$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/97F2E99ED4C611EB84791C0BC4F9AE02.roa File: 97F2E99ED4C611EB84791C0BC4F9AE02.roa (raw, json) Hash identifier: fGKwwApXWg4raVCUAnSmfjgnhCIg+j08kaSXMvaSJ0U= Subject key identifier: C6:49:41:38:24:07:59:F6:EA:B4:A0:73:6B:B7:0E:C4:0D:43:FF:65 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F0D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/97F2E99ED4C611EB84791C0BC4F9AE02.roa Signing time: Wed 10 May 2023 16:36:56 +0000 ROA not before: Wed 10 May 2023 16:36:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141815 IP address blocks: 103.104.231.0/24 maxlen: 24 103.167.38.0/23 maxlen: 24 103.219.60.0/24 maxlen: 24 2001:df6:a480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28429 (0x6f0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:36:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc828-0af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:57:15:da:bd:22:50:4b:56:e1:26:74:88: 5d:2f:bf:1a:a9:ad:9b:27:fb:6c:32:89:18:33:f8: 2d:55:2f:ea:91:b2:77:eb:5e:63:a0:8a:c6:06:b5: 25:dd:4e:01:d6:4d:52:c1:0e:4d:0f:76:0a:bd:0b: bd:d9:d3:ba:b1:c7:3c:01:de:69:6e:84:09:db:6f: 37:b6:6e:62:2a:24:c4:59:f1:6c:6f:d7:b1:e5:5f: d4:f5:3b:ad:48:90:84:5f:99:03:3b:cc:65:ce:b6: d5:ef:35:1a:13:de:11:43:70:a0:ab:d4:6b:8c:56: 7f:e7:1f:5b:5c:57:9d:bd:e1:18:33:85:63:0e:8c: 0c:52:a0:ed:8e:0b:6f:e5:f3:1c:c7:88:6b:d2:67: c9:0d:df:40:12:e3:fa:d7:ca:15:c3:70:27:71:6f: d7:71:83:dd:f3:6e:b3:d3:96:4c:9c:15:ea:9b:92: fb:c1:b3:bf:8b:0c:ee:2a:e6:0c:fb:8c:16:e3:d3: 91:ce:e9:9c:de:64:61:a6:42:6c:4c:04:1b:52:4d: 80:24:90:c4:bd:86:96:ce:cd:3f:e5:74:d7:d9:1e: 57:2e:52:c1:3c:c4:45:ac:a7:f8:97:6a:16:a5:db: 5b:55:c8:dc:8b:7b:27:7d:78:86:b4:a1:17:2d:cf: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:49:41:38:24:07:59:F6:EA:B4:A0:73:6B:B7:0E:C4:0D:43:FF:65 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/97F2E99ED4C611EB84791C0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.231.0/24 103.167.38.0/23 103.219.60.0/24 IPv6: 2001:df6:a480::/48 Signature Algorithm: sha256WithRSAEncryption a5:c3:03:51:59:23:92:b2:15:31:76:b4:56:b6:ad:99:0c:00: 9d:d5:31:64:0b:0a:ee:e2:53:1c:08:7a:45:19:b5:a9:54:7e: 81:eb:0e:08:58:16:ea:88:4a:a1:dc:0f:20:65:d5:58:a6:2d: e6:b0:74:5b:4f:91:60:77:9a:51:90:62:aa:27:c0:2a:98:e2: 94:cc:b6:37:ba:81:4b:50:5c:93:7e:05:9f:8d:55:59:62:90: 61:23:c9:cb:67:78:7f:86:94:94:3d:5e:8c:48:a9:af:03:61: bc:ab:0b:5d:29:69:a7:35:fc:43:21:22:11:4d:9b:76:0b:5e: e9:77:0d:45:d5:0d:95:bd:9c:54:50:9b:c7:42:80:f3:90:68: d9:1f:2b:84:0a:5a:1b:9f:28:99:ab:8f:86:1f:a0:0c:dd:54: 6e:58:4d:71:57:2b:41:7d:c2:ab:c5:0e:ac:04:3b:b8:8f:9d: 57:a5:b3:4b:45:33:9e:c5:58:79:02:35:a8:ef:58:2e:b8:04: 80:c2:17:4f:3e:c5:79:0b:8b:54:5e:a3:3e:c5:2f:7c:d2:c6: 11:73:a7:33:7e:7b:6c:26:4e:eb:04:7f:f8:0b:1c:db:a3:e5: 45:29:50:e2:23:61:d0:e0:2e:38:6e:83:42:7d:eb:78:ca:d9: f2:20:06:c2 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICbw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzgyOC0wYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2pXFdq9IlBLVuEmdIhdL78aqa2bJ/tsMokYM/gtVS/qkbJ3615joIrGBrUl 3U4B1k1SwQ5ND3YKvQu92dO6scc8Ad5pboQJ2283tm5iKiTEWfFsb9ex5V/U9Tut SJCEX5kDO8xlzrbV7zUaE94RQ3Cgq9RrjFZ/5x9bXFedveEYM4VjDowMUqDtjgtv 5fMcx4hr0mfJDd9AEuP618oVw3AncW/XcYPd826z05ZMnBXqm5L7wbO/iwzuKuYM +4wW49ORzumc3mRhpkJsTAQbUk2AJJDEvYaWzs0/5XTX2R5XLlLBPMRFrKf4l2oW pdtbVcjci3snfXiGtKEXLc+rRQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMZJQTgk B1n26rSgc2u3DsQNQ/9lMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTdGMkU5OUVE NEM2MTFFQjg0NzkxQzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnaOcDBAFnpyYDBABn2zwwDwQCAAIwCQMHACABDfakgDAN BgkqhkiG9w0BAQsFAAOCAQEApcMDUVkjkrIVMXa0VratmQwAndUxZAsK7uJTHAh6 RRm1qVR+gesOCFgW6ohKodwPIGXVWKYt5rB0W0+RYHeaUZBiqifAKpjilMy2N7qB S1Bck34Fn41VWWKQYSPJy2d4f4aUlD1ejEiprwNhvKsLXSlppzX8QyEiEU2bdgte 6XcNRdUNlb2cVFCbx0KA85Bo2R8rhApaG58omauPhh+gDN1UblhNcVcrQX3Cq8UO rAQ7uI+dV6WzS0UznsVYeQI1qO9YLrgEgMIXTz7FeQuLVF6jPsUvfNLGEXOnM357 bCZO6wR/+Asc26PlRSlQ4iNh0OAuOG6DQn3reMrZ8iAGwg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org