$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C488D7AD4D411EBB9EBD141C4F9AE02.roa File: 8C488D7AD4D411EBB9EBD141C4F9AE02.roa (raw, json) Hash identifier: /oDHs3Z5UjpuGg71PBMrbcMgdqTdHIM1WTAol+qXNOQ= Subject key identifier: 4B:64:7C:FB:30:82:80:73:FC:DE:1D:19:BE:DF:CA:85:87:B6:34:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D62 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C488D7AD4D411EBB9EBD141C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:05 +0000 ROA not before: Wed 10 May 2023 16:29:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138259 IP address blocks: 103.124.168.0/24 maxlen: 24 103.124.169.0/24 maxlen: 24 103.124.170.0/24 maxlen: 24 103.124.171.0/24 maxlen: 24 2406:1d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28002 (0x6d62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc651-0793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:7d:74:36:98:6e:85:b8:c5:b1:78:14:1c: c9:e8:cb:5e:bc:89:b4:55:a9:6f:59:36:0c:58:e0: b3:77:4c:92:6b:44:39:b7:77:7e:e6:8d:95:b1:cd: 2a:5f:8c:f2:1e:02:80:a9:17:52:9b:ec:65:09:56: 0b:2e:c7:3b:52:a6:2b:cc:2d:a6:ed:38:1e:9c:96: a8:3e:00:52:0a:d1:01:8c:04:b0:74:9a:f4:5f:0d: 7f:20:ec:9a:17:10:3f:ec:c4:b3:a3:19:1c:6d:20: 41:d9:ff:b2:e7:7b:e1:35:e2:36:a4:82:91:48:1e: 86:8b:17:25:b2:8b:4c:61:2f:8a:1b:9a:81:00:1f: b2:ab:53:02:b9:32:e8:93:bc:9a:7e:14:19:f7:59: 1a:95:c2:87:27:25:8f:7d:bf:77:9d:7c:75:4a:8c: 01:7a:a7:86:d1:8e:fe:a0:ce:8a:fa:a0:8a:54:da: 63:0a:86:7e:b0:a0:a2:87:84:eb:cc:dd:c7:dc:fd: 74:d8:1b:2f:87:da:85:d7:68:6f:97:df:32:f7:6b: f7:95:44:17:ac:01:7e:39:01:bf:1f:52:ba:a9:87: 04:44:7f:6c:77:ad:2c:ae:66:45:58:da:71:d5:2a: e9:67:bc:50:18:2e:52:83:c1:22:94:05:99:6b:d8: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:64:7C:FB:30:82:80:73:FC:DE:1D:19:BE:DF:CA:85:87:B6:34:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C488D7AD4D411EBB9EBD141C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.168.0/22 IPv6: 2406:1d40::/32 Signature Algorithm: sha256WithRSAEncryption 55:2f:2b:7a:eb:2c:89:59:e8:00:ea:c0:13:dd:5b:3c:3e:6c: 6d:0f:15:39:0d:f3:41:55:0b:47:b4:31:b7:45:76:df:de:6e: 6f:0b:74:e2:d4:a8:b7:31:56:25:d5:aa:29:cf:c0:17:2b:3e: ee:da:d2:24:d3:7f:3a:e4:10:d3:7b:23:60:e2:82:8e:43:be: 83:5e:94:e0:4b:20:1a:89:ad:f9:c0:7f:2f:b9:b5:82:6a:72: d1:be:22:5e:d4:eb:f8:20:c2:ce:68:e5:74:7c:63:eb:2c:d6: ac:c1:57:f6:9d:06:26:82:ed:68:1a:3f:70:8d:a8:e7:51:cf: cb:53:b7:94:ae:c7:e8:43:1a:e9:b2:53:7f:ee:fe:42:90:74: e8:79:23:88:25:16:47:88:e5:58:ec:6d:dd:c0:09:49:36:bd: fe:15:a5:a4:fa:f9:43:47:0a:3f:f0:ab:69:1a:54:7d:06:ac: f7:9b:44:36:e0:9b:46:7e:91:e0:e2:e0:fb:ca:e5:d8:26:47: ef:fd:bf:55:df:ad:66:c9:66:00:8e:fc:3e:b0:da:ed:08:d9: ce:61:83:5e:0d:ff:ec:c8:27:ca:94:c6:e5:63:2b:d2:38:0a: 2b:74:bc:d9:40:33:f3:ab:03:70:2a:54:21:07:07:50:1e:87: 60:2e:5c:00 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICbWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY1MS0wNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDR9dDaYboW4xbF4FBzJ6MtevIm0ValvWTYMWOCzd0ySa0Q5t3d+5o2Vsc0q X4zyHgKAqRdSm+xlCVYLLsc7UqYrzC2m7TgenJaoPgBSCtEBjASwdJr0Xw1/IOya FxA/7MSzoxkcbSBB2f+y53vhNeI2pIKRSB6GixclsotMYS+KG5qBAB+yq1MCuTLo k7yafhQZ91kalcKHJyWPfb93nXx1SowBeqeG0Y7+oM6K+qCKVNpjCoZ+sKCih4Tr zN3H3P102Bsvh9qF12hvl98y92v3lUQXrAF+OQG/H1K6qYcERH9sd60srmZFWNpx 1SrpZ7xQGC5Sg8EilAWZa9gPDQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEtkfPsw goBz/N4dGb7fyoWHtjRWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEM0ODhEN0FE NEQ0MTFFQkI5RUJEMTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfKgwDQQCAAIwBwMFACQGHUAwDQYJKoZIhvcNAQELBQAD ggEBAFUvK3rrLIlZ6ADqwBPdWzw+bG0PFTkN80FVC0e0MbdFdt/ebm8LdOLUqLcx ViXVqinPwBcrPu7a0iTTfzrkENN7I2Digo5DvoNelOBLIBqJrfnAfy+5tYJqctG+ Il7U6/ggws5o5XR8Y+ss1qzBV/adBiaC7WgaP3CNqOdRz8tTt5Sux+hDGumyU3/u /kKQdOh5I4glFkeI5Vjsbd3ACUk2vf4VpaT6+UNHCj/wq2kaVH0GrPebRDbgm0Z+ keDi4PvK5dgmR+/9v1XfrWbJZgCO/D6w2u0I2c5hg14N/+zIJ8qUxuVjK9I4Cit0 vNlAM/OrA3AqVCEHB1Aeh2AuXAA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org