$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AB0D66E35111EDB7F6B44EC4F9AE02.roa File: 94AB0D66E35111EDB7F6B44EC4F9AE02.roa (raw, json) Hash identifier: G/EcOy3FNVOL9iErIXIkfL/3ZkAdbNOWI58COKhh0Uo= Subject key identifier: 2E:B0:C6:9A:92:03:40:96:4F:1C:4F:11:48:7A:2F:30:DD:F9:30:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7142 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AB0D66E35111EDB7F6B44EC4F9AE02.roa Signing time: Wed 10 May 2023 16:47:23 +0000 ROA not before: Wed 10 May 2023 16:47:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151149 IP address blocks: 103.181.36.0/23 maxlen: 24 2001:df2:5ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28994 (0x7142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca9a-bafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:3e:a2:14:6d:4e:a4:62:1f:22:0f:21:72: 99:d9:98:fa:36:af:20:43:29:62:29:2d:b0:89:47: f2:6d:2d:66:3a:6c:e2:2b:10:fb:97:5d:62:35:6e: 9d:47:77:67:94:a9:49:e8:f2:2e:8a:ec:e8:22:16: c9:d9:9d:69:86:1f:3a:f0:30:84:e2:de:36:eb:c9: 89:9b:0f:74:39:64:17:f1:de:b5:01:24:4f:a6:9d: 80:be:4e:82:a6:f6:f1:79:e3:6b:80:5d:2b:ad:cc: 99:9a:47:d5:29:6a:ed:5b:b0:4e:28:59:d5:3c:d8: cb:35:82:98:3a:dd:6c:ee:54:f4:62:7a:18:ba:b2: 5f:af:24:8a:52:4c:db:c2:ec:3a:86:80:db:cd:5c: 9d:2d:7d:6f:75:ba:c5:31:74:35:95:20:99:1f:fb: 82:ae:41:12:84:95:08:fc:d1:be:c1:f7:29:98:65: 45:9c:24:64:45:36:c1:49:8d:c2:b7:2a:f4:06:7a: 06:f7:33:c4:0c:93:23:0b:53:f4:63:29:6b:0a:2d: 0a:09:0e:58:b1:5c:62:ca:ad:ac:ca:15:c4:f7:5f: e8:14:2f:82:46:5b:1f:22:74:d8:11:fd:e9:5c:c9: 44:91:a2:70:7d:f7:1f:12:c5:2b:37:c4:0f:cf:8c: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B0:C6:9A:92:03:40:96:4F:1C:4F:11:48:7A:2F:30:DD:F9:30:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94AB0D66E35111EDB7F6B44EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.36.0/23 IPv6: 2001:df2:5ac0::/48 Signature Algorithm: sha256WithRSAEncryption a7:59:c4:3d:7d:ae:e9:10:4a:b6:bc:36:e1:d5:bd:f9:26:48: 7e:d4:87:8d:43:78:99:0a:5e:1e:47:9a:39:6a:0f:3c:13:72: bd:a0:ee:a5:cf:4a:b3:a6:be:2a:2b:85:3e:33:f4:36:80:4e: cc:37:99:26:9a:24:da:92:ff:42:4b:7a:c8:ae:54:89:b9:1d: 77:32:36:4f:f2:13:04:78:c5:4b:5b:01:f6:98:47:e4:46:90: b4:1d:83:b8:91:55:bd:60:85:36:fc:1c:dc:3d:c2:86:56:c5: 74:1c:9a:b8:1e:e8:e3:fb:50:12:62:08:13:be:90:ff:36:d9: ad:02:e7:7a:aa:79:31:d9:a1:3f:c3:93:48:19:0f:b1:9e:4c: 10:6d:39:86:1b:bc:91:2a:fc:99:7f:d3:44:fb:4e:55:29:d5: 0e:33:fa:15:05:f6:f7:7d:98:bb:ac:c2:02:d8:c2:d6:24:26: f3:ce:a3:9c:81:2d:b4:d9:0f:09:b8:58:58:10:c0:ce:4f:2e: 8b:db:25:a9:ab:e6:4b:79:af:c2:8a:93:f9:1d:e8:aa:1b:f2: 17:5a:02:4f:9c:9b:9f:1f:83:9f:55:30:c4:14:0e:cb:df:29: c4:41:b8:c6:86:98:dc:a6:0b:cf:58:d7:0a:e8:25:3d:40:d8: 01:b7:64:0a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E5YS1iYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Eo+ohRtTqRiHyIPIXKZ2Zj6Nq8gQyliKS2wiUfybS1mOmziKxD7l11iNW6d R3dnlKlJ6PIuiuzoIhbJ2Z1phh868DCE4t4268mJmw90OWQX8d61ASRPpp2Avk6C pvbxeeNrgF0rrcyZmkfVKWrtW7BOKFnVPNjLNYKYOt1s7lT0YnoYurJfrySKUkzb wuw6hoDbzVydLX1vdbrFMXQ1lSCZH/uCrkEShJUI/NG+wfcpmGVFnCRkRTbBSY3C tyr0BnoG9zPEDJMjC1P0YylrCi0KCQ5YsVxiyq2syhXE91/oFC+CRlsfInTYEf3p XMlEkaJwffcfEsUrN8QPz4zqzQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFC6wxpqS A0CWTxxPEUh6LzDd+TAIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTRBQjBENjZF MzUxMTFFREI3RjZCNDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntSQwDwQCAAIwCQMHACABDfJawDANBgkqhkiG9w0BAQsF AAOCAQEAp1nEPX2u6RBKtrw24dW9+SZIftSHjUN4mQpeHkeaOWoPPBNyvaDupc9K s6a+KiuFPjP0NoBOzDeZJpok2pL/Qkt6yK5UibkddzI2T/ITBHjFS1sB9phH5EaQ tB2DuJFVvWCFNvwc3D3ChlbFdByauB7o4/tQEmIIE76Q/zbZrQLneqp5MdmhP8OT SBkPsZ5MEG05hhu8kSr8mX/TRPtOVSnVDjP6FQX2932Yu6zCAtjC1iQm886jnIEt tNkPCbhYWBDAzk8ui9slqavmS3mvwoqT+R3oqhvyF1oCT5ybnx+Dn1UwxBQOy98p xEG4xoaY3KYLz1jXCuglPUDYAbdkCg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org