$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A2939E041F11ED888BB024C4F9AE02.roa File: 82A2939E041F11ED888BB024C4F9AE02.roa (raw, json) Hash identifier: 4AHoP5GcdINzKlhu1jKDFy7Zxq8GlVVmG7VMT1K6pTs= Subject key identifier: 21:4A:F3:5E:A1:B3:42:17:49:9D:35:04:24:5F:25:10:F4:58:9E:D9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70A8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A2939E041F11ED888BB024C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:36 +0000 ROA not before: Wed 10 May 2023 16:44:36 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150007 IP address blocks: 103.191.86.0/23 maxlen: 24 2001:df1:6940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28840 (0x70a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:36 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9f4-fd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:f8:a6:a7:ba:08:61:79:a1:2e:4a:d3:da: 36:1f:e9:6e:c5:e3:78:ef:77:7c:cd:d4:a8:e5:47: 03:d9:1d:6e:3f:ce:c3:2b:c1:d3:fe:ef:51:a8:79: 86:3d:08:28:9d:bf:c4:99:89:4f:10:77:4e:2f:e4: 1f:e0:a1:2a:31:fb:21:2a:d0:c2:63:a7:8d:0c:0f: f8:2e:33:cf:0f:52:2f:cf:62:68:66:29:80:3a:04: 2b:25:0e:d2:00:c1:eb:a2:a0:aa:36:51:91:06:40: f4:15:03:4e:19:1e:46:c4:af:33:df:9a:34:5b:25: 52:4c:db:3d:da:23:1e:a4:5a:06:9d:4e:c6:16:91: 35:27:41:e1:49:a1:60:b8:d3:9c:31:70:0e:1d:2a: 58:1d:81:dd:a8:bc:d0:f4:d7:b9:fa:38:a5:58:42: b4:f5:2b:ec:78:16:ba:26:65:0f:c2:fd:95:fa:d2: e8:d0:aa:bd:26:73:39:30:7b:53:0b:d3:3e:8c:2b: 58:1d:be:64:1d:8c:3a:de:3d:d8:2e:d9:a3:b6:79: ee:a1:4e:7d:9a:25:34:3e:a7:70:4f:2e:26:ab:d4: 8b:43:e9:ae:49:96:75:86:9b:cb:51:da:92:b9:25: 49:aa:5b:f0:a1:68:4c:2b:92:4c:99:24:60:26:b0: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:F3:5E:A1:B3:42:17:49:9D:35:04:24:5F:25:10:F4:58:9E:D9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A2939E041F11ED888BB024C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.86.0/23 IPv6: 2001:df1:6940::/48 Signature Algorithm: sha256WithRSAEncryption 44:5d:16:55:92:15:b0:4a:00:7a:11:86:7a:54:da:53:77:f1: 09:63:20:de:de:f9:e8:bb:4a:66:a9:95:5b:ca:7a:65:4d:fd: 42:74:b3:03:d4:b6:e6:19:54:72:3a:18:00:a0:74:99:d4:ce: 8d:59:11:0d:62:54:fd:ac:bb:c5:38:5d:85:71:1d:94:b4:96: 82:d9:8a:08:a1:b3:ae:55:fd:b9:27:c6:ef:8b:9d:8b:c3:b6: 3c:a3:4b:37:a3:08:79:7f:9d:b2:ea:10:e7:d2:38:fb:c0:e4: 13:09:07:86:64:85:19:8e:d9:2c:be:e9:da:99:48:20:a6:36: 21:be:79:96:12:42:30:ff:1e:1d:a7:2d:d0:48:aa:52:10:77: 17:7c:55:b0:9d:f3:59:40:b9:35:79:fd:26:ec:88:63:30:d6: c0:bf:4e:1f:f6:66:c2:81:03:7e:91:74:ad:ff:e6:5d:d0:fe: 3a:53:a6:ba:98:f9:91:d9:7e:bf:91:9d:c0:2d:66:a4:78:04: 3c:60:28:58:c9:b3:aa:b1:66:4d:07:a4:b4:2b:47:a2:e9:cf: 16:90:66:b9:6f:dc:1b:e6:94:5b:89:fb:95:85:41:96:b3:c7: d5:00:42:99:88:5e:ba:01:a0:01:0a:4e:85:6b:bf:5b:2a:6c: 90:c5:4f:fc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDM2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlmNC1mZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46n4pqe6CGF5oS5K09o2H+luxeN473d8zdSo5UcD2R1uP87DK8HT/u9RqHmG PQgonb/EmYlPEHdOL+Qf4KEqMfshKtDCY6eNDA/4LjPPD1Ivz2JoZimAOgQrJQ7S AMHroqCqNlGRBkD0FQNOGR5GxK8z35o0WyVSTNs92iMepFoGnU7GFpE1J0HhSaFg uNOcMXAOHSpYHYHdqLzQ9Ne5+jilWEK09SvseBa6JmUPwv2V+tLo0Kq9JnM5MHtT C9M+jCtYHb5kHYw63j3YLtmjtnnuoU59miU0PqdwTy4mq9SLQ+muSZZ1hpvLUdqS uSVJqlvwoWhMK5JMmSRgJrCSfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCFK816h s0IXSZ01BCRfJRD0WJ7ZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODJBMjkzOUUw NDFGMTFFRDg4OEJCMDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv1YwDwQCAAIwCQMHACABDfFpQDANBgkqhkiG9w0BAQsF AAOCAQEARF0WVZIVsEoAehGGelTaU3fxCWMg3t756LtKZqmVW8p6ZU39QnSzA9S2 5hlUcjoYAKB0mdTOjVkRDWJU/ay7xThdhXEdlLSWgtmKCKGzrlX9uSfG74udi8O2 PKNLN6MIeX+dsuoQ59I4+8DkEwkHhmSFGY7ZLL7p2plIIKY2Ib55lhJCMP8eHact 0EiqUhB3F3xVsJ3zWUC5NXn9JuyIYzDWwL9OH/ZmwoEDfpF0rf/mXdD+OlOmupj5 kdl+v5GdwC1mpHgEPGAoWMmzqrFmTQektCtHounPFpBmuW/cG+aUW4n7lYVBlrPH 1QBCmYheugGgAQpOhWu/WypskMVP/A== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org