$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DAE49A3B9F11ECA22F2535C4F9AE02.roa File: 82DAE49A3B9F11ECA22F2535C4F9AE02.roa (raw, json) Hash identifier: cQwyeV9K8LyIiNgTu9x3H22GktT7H6y4LaleMiS5Vas= Subject key identifier: 1C:5E:D8:A3:1F:88:32:63:1C:54:86:BB:88:2D:0E:F5:C2:9B:B5:0F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AB0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DAE49A3B9F11ECA22F2535C4F9AE02.roa Signing time: Wed 10 May 2023 16:15:59 +0000 ROA not before: Wed 10 May 2023 16:15:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133699 IP address blocks: 103.40.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27312 (0x6ab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:15:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc33f-0f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a8:4f:68:9b:d2:c6:e7:ea:63:ef:06:ac:f5: 0a:3f:d0:b1:3b:aa:50:3f:44:c1:d5:6d:ad:34:a2: 81:1f:cf:99:e4:56:46:64:22:6f:cf:46:c2:9a:62: db:75:4b:72:7f:e3:41:a2:7f:d4:42:38:0e:b8:a2: 43:83:c8:71:9c:c0:d5:a2:5d:44:a7:3f:ef:2b:93: f2:36:53:a1:1d:45:44:3a:45:d7:98:b1:fc:a8:81: d9:e1:2a:0b:e2:66:f9:63:3f:59:3f:02:08:c7:9a: 61:9b:fe:c7:be:5c:08:e3:2e:22:ff:71:5d:0b:c7: 7c:6b:b2:ff:03:c5:ff:32:81:bf:43:36:b4:a8:0d: 04:23:01:a3:55:cf:db:6c:15:3d:8b:aa:bb:c7:b9: 12:a7:6b:b0:5b:6f:e0:36:b2:06:b0:30:be:2d:7a: 08:a1:d0:19:8b:6c:e5:08:32:6c:41:73:aa:ba:0c: c3:8b:36:d1:3f:06:76:2f:13:63:16:4f:d3:26:7a: 4d:86:35:ce:db:53:c8:d6:25:3d:9f:f3:f9:f9:99: a0:2d:5e:ed:aa:86:ff:ee:3f:ca:f0:bf:cb:1c:f4: c7:4d:3d:89:18:0c:60:9c:bf:07:b5:54:f8:d0:fc: ae:2e:01:92:92:a8:2d:9c:e0:17:79:f6:60:1b:c5: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5E:D8:A3:1F:88:32:63:1C:54:86:BB:88:2D:0E:F5:C2:9B:B5:0F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82DAE49A3B9F11ECA22F2535C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.200.0/22 Signature Algorithm: sha256WithRSAEncryption b1:e9:98:be:5f:29:a6:aa:e1:19:f2:aa:5f:16:15:d1:4e:9b: f0:46:21:77:cb:ec:25:30:a4:ce:69:5f:9e:45:f4:64:11:02: ba:12:b3:ea:ad:8a:d5:5c:37:95:1c:0f:66:03:73:3d:e2:70: 79:0e:b8:82:fc:c1:6f:67:e3:15:20:14:36:44:c3:a5:4d:99: 86:ff:93:77:a7:07:55:1a:67:26:eb:a8:ba:cc:a9:74:60:23: 34:0b:dd:16:e5:7f:d0:b2:be:25:a4:ec:11:68:af:1b:83:71: c6:31:10:2d:97:3a:fe:45:ae:3e:0e:8a:43:6e:aa:0a:59:77: 92:69:b5:1b:f5:5d:cf:d3:03:0c:3f:f3:32:94:8f:09:e2:aa: 8d:35:7c:b5:5e:8f:c1:a6:39:d5:79:ed:74:5f:18:a1:3a:1e: b5:b7:f5:62:82:ae:d1:24:03:d7:d9:c0:ac:cf:06:9f:2f:6b: 53:ab:64:47:5c:7b:df:4f:3e:5b:1d:e4:fb:a8:40:5c:0c:db: 59:de:78:4f:28:8e:b9:26:cf:82:8f:34:7c:e7:b0:20:d8:ce: 09:27:ed:80:66:15:ff:a6:45:5d:c7:07:cc:b3:8b:89:49:d7: 0c:93:a4:8c:78:51:12:63:cc:91:8b:b5:dc:29:36:d0:76:cd: 6d:ef:70:34 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICarAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzMzZi0wZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qhPaJvSxufqY+8GrPUKP9CxO6pQP0TB1W2tNKKBH8+Z5FZGZCJvz0bCmmLb dUtyf+NBon/UQjgOuKJDg8hxnMDVol1Epz/vK5PyNlOhHUVEOkXXmLH8qIHZ4SoL 4mb5Yz9ZPwIIx5phm/7HvlwI4y4i/3FdC8d8a7L/A8X/MoG/Qza0qA0EIwGjVc/b bBU9i6q7x7kSp2uwW2/gNrIGsDC+LXoIodAZi2zlCDJsQXOqugzDizbRPwZ2LxNj Fk/TJnpNhjXO21PI1iU9n/P5+ZmgLV7tqob/7j/K8L/LHPTHTT2JGAxgnL8HtVT4 0PyuLgGSkqgtnOAXefZgG8WVRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxe2KMf iDJjHFSGu4gtDvXCm7UPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODJEQUU0OUEz QjlGMTFFQ0EyMkYyNTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnKMgwDQYJKoZIhvcNAQELBQADggEBALHpmL5fKaaq4Rny ql8WFdFOm/BGIXfL7CUwpM5pX55F9GQRAroSs+qtitVcN5UcD2YDcz3icHkOuIL8 wW9n4xUgFDZEw6VNmYb/k3enB1UaZybrqLrMqXRgIzQL3Rblf9CyviWk7BForxuD ccYxEC2XOv5Frj4OikNuqgpZd5JptRv1Xc/TAww/8zKUjwniqo01fLVej8GmOdV5 7XRfGKE6HrW39WKCrtEkA9fZwKzPBp8va1OrZEdce99PPlsd5PuoQFwM21neeE8o jrkmz4KPNHznsCDYzgkn7YBmFf+mRV3HB8yzi4lJ1wyTpIx4URJjzJGLtdwpNtB2 zW3vcDQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org