$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa File: 935479A8F28011EAB3BD1D6BC4F9AE02.roa (raw, json) Hash identifier: 1kv/mCCHipnqVG6G7BvN6XsEIuH4OK6P6nWgneXHRl0= Subject key identifier: FA:2B:EA:FD:FA:6C:C1:9C:C0:8C:39:34:83:00:AA:08:57:92:43:EF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E3E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa Signing time: Wed 10 May 2023 16:33:09 +0000 ROA not before: Wed 10 May 2023 16:33:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140181 IP address blocks: 103.155.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28222 (0x6e3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc745-3743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:88:91:5a:8b:21:04:94:4d:f5:50:b6:70: c0:44:35:70:30:0b:3a:0b:b4:2e:95:94:57:7f:e4: ed:21:43:0e:f7:f7:82:b4:1a:49:df:04:de:1e:e6: 5e:4a:84:18:4f:97:79:8f:55:24:e1:db:71:2e:84: d7:eb:b3:91:b9:69:9f:c2:f6:db:37:bc:ec:a2:ab: 7c:c3:5c:71:a7:43:74:3e:bc:e4:a0:25:db:0d:6c: 0d:55:df:83:b5:2d:c5:4f:4c:d1:14:04:15:c1:95: 7f:8e:17:85:10:db:1d:8f:be:7d:98:53:57:79:e9: af:e9:22:79:f7:02:22:19:43:bc:fd:23:f9:a7:c0: 3e:3e:34:88:2a:07:98:0e:9a:05:a4:9c:27:aa:bd: a9:bf:1d:b1:ef:85:d0:4d:3f:68:13:2e:65:1e:df: 30:9c:ed:22:38:29:cf:32:2e:d3:e7:e9:79:9f:d2: 11:92:4d:61:de:20:75:3a:27:fb:9e:ec:8d:26:e8: cf:bb:8d:a9:bb:22:7b:8b:5b:23:30:02:81:53:fe: ca:6e:a1:b5:04:91:e3:f2:f1:3a:e1:b3:49:a4:d8: b7:f8:b1:d5:19:52:d5:3e:87:b7:e9:85:a1:f4:89: 30:4d:83:88:ec:0f:2f:f1:93:fb:05:a2:97:f6:5a: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:EA:FD:FA:6C:C1:9C:C0:8C:39:34:83:00:AA:08:57:92:43:EF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.128.0/23 Signature Algorithm: sha256WithRSAEncryption 56:fe:d4:6f:ad:68:62:0e:2d:40:f5:0d:bc:41:05:4a:79:05: 8f:60:d7:ca:bd:a1:51:29:91:d9:c6:95:8f:a4:32:46:34:92: 17:8e:40:41:3d:1b:6e:af:a4:09:da:2d:99:7e:0b:82:fe:36: 83:1a:51:9e:64:f0:51:50:c4:cf:b2:7b:63:44:14:66:75:a3: 82:31:09:f4:50:47:b1:65:91:33:e4:c4:22:ef:0b:59:11:6b: 59:49:35:bf:cc:6f:d1:af:db:d2:cb:5e:0d:ae:38:4e:4d:97: 95:c3:96:82:2e:89:43:2b:7b:28:58:4e:1a:91:ca:04:8f:42: 77:21:76:2b:ab:0a:cf:cf:27:87:d7:76:e8:f6:d8:39:0b:ad: 49:f5:3d:84:fa:f6:42:ea:b1:4f:61:29:87:b9:72:40:d4:a0: 26:ee:8d:be:80:47:12:9a:61:0f:fc:bb:10:34:8e:28:2a:4e: 40:af:e0:da:fb:7b:fd:63:84:e4:46:3e:fc:9d:a3:27:ae:97: 5c:0e:9f:3d:a5:fd:a5:99:bb:ce:6e:3f:02:d4:81:82:26:cc: 59:0a:07:50:69:29:ad:5d:fe:d6:5e:ed:46:ba:f9:20:4b:9e: 00:a4:a1:19:aa:34:ea:05:64:61:f4:0a:5a:b2:de:9a:a7:79: d2:a9:81:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc0NS0zNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraeIkVqLIQSUTfVQtnDARDVwMAs6C7QulZRXf+TtIUMO9/eCtBpJ3wTeHuZe SoQYT5d5j1Uk4dtxLoTX67ORuWmfwvbbN7zsoqt8w1xxp0N0PrzkoCXbDWwNVd+D tS3FT0zRFAQVwZV/jheFENsdj759mFNXeemv6SJ59wIiGUO8/SP5p8A+PjSIKgeY DpoFpJwnqr2pvx2x74XQTT9oEy5lHt8wnO0iOCnPMi7T5+l5n9IRkk1h3iB1Oif7 nuyNJujPu42puyJ7i1sjMAKBU/7KbqG1BJHj8vE64bNJpNi3+LHVGVLVPoe36YWh 9IkwTYOI7A8v8ZP7BaKX9lo2EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPor6v36 bMGcwIw5NIMAqghXkkPvMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTM1NDc5QThG MjgwMTFFQUIzQkQxRDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm4AwDQYJKoZIhvcNAQELBQADggEBAFb+1G+taGIOLUD1 DbxBBUp5BY9g18q9oVEpkdnGlY+kMkY0kheOQEE9G26vpAnaLZl+C4L+NoMaUZ5k 8FFQxM+ye2NEFGZ1o4IxCfRQR7FlkTPkxCLvC1kRa1lJNb/Mb9Gv29LLXg2uOE5N l5XDloIuiUMreyhYThqRygSPQnchdiurCs/PJ4fXduj22DkLrUn1PYT69kLqsU9h KYe5ckDUoCbujb6ARxKaYQ/8uxA0jigqTkCv4Nr7e/1jhORGPvydoyeul1wOnz2l /aWZu85uPwLUgYImzFkKB1BpKa1d/tZe7Ua6+SBLngCkoRmqNOoFZGH0Clqy3pqn edKpgZQ= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:29 2024 by rpki-client on console-fra.rpki-client.org