$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A6922EF9C711EBA99B2C64C4F9AE02.roa File: 85A6922EF9C711EBA99B2C64C4F9AE02.roa (raw, json) Hash identifier: 7qy5tWxOhDcGvZ2TzhDJXAx0M8kHcAbhifpDeUm0uME= Subject key identifier: 5D:20:90:A8:7F:25:47:3B:C9:DA:3D:3E:50:DC:9B:22:12:E0:4E:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D3E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A6922EF9C711EBA99B2C64C4F9AE02.roa Signing time: Wed 10 May 2023 16:28:22 +0000 ROA not before: Wed 10 May 2023 16:28:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137661 IP address blocks: 103.122.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27966 (0x6d3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:28:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc626-f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:18:85:11:93:b0:d6:37:48:14:47:2d:0b: fd:c9:1a:15:c7:dc:10:8f:0c:d0:3a:38:d5:d4:39: 02:30:01:11:8e:10:0f:84:64:e2:64:64:b1:ed:37: 49:75:a1:0f:59:09:37:cb:18:f8:e7:ca:c1:ff:d9: 91:73:6e:79:67:9a:ef:be:21:4d:cf:f4:65:f7:e9: 80:1e:d6:20:d5:4b:b4:0e:a9:d7:cb:d1:05:58:08: 4f:54:c1:de:2b:17:de:e9:63:4e:16:4b:d0:af:02: 66:72:cf:e0:51:b7:b2:56:4f:27:8e:da:24:11:fa: 71:8a:eb:13:0d:12:ee:44:ad:99:19:f5:10:85:e8: e0:2a:f0:44:08:9f:06:ec:51:4a:e0:2d:75:3a:5c: 76:18:4b:a4:f3:db:d3:83:66:30:af:6b:04:48:8e: cb:c3:0a:98:3e:a0:d3:8f:ce:25:24:b4:9f:67:6d: d3:5d:aa:34:63:5b:18:05:cf:01:ed:44:90:d0:b9: fe:75:7b:08:78:91:bd:47:0c:72:15:f4:b3:cd:a2: 69:36:1b:ff:12:ee:44:7c:c7:97:8e:8b:de:0a:22: b3:53:fa:7d:d3:6a:d9:c9:9c:2d:16:e0:fa:c3:51: 69:e3:8b:d6:fc:bf:ae:8b:ba:fb:5a:f7:73:f5:e0: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:90:A8:7F:25:47:3B:C9:DA:3D:3E:50:DC:9B:22:12:E0:4E:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85A6922EF9C711EBA99B2C64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:1d:6e:93:de:68:17:7c:1d:62:4e:2a:e7:d2:7b:7b:fa:24: a2:8b:11:d8:86:40:33:fa:a0:1f:cb:7c:be:8c:90:35:10:c6: d3:1e:78:84:25:33:0f:3f:77:e4:1c:56:0f:c7:e0:4f:16:27: 2a:f1:6b:b9:0b:d8:4b:38:a5:bd:d8:93:e2:23:ef:44:ba:60: f6:45:44:54:0d:14:75:d9:6e:a1:ac:3f:8a:29:ce:68:db:8d: d6:2f:cb:20:10:04:cb:23:0a:bb:39:06:9e:40:e2:70:d4:43: 09:36:4b:03:b2:af:c1:57:b2:b3:a4:d0:20:a3:d0:a1:fc:39: 3d:66:61:2c:71:21:1c:f3:32:9d:3f:fe:94:42:44:09:21:f6: a0:74:23:73:30:7b:83:9f:09:ff:37:5f:b2:80:45:c6:02:75: a9:10:b5:59:f1:76:8b:2c:2e:47:ce:eb:e1:9b:c7:7c:09:78: bd:e7:27:59:87:a8:2b:29:31:37:8b:d9:4e:cb:5e:30:c7:b5: c8:fd:9a:9b:51:1a:7e:42:53:29:37:10:e6:60:02:48:93:3b: 0a:4f:a7:5c:93:d2:14:57:d7:ee:77:98:71:3f:eb:8d:30:b3: 07:48:bb:1e:3f:9c:09:51:d7:b6:6b:42:ab:be:7d:17:17:88: 98:3b:0c:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyODIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzYyNi1mNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6UYhRGTsNY3SBRHLQv9yRoVx9wQjwzQOjjV1DkCMAERjhAPhGTiZGSx7TdJ daEPWQk3yxj458rB/9mRc255Z5rvviFNz/Rl9+mAHtYg1Uu0DqnXy9EFWAhPVMHe Kxfe6WNOFkvQrwJmcs/gUbeyVk8njtokEfpxiusTDRLuRK2ZGfUQhejgKvBECJ8G 7FFK4C11Olx2GEuk89vTg2Ywr2sESI7LwwqYPqDTj84lJLSfZ23TXao0Y1sYBc8B 7USQ0Ln+dXsIeJG9RwxyFfSzzaJpNhv/Eu5EfMeXjoveCiKzU/p902rZyZwtFuD6 w1Fp44vW/L+ui7r7Wvdz9eAOQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF0gkKh/ JUc7ydo9PlDcmyIS4E6GMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODVBNjkyMkVG OUM3MTFFQkE5OUIyQzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneiQwDQYJKoZIhvcNAQELBQADggEBAAsdbpPeaBd8HWJO KufSe3v6JKKLEdiGQDP6oB/LfL6MkDUQxtMeeIQlMw8/d+QcVg/H4E8WJyrxa7kL 2Es4pb3Yk+Ij70S6YPZFRFQNFHXZbqGsP4opzmjbjdYvyyAQBMsjCrs5Bp5A4nDU Qwk2SwOyr8FXsrOk0CCj0KH8OT1mYSxxIRzzMp0//pRCRAkh9qB0I3Mwe4OfCf83 X7KARcYCdakQtVnxdossLkfO6+Gbx3wJeL3nJ1mHqCspMTeL2U7LXjDHtcj9mptR Gn5CUyk3EOZgAkiTOwpPp1yT0hRX1+53mHE/640wswdIux4/nAlR17ZrQqu+fRcX iJg7DKI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org