$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE2F1CC55DB11ED97124346C4F9AE02.roa File: 8EE2F1CC55DB11ED97124346C4F9AE02.roa (raw, json) Hash identifier: LCcMZGO78SX4fSj0+0EiMAaZeOzUuL+1FZx/P6Ellnk= Subject key identifier: 68:7C:02:A4:76:00:6D:7C:DF:B1:BA:1E:13:B1:7E:C3:C0:32:33:A3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A1D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE2F1CC55DB11ED97124346C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:09 +0000 ROA not before: Wed 10 May 2023 16:13:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132923 IP address blocks: 43.228.228.0/22 maxlen: 24 103.85.90.0/24 maxlen: 24 103.156.142.0/23 maxlen: 24 103.159.39.0/24 maxlen: 24 103.240.32.0/22 maxlen: 24 2405:8340::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27165 (0x6a1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc295-1258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:26:66:18:b8:3a:37:48:e8:87:03:65:4d: 30:00:da:15:34:08:2e:31:92:8a:dc:b5:9e:e8:ae: f0:3e:2d:6d:f0:9f:a2:0b:88:77:f4:be:97:2d:9c: 70:a6:17:80:0e:4d:7c:3d:69:1a:57:05:68:77:66: 21:f4:27:54:2c:1a:02:9c:f5:98:1f:aa:ef:cd:25: f0:40:a9:49:cd:c9:0e:88:a3:f3:88:57:b0:c4:1f: 39:34:98:ca:cc:ab:07:f7:bf:bf:30:73:84:57:4f: 9b:bf:49:cc:ef:ca:22:ad:17:c9:9e:dd:b5:de:e6: 7e:12:9d:e1:cc:c2:eb:fa:34:5c:b9:df:c2:27:46: e1:df:0a:bb:b4:53:d7:73:15:3f:02:33:1e:33:46: eb:fa:d7:2d:c7:07:53:28:76:da:46:9b:c7:af:e7: 35:d0:5a:2e:57:e8:14:51:78:2d:12:be:a7:ed:29: 28:11:b6:cb:ae:3d:0e:4f:a0:fb:97:c8:7d:f3:28: 32:8c:a0:3e:20:a3:5a:ca:20:de:0c:38:c6:b1:da: 93:02:a8:a0:34:54:57:b2:02:04:6a:1f:a2:fc:07: c3:7a:4c:6e:dc:e1:8e:2d:e6:d9:82:fd:ba:64:85: d5:a5:36:22:de:65:3a:5a:dd:b3:57:36:66:33:56: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:02:A4:76:00:6D:7C:DF:B1:BA:1E:13:B1:7E:C3:C0:32:33:A3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE2F1CC55DB11ED97124346C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.228.0/22 103.85.90.0/24 103.156.142.0/23 103.159.39.0/24 103.240.32.0/22 IPv6: 2405:8340::/32 Signature Algorithm: sha256WithRSAEncryption 3b:d8:2b:8e:54:0d:fd:e2:74:6b:83:fc:d1:28:29:e9:c8:38: 06:b5:72:99:44:c0:99:69:22:15:f4:f3:4e:5b:a4:31:ec:1e: b1:26:b7:ce:57:08:ef:88:e6:53:29:af:33:30:b8:83:2c:a2: 2c:8e:3e:51:4b:25:09:d8:c5:f4:9e:35:a8:87:ae:75:a7:e4: bc:ab:a8:ac:7a:21:51:6e:e5:f7:a4:25:5b:73:29:1a:e8:13: 6f:26:3e:a1:fc:9d:38:a1:a8:e5:08:2c:48:e9:87:c2:de:e6: dc:0a:4b:1f:6d:97:a3:19:d8:51:a0:03:77:ed:43:e8:c4:dd: f8:cd:4a:8c:e4:7d:aa:60:e1:f1:ee:54:12:67:53:4f:80:00: c5:a3:f0:cf:f0:9a:00:f4:70:60:00:8e:b1:ec:35:d6:7d:97: 1d:8a:12:09:2a:bb:5e:5d:63:e2:7e:a4:be:da:04:04:97:b4: 1e:31:af:1e:ee:91:cb:39:25:fc:a9:03:79:b2:f6:93:ec:cf: 6a:07:90:cc:ce:ff:90:07:ad:a3:e0:18:37:37:d0:f6:f2:61: c1:43:30:5b:96:fb:cb:14:ff:c9:2b:dc:49:bf:a1:ab:3e:ff: 19:74:73:94:fe:c0:de:4a:0a:6a:e0:06:e7:0c:f8:17:9d:53: ac:4d:0b:2a -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICah0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI5NS0xMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFAmZhi4OjdI6IcDZU0wANoVNAguMZKK3LWe6K7wPi1t8J+iC4h39L6XLZxw pheADk18PWkaVwVod2Yh9CdULBoCnPWYH6rvzSXwQKlJzckOiKPziFewxB85NJjK zKsH97+/MHOEV0+bv0nM78oirRfJnt213uZ+Ep3hzMLr+jRcud/CJ0bh3wq7tFPX cxU/AjMeM0br+tctxwdTKHbaRpvHr+c10FouV+gUUXgtEr6n7SkoEbbLrj0OT6D7 l8h98ygyjKA+IKNayiDeDDjGsdqTAqigNFRXsgIEah+i/AfDekxu3OGOLebZgv26 ZIXVpTYi3mU6Wt2zVzZmM1YwswIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGh8AqR2 AG1837G6HhOxfsPAMjOjMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEVFMkYxQ0M1 NURCMTFFRDk3MTI0MzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr5OQDBABnVVoDBAFnnI4DBABnnycDBAJn8CAwDQQCAAIw BwMFACQFg0AwDQYJKoZIhvcNAQELBQADggEBADvYK45UDf3idGuD/NEoKenIOAa1 cplEwJlpIhX0805bpDHsHrEmt85XCO+I5lMprzMwuIMsoiyOPlFLJQnYxfSeNaiH rnWn5LyrqKx6IVFu5fekJVtzKRroE28mPqH8nTihqOUILEjph8Le5twKSx9tl6MZ 2FGgA3ftQ+jE3fjNSozkfapg4fHuVBJnU0+AAMWj8M/wmgD0cGAAjrHsNdZ9lx2K Egkqu15dY+J+pL7aBASXtB4xrx7ukcs5JfypA3my9pPsz2oHkMzO/5AHraPgGDc3 0PbyYcFDMFuW+8sU/8kr3Em/oas+/xl0c5T+wN5KCmrgBucM+BedU6xNCyo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org