:f2:8d:c8:8c:ac:bc:66:58:e7: 8c:e4:e3:1e:e7:3b:cc:b4:14:f5:7b:eb:62:7e:25: d3:3f:f0:1b:08:4d:c6:16:e1:61:dc:54:cd:40:5b: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DA:62:2B:53:19:BB:0F:3F:73:30:FC:2B:0F:42:16:24:8C:0E:3D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/822A363CC8A611EDAA11D333C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.106.0/23 IPv6: 2001:df1:f1c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:52:51:4f:5b:33:9c:25:d7:b7:f0:e1:78:37:d6:85:b3:51: b2:d1:cd:a4:55:91:86:3a:a1:44:ec:30:67:6c:0b:21:4a:15: 96:25:39:32:c3:69:8c:17:24:bd:0c:f2:3f:0c:3e:cb:a7:04: cf:e2:f0:89:d3:72:e0:49:89:d6:2e:0b:6e:8e:72:40:a4:8d: da:70:b2:5a:6b:b7:b0:93:e8:23:1a:a8:7f:60:6f:8e:0b:26: 2d:2e:f2:37:14:06:27:1e:20:46:b6:e9:87:75:3c:54:1a:c4: 8e:aa:ae:97:54:9d:ca:5c:24:2b:19:b3:09:1a:07:c3:bf:cf: 02:15:fd:e6:59:99:eb:1a:4e:50:95:5a:f5:e6:cf:8e:d5:30: 5e:f9:2f:a7:79:8f:4c:08:02:cb:8e:86:0b:84:1b:0c:0c:14: 0c:40:96:28:b3:b0:5e:83:5c:0f:52:6d:53:a7:9e:5d:83:0b: 58:07:b9:ab:ab:0f:70:95:e4:40:2c:72:43:df:15:cd:3d:bd: 3c:0a:6a:5b:e6:2f:18:6d:c0:10:a9:cf:ed:28:bb:9f:24:6c: 97:33:8f:74:90:a5:e0:b5:1d:ad:14:5a:ae:53:3a:a2:4b:5c: 13:cc:d9:0b:45:d0:73:1c:42:85:e9:bb:20:e5:0c:17:de:ae: cb:3b:b6:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIFtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDExMjEwMDMwOFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVhMTBlNWMtZTM2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUkufm6lM0BBd1N6S8Q8vF7Dy2+SBYC4aRMy1bL2PtElOTNm4SdMa4NgJxz wueNYjv/9hzIPwBGhYauEsc9zWDgvA9bc+zaCOJoLckYQqG0HGmSZLprgjLFxDDb LjXGBYoAVYmLYY00dGOOOZf3O1opygIgM3D36aT0NuNsYGbGiyPtXWjgF4i2ZTg1 xKjYeInQb34pNJYOQ3P3WJjCDcKX/DpWd9XZAFXJUgUuxdBdOPapArOo6WSy/CTV fO7DB77cSiBHrZ1QTEVfQlmBAJCvPrMNyBdq8o3IjKy8ZljnjOTjHuc7zLQU9Xvr Yn4l0z/wGwhNxhbhYdxUzUBbFDMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQR2mIr Uxm7Dz9zMPwrD0IWJIwOPTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgyMkEzNjND QzhBNjExRURBQTExRDMzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ1RqMA8EAgACMAkDBwAgAQ3x8cAwDQYJKoZIhvcNAQEL BQADggEBAI1SUU9bM5wl17fw4Xg31oWzUbLRzaRVkYY6oUTsMGdsCyFKFZYlOTLD aYwXJL0M8j8MPsunBM/i8InTcuBJidYuC26OckCkjdpwslprt7CT6CMaqH9gb44L Ji0u8jcUBiceIEa26Yd1PFQaxI6qrpdUncpcJCsZswkaB8O/zwIV/eZZmesaTlCV WvXmz47VMF75L6d5j0wIAsuOhguEGwwMFAxAliizsF6DXA9SbVOnnl2DC1gHuaur D3CV5EAsckPfFc09vTwKalvmLxhtwBCpz+0ou58kbJczj3SQpeC1Ha0UWq5TOqJL XBPM2QtF0HMcQoXpuyDlDBferss7thA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org