$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3009A40F7A11EB8197F146C4F9AE02.roa File: 8D3009A40F7A11EB8197F146C4F9AE02.roa (raw, json) Hash identifier: YKahXmUpLFEJsOovBj2vBjQJL0UdtGURSBIgSgHRvPk= Subject key identifier: 90:05:86:E2:05:0E:0E:06:2B:E4:39:DF:5A:22:20:24:EA:2D:70:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CC8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3009A40F7A11EB8197F146C4F9AE02.roa Signing time: Wed 10 May 2023 16:26:13 +0000 ROA not before: Wed 10 May 2023 16:26:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137086 IP address blocks: 103.155.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27848 (0x6cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:26:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5a5-9827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:60:b4:14:9f:0e:b8:01:67:4d:58:1b:d7: e2:65:46:b1:c8:38:d7:2e:dd:b5:b2:42:90:78:d0: 32:55:4f:70:01:5a:c8:bc:23:2c:db:39:08:0e:c4: 04:3d:2a:03:6b:d9:80:29:5f:4c:dd:d8:44:c9:7d: 90:f2:06:92:66:ec:e5:a0:76:e8:0d:50:ba:55:d3: 2b:06:60:20:77:e5:77:37:65:1f:22:6b:f7:7a:bb: d9:5d:9d:db:87:d7:d4:93:54:74:2a:46:35:31:0b: 4b:5d:59:67:bc:b9:79:2f:27:15:dd:61:07:c9:28: 9f:50:46:29:ea:96:47:a5:01:28:d2:a8:2e:ee:bc: e3:bf:41:1b:a2:7c:53:a8:96:d9:26:7a:62:65:65: c8:35:32:50:80:8b:7e:97:0b:f0:4f:e3:b4:62:ce: b6:70:6e:91:44:d1:21:e5:41:25:ed:1c:e4:32:e6: 85:80:5a:54:91:2e:8c:5d:49:74:3e:25:e1:51:c2: 87:12:f0:8a:22:10:44:a6:8c:e1:89:b1:47:5b:db: f0:04:71:1e:c8:43:d1:1f:67:4a:93:33:87:ce:38: 7b:0a:1e:89:67:02:86:d8:e1:86:d0:28:04:cb:dd: c8:5d:55:6a:24:ca:5d:30:52:fd:d6:ed:f4:85:1d: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:86:E2:05:0E:0E:06:2B:E4:39:DF:5A:22:20:24:EA:2D:70:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3009A40F7A11EB8197F146C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.237.0/24 Signature Algorithm: sha256WithRSAEncryption 31:7f:68:db:e6:07:5e:d5:f1:d8:90:2d:04:d0:15:29:8c:dd: b5:df:2b:a2:1b:81:ab:9c:8a:b8:cc:74:12:b9:fe:11:08:b3: 2e:69:44:ec:d9:06:51:da:8e:6f:74:1a:e0:28:3a:8f:5d:29: cc:31:36:a5:42:48:10:90:08:8d:d9:2f:90:f6:98:15:88:db: e2:21:38:a4:80:8d:10:d8:32:36:87:5e:57:11:33:f8:24:80: 09:bb:c7:80:76:c1:d0:d9:34:61:01:7b:c0:04:76:ab:83:7b: 77:d1:e2:ce:b3:19:f7:52:b8:05:d3:b5:57:c8:89:36:d0:ce: 63:a4:bc:6b:d1:51:c2:95:bb:de:96:3e:db:86:d2:58:97:60: d1:7d:fa:97:13:53:fb:3c:fe:91:97:61:5d:27:6a:0a:6f:13: a9:13:ab:f4:19:c3:39:a9:fe:f3:e2:09:27:7b:bc:6c:f0:06: 7d:ca:21:5b:7f:48:e3:96:0e:fc:56:bf:5d:6f:00:17:46:59: 2a:78:5d:21:f5:68:8f:22:79:23:48:d9:d9:02:b2:f2:a7:92: 69:b6:8e:9b:6f:59:aa:64:42:c5:e8:d5:54:61:5c:44:5c:50: fa:91:40:71:ba:13:31:9f:f0:44:9a:f3:2c:13:5b:fb:48:f4: c1:36:1a:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNjEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVhNS05ODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe9gtBSfDrgBZ01YG9fiZUaxyDjXLt21skKQeNAyVU9wAVrIvCMs2zkIDsQE PSoDa9mAKV9M3dhEyX2Q8gaSZuzloHboDVC6VdMrBmAgd+V3N2UfImv3ervZXZ3b h9fUk1R0KkY1MQtLXVlnvLl5LycV3WEHySifUEYp6pZHpQEo0qgu7rzjv0EbonxT qJbZJnpiZWXINTJQgIt+lwvwT+O0Ys62cG6RRNEh5UEl7RzkMuaFgFpUkS6MXUl0 PiXhUcKHEvCKIhBEpozhibFHW9vwBHEeyEPRH2dKkzOHzjh7Ch6JZwKG2OGG0CgE y93IXVVqJMpdMFL91u30hR350wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJAFhuIF Dg4GK+Q531oiICTqLXBKMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEQzMDA5QTQw RjdBMTFFQjgxOTdGMTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnm+0wDQYJKoZIhvcNAQELBQADggEBADF/aNvmB17V8diQ LQTQFSmM3bXfK6IbgaucirjMdBK5/hEIsy5pROzZBlHajm90GuAoOo9dKcwxNqVC SBCQCI3ZL5D2mBWI2+IhOKSAjRDYMjaHXlcRM/gkgAm7x4B2wdDZNGEBe8AEdquD e3fR4s6zGfdSuAXTtVfIiTbQzmOkvGvRUcKVu96WPtuG0liXYNF9+pcTU/s8/pGX YV0nagpvE6kTq/QZwzmp/vPiCSd7vGzwBn3KIVt/SOOWDvxWv11vABdGWSp4XSH1 aI8ieSNI2dkCsvKnkmm2jptvWapkQsXo1VRhXERcUPqRQHG6EzGf8ESa8ywTW/tI 9ME2GjE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org