$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8554BCE0F29511EA8AB57F38C4F9AE02.roa File: 8554BCE0F29511EA8AB57F38C4F9AE02.roa (raw, json) Hash identifier: /IabbPd5Z4VrenVhQbuj/jn3GVDVv1jyN+4emZstITo= Subject key identifier: B5:7B:7E:DF:CA:D5:1C:47:B7:04:78:CC:AC:05:CE:43:7B:EC:0B:23 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B34 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8554BCE0F29511EA8AB57F38C4F9AE02.roa Signing time: Wed 10 May 2023 16:18:31 +0000 ROA not before: Wed 10 May 2023 16:18:31 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134337 IP address blocks: 103.181.158.0/23 maxlen: 24 103.184.194.0/23 maxlen: 24 103.203.224.0/22 maxlen: 24 202.66.164.0/22 maxlen: 24 2001:df0:d080::/48 maxlen: 48 2400:59e0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27444 (0x6b34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:31 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3d7-0921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:64:60:05:c3:d7:9e:5d:f5:38:ec:ea:fb: 4a:92:f2:08:ed:c9:68:16:2d:e8:82:9b:d2:6a:17: ef:01:4b:9d:44:3f:17:fe:9f:49:46:0c:5c:a8:9f: 58:8b:89:b5:b1:75:4e:ba:57:25:2e:4b:8d:75:ae: 2d:e3:ec:2e:25:e5:0f:84:03:89:97:1d:b3:d1:d9: 1e:6b:cc:ab:17:5f:c9:c9:05:d3:62:04:e7:bc:c3: 84:96:fc:c2:4a:6f:b7:e4:66:91:ac:2d:76:5f:62: 30:b9:d8:15:27:5f:7e:8d:ab:ea:a2:52:db:5a:ac: 5f:bb:60:7e:23:2e:79:2e:09:e2:b2:cd:7e:6f:22: 12:ae:e8:d2:09:df:a5:d7:a3:08:8c:12:66:8d:91: 5b:9e:84:7a:22:fc:ce:d4:d1:a0:2a:b8:35:38:83: 4f:3a:f2:18:2f:02:12:b8:5e:c2:ef:55:f4:a8:0d: 20:fa:54:a0:a6:9b:d1:a2:ca:f6:bf:b6:fe:67:ee: c9:85:b1:a0:4b:c5:16:4d:ee:c8:05:be:28:cd:81: 83:4b:20:7a:20:43:15:91:f1:13:ff:47:c0:4f:2b: c7:ad:67:53:6d:aa:d0:20:3e:b3:85:1a:e1:61:d4: 5d:19:a6:75:e7:4d:44:dc:51:89:6f:8f:5a:26:74: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:7E:DF:CA:D5:1C:47:B7:04:78:CC:AC:05:CE:43:7B:EC:0B:23 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8554BCE0F29511EA8AB57F38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.158.0/23 103.184.194.0/23 103.203.224.0/22 202.66.164.0/22 IPv6: 2001:df0:d080::/48 2400:59e0::/32 Signature Algorithm: sha256WithRSAEncryption 29:6d:36:13:d6:de:d6:0a:bd:e3:15:8c:fe:f6:63:1d:70:ca: 2f:6d:6e:10:74:e4:57:8a:b4:19:cd:1f:63:e2:92:20:51:59: 79:0b:14:05:68:07:f5:b7:6a:78:f6:d1:b5:db:8c:fc:67:0f: 57:07:5b:ca:4e:04:16:30:99:c7:06:55:51:b5:1e:17:83:29: c1:f9:39:95:62:21:a7:71:4c:02:52:ac:8a:53:97:17:04:8c: 18:f7:29:e6:ef:cd:a0:ff:64:70:24:83:33:ed:11:03:d8:b3: f9:41:f8:4e:aa:15:07:a4:c1:2e:a9:c8:9a:9f:44:c9:54:db: 29:8b:01:08:d1:bf:04:c5:db:11:45:1c:d7:da:b8:a9:9d:57: 87:92:62:29:aa:b4:56:10:3b:17:90:81:85:a8:c1:8d:a2:28: 8a:a3:72:39:d6:e6:8b:45:0f:9c:33:fe:43:89:a0:1b:62:f4: 8d:3e:a8:b1:e5:e2:ec:65:30:e5:b2:c0:c7:56:40:a5:e2:22: 78:5c:ae:4d:84:83:0d:c0:d7:2f:61:8a:77:2a:82:26:7c:f9: 51:9f:0e:aa:7b:08:23:c5:f7:62:f1:1c:7c:79:bd:00:1d:6d: 5b:3a:00:28:2d:7c:b6:bf:d6:9a:eb:95:24:cb:04:90:50:8a: 8f:72:6f:1d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICazQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODMxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNkNy0wOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwlkYAXD155d9Tjs6vtKkvII7cloFi3ogpvSahfvAUudRD8X/p9JRgxcqJ9Y i4m1sXVOulclLkuNda4t4+wuJeUPhAOJlx2z0dkea8yrF1/JyQXTYgTnvMOElvzC Sm+35GaRrC12X2IwudgVJ19+javqolLbWqxfu2B+Iy55Lgniss1+byISrujSCd+l 16MIjBJmjZFbnoR6IvzO1NGgKrg1OINPOvIYLwISuF7C71X0qA0g+lSgppvRosr2 v7b+Z+7JhbGgS8UWTe7IBb4ozYGDSyB6IEMVkfET/0fATyvHrWdTbarQID6zhRrh YdRdGaZ1501E3FGJb49aJnRQzQIDAQABo4ICvzCCArswHQYDVR0OBBYEFLV7ft/K 1RxHtwR4zKwFzkN77AsjMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODU1NEJDRTBG Mjk1MTFFQThBQjU3RjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MB4EAgABMBgDBAFntZ4DBAFnuMIDBAJny+ADBALKQqQwFgQCAAIwEAMHACAB DfDQgAMFACQAWeAwDQYJKoZIhvcNAQELBQADggEBACltNhPW3tYKveMVjP72Yx1w yi9tbhB05FeKtBnNH2PikiBRWXkLFAVoB/W3anj20bXbjPxnD1cHW8pOBBYwmccG VVG1HheDKcH5OZViIadxTAJSrIpTlxcEjBj3KebvzaD/ZHAkgzPtEQPYs/lB+E6q FQekwS6pyJqfRMlU2ymLAQjRvwTF2xFFHNfauKmdV4eSYimqtFYQOxeQgYWowY2i KIqjcjnW5otFD5wz/kOJoBti9I0+qLHl4uxlMOWywMdWQKXiInhcrk2Egw3A1y9h incqgiZ8+VGfDqp7CCPF92LxHHx5vQAdbVs6ACgtfLa/1prrlSTLBJBQio9ybx0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org