$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C935C1C27B911EE91BE1E5AC4F9AE02.roa File: 8C935C1C27B911EE91BE1E5AC4F9AE02.roa (raw, json) Hash identifier: XtucP6ZFQwJUCxIR+FN/aYiIa8gKW+cD4hvaxojvmIw= Subject key identifier: 86:2F:A8:F0:18:8A:15:41:70:16:41:32:FD:F9:CE:7C:3A:B3:AA:F7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 75F6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C935C1C27B911EE91BE1E5AC4F9AE02.roa Signing time: Fri 21 Jul 2023 11:27:18 +0000 ROA not before: Fri 21 Jul 2023 11:27:18 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133707 IP address blocks: 103.47.124.0/24 maxlen: 24 103.47.125.0/24 maxlen: 24 103.47.126.0/24 maxlen: 24 103.47.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30198 (0x75f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 21 11:27:18 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ba6b95-9a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:bc:5c:e1:c1:e9:4c:95:5b:3c:f0:1c:01: c4:2b:de:f2:da:f2:e5:ba:94:d2:86:e6:68:90:fa: 9b:9b:51:68:09:79:42:eb:bf:dc:c0:93:f9:5a:ec: e5:6f:9a:89:a8:99:71:f7:34:a7:72:12:4e:6b:29: af:48:59:ee:ae:e9:10:f4:d8:6d:77:6d:c4:19:73: 62:10:35:af:a8:9c:49:d8:6a:4a:aa:42:41:63:69: 16:ed:25:50:08:f6:dc:10:10:ed:3e:6f:b0:68:9f: 0a:c3:d5:6c:93:d6:4d:df:94:0b:1a:f0:88:d9:d5: 72:2b:fe:3c:80:47:04:64:f5:1e:89:32:54:49:21: 62:06:23:c6:4f:92:a5:cc:62:aa:a8:c5:95:98:b1: b0:12:3f:28:80:14:4a:d0:d2:2c:c7:4f:24:5c:68: 21:16:ed:29:a3:f5:ef:5a:29:c6:3c:61:e9:dd:93: 15:0e:15:9d:a9:15:62:ad:77:ca:72:53:6c:0d:fc: 9c:6a:dd:4a:19:c6:10:5b:ac:86:7a:53:ca:9b:90: 0a:f2:99:b0:57:70:81:b6:62:66:9a:41:91:64:70: 1e:06:80:a0:89:7a:f0:55:28:1f:bf:d8:0f:57:0a: 93:65:cd:25:56:de:50:dc:b5:71:16:14:20:02:8a: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:A8:F0:18:8A:15:41:70:16:41:32:FD:F9:CE:7C:3A:B3:AA:F7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C935C1C27B911EE91BE1E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:74:be:ec:fe:21:48:14:60:c5:d1:84:c8:9a:1d:54:62:3a: ba:d3:8e:90:6b:03:04:08:3e:64:25:56:dc:7c:70:b1:6a:48: 9b:97:c3:a9:ba:a3:47:20:9e:64:2f:b5:62:ec:c3:ac:24:01: e1:bf:e8:a7:ae:d7:c0:72:c3:e8:cc:d3:9a:ce:8d:7f:df:ee: 5f:1d:8b:71:6b:93:17:a4:39:b3:fa:b6:57:64:5a:49:8a:1e: b4:60:3a:60:ae:3f:f1:33:62:c6:89:78:d9:93:d0:2b:7a:60: 7d:84:11:f6:f8:8a:5a:fb:1b:4c:ee:e1:11:cb:d6:63:8c:c5: fc:c1:d1:82:2e:f7:e4:d4:dc:29:35:5c:8d:3c:9c:7c:14:35: 29:fd:26:b0:5c:0e:89:16:de:b6:e6:e7:99:f1:60:e8:27:32: e6:18:8a:58:4f:32:6c:ed:26:89:e6:8d:05:d3:d2:00:6b:59: 39:49:29:34:8e:3f:a8:92:ab:78:7b:51:63:99:5b:93:48:c8: a4:fd:95:28:c0:ab:73:ed:35:50:08:c1:7c:0c:0f:7d:6f:5e: fc:7b:0d:23:36:71:b0:01:9e:94:1e:45:6f:b8:7c:3e:43:91: 82:50:9e:91:9e:9a:ff:34:e0:9c:23:f8:2b:49:40:30:57:91: 58:b0:26:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICdfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzIxMTEyNzE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGJhNmI5NS05YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuye8XOHB6UyVWzzwHAHEK97y2vLlupTShuZokPqbm1FoCXlC67/cwJP5Wuzl b5qJqJlx9zSnchJOaymvSFnurukQ9Nhtd23EGXNiEDWvqJxJ2GpKqkJBY2kW7SVQ CPbcEBDtPm+waJ8Kw9Vsk9ZN35QLGvCI2dVyK/48gEcEZPUeiTJUSSFiBiPGT5Kl zGKqqMWVmLGwEj8ogBRK0NIsx08kXGghFu0po/XvWinGPGHp3ZMVDhWdqRVirXfK clNsDfycat1KGcYQW6yGelPKm5AK8pmwV3CBtmJmmkGRZHAeBoCgiXrwVSgfv9gP VwqTZc0lVt5Q3LVxFhQgAorCLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIYvqPAY ihVBcBZBMv35znw6s6r3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEM5MzVDMUMy N0I5MTFFRTkxQkUxRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnL3wwDQYJKoZIhvcNAQELBQADggEBAEt0vuz+IUgUYMXR hMiaHVRiOrrTjpBrAwQIPmQlVtx8cLFqSJuXw6m6o0cgnmQvtWLsw6wkAeG/6Keu 18Byw+jM05rOjX/f7l8di3FrkxekObP6tldkWkmKHrRgOmCuP/EzYsaJeNmT0Ct6 YH2EEfb4ilr7G0zu4RHL1mOMxfzB0YIu9+TU3Ck1XI08nHwUNSn9JrBcDokW3rbm 55nxYOgnMuYYilhPMmztJonmjQXT0gBrWTlJKTSOP6iSq3h7UWOZW5NIyKT9lSjA q3PtNVAIwXwMD31vXvx7DSM2cbABnpQeRW+4fD5DkYJQnpGemv804Jwj+CtJQDBX kViwJo0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org