$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa File: 96FF852E61D711EEA6CF0A0FC4F9AE02.roa (raw, json) Hash identifier: /dobvbiZGMSXwTWOfKDy9F1M9qmUt3J0MVS4nWBxyN4= Subject key identifier: CD:1F:9A:FC:A8:57:B8:1B:3F:32:82:7A:E1:7B:26:5D:F6:3E:E9:D2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7B08 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa Signing time: Tue 03 Oct 2023 10:28:27 +0000 ROA not before: Tue 03 Oct 2023 10:28:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151688 IP address blocks: 103.213.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31496 (0x7b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 3 10:28:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=651beccb-e598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:3c:17:6f:ff:53:a1:00:6c:29:a7:2d:a4: dd:92:c3:92:78:79:f4:03:cf:ed:89:41:25:0d:4c: 3a:7e:cb:6c:70:5f:16:78:7d:56:8a:e1:18:a4:52: 47:6c:18:79:3c:c5:ac:92:d5:a7:dd:b6:22:50:ca: a1:98:94:b1:26:a4:dd:7a:8a:5e:cc:38:f4:c1:45: 84:e3:e2:26:66:98:13:2a:c8:a0:64:ad:7f:86:26: 27:af:1f:dc:35:16:a6:f9:0d:e8:01:6e:6c:95:e3: 58:b8:b3:ec:57:f2:a9:38:34:c8:b6:b9:42:17:b1: 43:ec:d1:4f:39:14:f2:21:3d:91:90:33:c5:25:b9: a1:e7:61:42:c3:46:56:66:e1:41:2c:9a:37:95:a0: 12:8d:0a:b7:06:8e:e4:62:20:80:ef:a9:67:de:3d: 92:ad:e2:bc:44:6e:e4:41:12:04:48:e7:a2:38:62: f3:bb:d9:75:d6:5e:20:a4:c9:e4:31:a6:4f:ed:7c: 26:6e:a5:20:c5:3c:87:7b:34:c8:82:a5:40:d0:0a: cc:a7:d9:c6:5c:18:04:f4:02:36:46:85:eb:18:b7: 2b:c0:15:72:3e:ef:4d:cf:ae:3a:e1:c8:dd:45:29: cc:09:20:2f:9b:f7:3e:17:74:60:f0:32:6f:90:b4: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:9A:FC:A8:57:B8:1B:3F:32:82:7A:E1:7B:26:5D:F6:3E:E9:D2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.222.0/23 Signature Algorithm: sha256WithRSAEncryption 41:fa:ad:c0:5f:ed:9d:9d:1e:3f:3f:47:55:83:32:4a:77:fb: ad:10:8d:4d:45:33:64:ec:21:4c:e8:f8:b0:7f:67:e5:f2:4a: be:7c:99:ba:5c:4d:a2:a0:7f:77:30:29:e6:97:de:56:08:9e: c2:7b:aa:d1:ed:9b:ca:26:2c:ef:29:4f:0a:e6:e3:8e:9a:a4: 68:1c:21:61:36:f7:eb:dc:68:5d:38:b8:e8:00:96:a3:20:aa: 29:47:98:cb:65:aa:3a:6f:d6:08:99:2b:f0:d2:ab:08:8a:7f: 7d:cd:33:b6:12:72:1e:c2:2f:f4:7c:bd:49:3f:43:78:9c:32: b3:6d:23:91:fe:e9:57:65:7a:70:27:83:7a:3d:15:cb:22:c3: b6:3f:dd:21:c2:da:f2:52:8a:22:e8:92:9d:4d:00:b8:6c:aa: 40:8a:0d:85:0f:ec:78:a9:05:13:5d:c7:4c:37:8c:c3:ad:fe: 10:22:3f:18:ea:64:66:df:3b:c1:4b:47:9e:02:b6:3f:21:66: fd:91:29:8a:35:66:2b:35:de:73:b1:45:1a:8f:d7:71:9d:12: 9f:55:47:72:29:01:d0:3d:bb:ff:98:c3:d5:ae:ec:b4:3c:db: 8c:31:04:8f:35:91:cb:32:2f:e5:b5:af:c3:c4:6c:64:8a:e5: bb:bd:63:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICewgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDAzMTAyODI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiZWNjYi1lNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0s8F2//U6EAbCmnLaTdksOSeHn0A8/tiUElDUw6fstscF8WeH1WiuEYpFJH bBh5PMWsktWn3bYiUMqhmJSxJqTdeopezDj0wUWE4+ImZpgTKsigZK1/hiYnrx/c NRam+Q3oAW5sleNYuLPsV/KpODTItrlCF7FD7NFPORTyIT2RkDPFJbmh52FCw0ZW ZuFBLJo3laASjQq3Bo7kYiCA76ln3j2SreK8RG7kQRIESOeiOGLzu9l11l4gpMnk MaZP7XwmbqUgxTyHezTIgqVA0ArMp9nGXBgE9AI2RoXrGLcrwBVyPu9Nz6464cjd RSnMCSAvm/c+F3Rg8DJvkLQnFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM0fmvyo V7gbPzKCeuF7Jl32PunSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTZGRjg1MkU2 MUQ3MTFFRUE2Q0YwQTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn1d4wDQYJKoZIhvcNAQELBQADggEBAEH6rcBf7Z2dHj8/ R1WDMkp3+60QjU1FM2TsIUzo+LB/Z+XySr58mbpcTaKgf3cwKeaX3lYInsJ7qtHt m8omLO8pTwrm446apGgcIWE29+vcaF04uOgAlqMgqilHmMtlqjpv1giZK/DSqwiK f33NM7YSch7CL/R8vUk/Q3icMrNtI5H+6VdlenAng3o9Fcsiw7Y/3SHC2vJSiiLo kp1NALhsqkCKDYUP7HipBRNdx0w3jMOt/hAiPxjqZGbfO8FLR54Ctj8hZv2RKYo1 Zis13nOxRRqP13GdEp9VR3IpAdA9u/+Yw9Wu7LQ824wxBI81kcsyL+W1r8PEbGSK 5bu9Yzw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org