$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92FC8FE227F711ECA71D1E65C4F9AE02.roa File: 92FC8FE227F711ECA71D1E65C4F9AE02.roa (raw, json) Hash identifier: mz6kWYr3UuM00gd0bEMJXw13JY7BolC2sL2U3c14dSk= Subject key identifier: F2:80:C6:4F:2A:FA:EA:C7:A9:09:D1:37:4E:82:A0:DE:76:D1:6A:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 721D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92FC8FE227F711ECA71D1E65C4F9AE02.roa Signing time: Mon 15 May 2023 10:52:05 +0000 ROA not before: Mon 15 May 2023 10:52:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146908 IP address blocks: 103.157.129.0/24 maxlen: 24 103.167.102.0/24 maxlen: 24 103.167.103.0/24 maxlen: 24 103.173.194.0/24 maxlen: 24 103.173.195.0/24 maxlen: 24 103.184.126.0/23 maxlen: 24 2001:df1:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29213 (0x721d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 15 10:52:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64620ed5-49ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:1d:04:36:4c:d2:13:98:de:84:51:f2:c6: 1e:21:88:84:e2:db:f3:ef:7e:0a:9f:ba:b5:ff:59: c7:4c:29:38:f1:f0:a7:2e:b5:87:a2:e6:42:0d:d5: d7:55:0d:e9:7f:1e:34:3b:cc:16:6a:48:e0:96:71: d3:f9:33:04:b6:5c:c0:27:ac:29:a7:49:55:f4:e9: 62:70:ba:62:62:a5:b5:b7:0f:30:a6:74:5e:d2:54: 93:64:45:80:b3:db:30:f9:85:c5:9f:75:cd:57:7d: c7:4f:ae:c6:86:7c:28:c8:eb:af:3d:2d:64:ae:71: ef:f7:c0:77:04:12:d5:ee:f4:00:09:76:6d:d6:4a: f2:e6:f0:ce:c7:77:67:75:07:5b:05:a5:5d:cd:3b: b8:95:41:5e:04:5a:02:75:22:67:94:89:5a:e6:f5: 51:ea:77:8a:09:14:8f:84:ad:3d:f1:85:38:4a:ce: 8e:8d:6d:52:ed:70:62:1b:78:0e:8f:11:5d:e9:6f: c8:c5:5e:40:ba:63:a1:79:24:81:02:02:ca:a6:4f: bd:f0:b0:56:1a:d3:7d:6b:77:41:ae:9e:c4:51:e8: 38:5e:ec:59:8e:26:6a:29:fd:12:ed:b2:07:de:f8: f6:94:8c:38:16:c2:5d:60:b9:7e:a7:4d:d6:2e:76: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:80:C6:4F:2A:FA:EA:C7:A9:09:D1:37:4E:82:A0:DE:76:D1:6A:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92FC8FE227F711ECA71D1E65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.129.0/24 103.167.102.0/23 103.173.194.0/23 103.184.126.0/23 IPv6: 2001:df1:16c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:d9:d4:82:4f:4a:7c:62:c8:54:59:ad:7f:73:31:a4:d8:e1: 97:6d:91:bd:c7:d8:f3:6f:78:5a:49:38:d0:89:1c:ab:d2:21: 5f:c2:eb:b8:c9:93:7e:a0:e0:8f:3e:d2:2b:d5:97:2e:be:a7: 8e:4e:64:60:28:10:c9:9f:7d:c8:16:70:6e:fc:57:85:90:37: bc:e6:d7:e8:f7:34:87:5e:61:70:34:bc:0b:af:85:b0:0e:c8: 8a:ea:4a:31:99:9d:49:97:f4:48:c6:b1:ad:c6:43:73:cc:a7: 93:4c:0c:20:4a:4b:70:6d:88:a6:23:3c:47:74:f5:a1:43:46: 12:7c:1f:40:d4:d9:2a:83:c3:de:62:62:48:47:6f:4d:3d:30: 61:a7:86:c3:cf:b7:57:da:57:9a:f2:98:e6:a0:a2:a4:5e:11: 54:72:be:8c:ea:6a:16:23:96:89:03:fa:af:6a:c3:18:23:b6: d9:e1:d2:35:64:84:73:19:c9:9c:b9:de:39:b7:71:ba:7b:fd: ca:af:0d:3e:9d:5b:da:82:c8:cf:0b:64:5d:86:f8:f0:db:90: b8:9e:71:48:bc:98:a1:db:49:9c:6d:ee:b3:08:6b:a0:ce:e8: a2:a0:10:f1:22:be:40:32:8e:13:d3:d9:02:e6:f9:66:09:4d: 52:dd:b5:7b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICch0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTE1MTA1MjA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYyMGVkNS00OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprUdBDZM0hOY3oRR8sYeIYiE4tvz734Kn7q1/1nHTCk48fCnLrWHouZCDdXX VQ3pfx40O8wWakjglnHT+TMEtlzAJ6wpp0lV9OlicLpiYqW1tw8wpnRe0lSTZEWA s9sw+YXFn3XNV33HT67GhnwoyOuvPS1krnHv98B3BBLV7vQACXZt1kry5vDOx3dn dQdbBaVdzTu4lUFeBFoCdSJnlIla5vVR6neKCRSPhK098YU4Ss6OjW1S7XBiG3gO jxFd6W/IxV5AumOheSSBAgLKpk+98LBWGtN9a3dBrp7EUeg4XuxZjiZqKf0S7bIH 3vj2lIw4FsJdYLl+p03WLnYAfQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPKAxk8q +urHqQnRN06CoN520WrOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTJGQzhGRTIy N0Y3MTFFQ0E3MUQxRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBABnnYEDBAFnp2YDBAFnrcIDBAFnuH4wDwQCAAIwCQMHACAB DfEWwDANBgkqhkiG9w0BAQsFAAOCAQEAJ9nUgk9KfGLIVFmtf3MxpNjhl22RvcfY 8294Wkk40Ikcq9IhX8LruMmTfqDgjz7SK9WXLr6njk5kYCgQyZ99yBZwbvxXhZA3 vObX6Pc0h15hcDS8C6+FsA7IiupKMZmdSZf0SMaxrcZDc8ynk0wMIEpLcG2IpiM8 R3T1oUNGEnwfQNTZKoPD3mJiSEdvTT0wYaeGw8+3V9pXmvKY5qCipF4RVHK+jOpq FiOWiQP6r2rDGCO22eHSNWSEcxnJnLneObdxunv9yq8NPp1b2oLIzwtkXYb48NuQ uJ5xSLyYodtJnG3uswhroM7ooqAQ8SK+QDKOE9PZAub5ZglNUt21ew== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org