$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa File: 87960B42FFE811EBA7C9A476C4F9AE02.roa (raw, json) Hash identifier: WJ8oZdJhVBJLpSHDctPH/IIhY+kG0JjSXYz+6Jfb2Mc= Subject key identifier: 4E:7C:AC:E8:E2:93:0E:A9:CB:C0:E6:00:26:B4:7A:4F:93:B2:52:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F53 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:16 +0000 ROA not before: Wed 10 May 2023 16:38:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142454 IP address blocks: 103.142.164.0/23 maxlen: 24 103.171.120.0/23 maxlen: 24 2407:c3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28499 (0x6f53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc877-fcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:9c:4e:f3:7a:cd:d1:96:a2:82:e4:ed:41: 3e:55:02:c6:02:48:74:19:58:10:28:94:35:ce:1e: d2:d2:6e:d2:e6:70:1d:18:e0:67:14:3b:2f:92:83: 3c:64:f0:78:08:63:97:e7:0f:76:5d:28:78:f9:2f: 89:a1:b1:e3:76:93:18:ef:67:65:04:23:fa:94:cc: 00:73:4f:0c:8e:44:5d:d6:f8:f5:c5:d5:37:af:db: 3f:31:37:c9:2e:df:a7:63:4d:cd:f6:3e:5e:bf:47: 05:51:cc:79:ee:71:85:74:14:f2:a4:11:d6:23:f6: bd:8d:99:03:96:40:d4:37:bd:a4:9c:f1:36:5b:1b: 26:35:ff:3e:39:69:3b:33:2b:ae:23:f7:8c:37:e2: 94:ed:4b:99:bc:63:1f:83:0d:1f:3a:6f:b3:5f:14: 62:b2:57:b8:d2:2f:e7:49:cf:5a:52:0c:72:6c:a0: db:d5:8e:b4:1c:63:61:47:d4:c5:fd:ec:72:84:a5: e5:7c:93:f7:f5:55:36:30:53:de:fe:7e:1f:1c:22: 7f:48:48:2a:5b:ae:0f:64:38:ea:fe:4a:79:6f:7e: 40:ce:96:97:1d:27:51:17:12:e2:d0:8e:67:bd:43: 9f:89:10:5f:6c:0a:a2:6c:2e:d3:81:ca:11:70:d1: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7C:AC:E8:E2:93:0E:A9:CB:C0:E6:00:26:B4:7A:4F:93:B2:52:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.164.0/23 103.171.120.0/23 IPv6: 2407:c3c0::/32 Signature Algorithm: sha256WithRSAEncryption 62:fc:b4:bc:ca:0f:3b:c3:26:7c:8a:b5:db:0c:9e:f7:d0:af: 9d:dc:24:0a:af:ba:59:ee:c0:61:0f:c5:25:35:3b:80:66:fa: aa:df:aa:38:d1:20:7a:21:e7:b7:f9:a5:f9:57:fc:f4:fe:17: 84:19:8f:0f:89:67:d3:65:31:7b:3a:3d:a8:24:00:e8:89:f9: ef:f6:59:c3:71:10:6c:9b:eb:2e:30:40:40:79:cf:27:19:35: be:37:1a:24:c3:f0:77:69:32:8a:91:15:a3:9d:db:40:9a:cb: dd:9e:2c:58:ba:3f:8c:69:1e:12:5e:71:c5:61:d2:9a:3a:fa: 0a:bb:6b:bc:61:1a:72:51:13:e0:d0:3a:e1:33:6a:30:1d:f8: 43:d8:02:0b:14:1b:46:eb:b3:3b:fc:74:b7:fe:38:45:9f:aa: 5e:89:53:da:d1:7f:a3:07:18:cf:c4:89:fb:07:f7:2d:1f:10: b7:cd:47:17:b2:15:e4:09:b2:1f:84:f8:d6:dc:e4:df:4f:30: 84:5b:e7:95:9f:3e:94:a0:2b:c0:46:6a:26:57:16:55:11:66: 1c:d2:70:93:bf:46:6d:2a:94:6e:3e:91:eb:61:b0:55:9b:be: 86:34:50:7b:6d:f8:c5:ff:99:08:0f:77:46:3f:2c:79:fa:fa: ef:ef:a2:e3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICb1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg3Ny1mY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RecTvN6zdGWooLk7UE+VQLGAkh0GVgQKJQ1zh7S0m7S5nAdGOBnFDsvkoM8 ZPB4CGOX5w92XSh4+S+JobHjdpMY72dlBCP6lMwAc08MjkRd1vj1xdU3r9s/MTfJ Lt+nY03N9j5ev0cFUcx57nGFdBTypBHWI/a9jZkDlkDUN72knPE2WxsmNf8+OWk7 MyuuI/eMN+KU7UuZvGMfgw0fOm+zXxRisle40i/nSc9aUgxybKDb1Y60HGNhR9TF /exyhKXlfJP39VU2MFPe/n4fHCJ/SEgqW64PZDjq/kp5b35AzpaXHSdRFxLi0I5n vUOfiRBfbAqibC7TgcoRcNEX5QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFE58rOji kw6py8DmACa0ek+TslLhMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODc5NjBCNDJG RkU4MTFFQkE3QzlBNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnjqQDBAFnq3gwDQQCAAIwBwMFACQHw8AwDQYJKoZIhvcN AQELBQADggEBAGL8tLzKDzvDJnyKtdsMnvfQr53cJAqvulnuwGEPxSU1O4Bm+qrf qjjRIHoh57f5pflX/PT+F4QZjw+JZ9NlMXs6PagkAOiJ+e/2WcNxEGyb6y4wQEB5 zycZNb43GiTD8HdpMoqRFaOd20Cay92eLFi6P4xpHhJeccVh0po6+gq7a7xhGnJR E+DQOuEzajAd+EPYAgsUG0brszv8dLf+OEWfql6JU9rRf6MHGM/EifsH9y0fELfN RxeyFeQJsh+E+Nbc5N9PMIRb55WfPpSgK8BGaiZXFlURZhzScJO/Rm0qlG4+keth sFWbvoY0UHtt+MX/mQgPd0Y/LHn6+u/vouM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org