$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A9DFC6085B11EBA40E1375C4F9AE02.roa File: 82A9DFC6085B11EBA40E1375C4F9AE02.roa (raw, json) Hash identifier: eCh1ow9LfoHPeq94KfYY/p42P3jbAXQ0O6RHsYMi2Kw= Subject key identifier: 83:DD:7F:AB:58:E4:15:36:E5:A7:09:53:CF:E4:4C:A2:24:CE:F2:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D6A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A9DFC6085B11EBA40E1375C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:14 +0000 ROA not before: Wed 10 May 2023 16:29:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138272 IP address blocks: 103.132.172.0/22 maxlen: 24 124.66.168.0/22 maxlen: 22 124.66.168.0/24 maxlen: 24 124.66.169.0/24 maxlen: 24 124.66.170.0/24 maxlen: 24 124.66.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28010 (0x6d6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc65a-4682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:25:8c:d8:e9:bc:64:43:21:65:ea:c7:60: cc:dd:4b:d1:fd:8f:2c:0e:bb:82:a3:ce:6f:26:b7: 83:34:15:22:66:ac:e6:9f:71:0e:d1:46:a6:ba:5b: 8b:a3:1e:a1:06:9d:2d:29:92:ca:ef:a3:50:e7:47: 61:30:07:af:79:8e:ee:d1:e8:46:68:5e:bf:09:22: 44:1a:56:03:fe:b9:de:85:41:a9:e1:11:d0:9f:ab: d3:1d:59:80:e2:f9:ab:bd:47:bc:68:44:4b:8c:55: f6:8d:a8:9a:15:3f:f8:24:11:89:f6:04:8d:fc:72: df:4f:09:01:b8:66:b2:c9:5e:33:3e:70:ec:27:fe: 0b:06:c9:13:7f:bd:9e:c9:1f:13:6d:23:42:3e:bc: 28:29:6a:d2:33:eb:c5:61:bb:bc:8a:31:5f:b6:7b: eb:19:25:c1:26:ad:b9:c5:4b:42:d3:6e:d3:7d:19: 53:85:a2:59:d6:ca:e3:48:b6:2f:e7:4e:a8:00:63: da:1e:36:0a:ad:ac:fb:1c:dc:de:93:ae:c4:0c:24: 73:c5:93:46:a9:66:50:92:2c:56:aa:94:f4:8d:de: 44:1b:cd:74:fa:d2:46:18:86:14:ad:e9:31:2d:58: e3:d8:65:0c:df:39:00:56:f7:0c:a5:14:c9:61:ef: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:7F:AB:58:E4:15:36:E5:A7:09:53:CF:E4:4C:A2:24:CE:F2:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A9DFC6085B11EBA40E1375C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.172.0/22 124.66.168.0/22 Signature Algorithm: sha256WithRSAEncryption a9:86:30:5b:36:65:06:82:7a:a4:0c:fc:7d:8c:3f:6b:28:97: fe:ab:8f:3a:d0:e5:03:36:bb:a2:e2:6b:ec:44:ff:de:30:35: 27:e9:6e:3e:57:d5:da:b2:74:06:59:c1:82:d5:ef:d0:73:d8: 34:c5:7c:e8:6b:7d:f2:a1:47:8e:b5:55:79:84:75:e9:b0:63: 0b:75:3b:4c:22:1a:04:5c:fc:8b:43:06:39:d8:42:1a:e1:6e: 24:b5:7a:01:7c:9f:4c:bb:0a:6d:0b:06:e4:c6:89:d2:2b:e2: 01:a2:18:59:03:52:c5:ae:6b:a4:0a:33:7e:db:77:6e:ca:30: 26:f3:3a:ff:56:3a:af:3e:b2:4e:57:93:3e:ba:93:29:00:d3: cd:65:d8:fc:6b:65:04:9f:da:2a:19:5b:1b:56:05:e9:95:ce: 3f:1b:f5:8c:b0:d7:4c:4b:ea:87:b0:67:ff:6d:8d:47:a7:f7: 68:7d:08:8d:63:39:f2:7d:77:40:f5:d4:88:82:b3:98:0b:67: bb:79:41:42:4c:0b:99:e5:7a:35:37:fa:08:7c:81:bf:c0:46: 5e:36:c3:6e:2f:35:f7:7c:5e:5b:59:16:32:b4:e6:31:aa:a6: a3:0b:d7:3f:e8:87:a7:8b:16:df:5e:79:71:f7:9e:ec:6d:0b: f7:8b:97:40 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY1YS00NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09sljNjpvGRDIWXqx2DM3UvR/Y8sDruCo85vJreDNBUiZqzmn3EO0UamuluL ox6hBp0tKZLK76NQ50dhMAeveY7u0ehGaF6/CSJEGlYD/rnehUGp4RHQn6vTHVmA 4vmrvUe8aERLjFX2jaiaFT/4JBGJ9gSN/HLfTwkBuGayyV4zPnDsJ/4LBskTf72e yR8TbSNCPrwoKWrSM+vFYbu8ijFftnvrGSXBJq25xUtC027TfRlThaJZ1srjSLYv 506oAGPaHjYKraz7HNzek67EDCRzxZNGqWZQkixWqpT0jd5EG810+tJGGIYUrekx LVjj2GUM3zkAVvcMpRTJYe9vnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIPdf6tY 5BU25acJU8/kTKIkzvKHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODJBOURGQzYw ODVCMTFFQkE0MEUxMzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnhKwDBAJ8QqgwDQYJKoZIhvcNAQELBQADggEBAKmGMFs2 ZQaCeqQM/H2MP2sol/6rjzrQ5QM2u6Lia+xE/94wNSfpbj5X1dqydAZZwYLV79Bz 2DTFfOhrffKhR461VXmEdemwYwt1O0wiGgRc/ItDBjnYQhrhbiS1egF8n0y7Cm0L BuTGidIr4gGiGFkDUsWua6QKM37bd27KMCbzOv9WOq8+sk5Xkz66kykA081l2Pxr ZQSf2ioZWxtWBemVzj8b9Yyw10xL6oewZ/9tjUen92h9CI1jOfJ9d0D11IiCs5gL Z7t5QUJMC5nlejU3+gh8gb/ARl42w24vNfd8XltZFjK05jGqpqML1z/oh6eLFt9e eXH3nuxtC/eLl0A= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org