$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99E4402AAB9011ED9735E265C4F9AE02.roa File: 99E4402AAB9011ED9735E265C4F9AE02.roa (raw, json) Hash identifier: lg4e9ktLkhx0DPBX0hCNxTvYp7A1tMNdFeikemqEiD8= Subject key identifier: 9F:93:CB:3F:66:D2:D8:A7:02:12:88:22:F9:8F:74:16:8C:6F:1E:9C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 73FF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99E4402AAB9011ED9735E265C4F9AE02.roa Signing time: Thu 15 Jun 2023 08:22:05 +0000 ROA not before: Thu 15 Jun 2023 08:22:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140197 IP address blocks: 103.156.102.0/23 maxlen: 24 103.163.104.0/23 maxlen: 24 2400:9fa0::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29695 (0x73ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 15 08:22:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=648aca2d-985a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:bb:6e:86:f6:c4:89:50:46:f1:a3:69:9b: 3a:df:81:64:2f:c0:c5:cd:b4:83:06:7f:71:4a:bf: 5e:22:af:ff:81:26:aa:c0:76:a3:60:1b:b8:32:14: 23:5d:c9:cc:bc:fe:d9:f3:2a:05:2a:42:38:85:b0: eb:24:39:90:4c:04:6f:1a:f9:2c:48:c4:70:87:1e: 7a:50:e9:51:65:77:73:e9:47:90:71:7f:e1:8d:9f: 60:7a:29:fa:ca:cc:e2:74:9f:1c:4b:fd:92:48:28: c3:64:fb:b6:57:d7:dc:d1:0d:b1:4f:60:a3:a6:ef: a7:42:d4:03:01:6e:4f:2f:fb:f9:38:83:7d:3d:96: eb:17:36:c0:ae:13:a4:01:e7:07:26:12:67:e9:f0: 5a:3a:8f:7a:fe:e0:d0:4b:a8:9b:b0:11:7f:dc:fd: 4e:1e:f6:1e:1b:bc:d7:24:ed:2b:05:fe:38:6d:64: 65:5e:4e:52:74:4e:56:1c:89:e1:25:0c:e8:36:80: d9:84:f9:6e:c6:82:07:f1:20:b3:1e:90:3b:fc:25: b7:67:fe:50:a6:8f:0c:5c:4d:07:cf:81:d6:f2:16: 94:5b:f8:23:a1:85:99:33:f4:4a:40:e1:ed:1e:87: bb:f4:4c:97:f3:93:6d:10:40:00:41:09:c8:7d:82: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:CB:3F:66:D2:D8:A7:02:12:88:22:F9:8F:74:16:8C:6F:1E:9C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99E4402AAB9011ED9735E265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.102.0/23 103.163.104.0/23 IPv6: 2400:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 59:e3:a6:2f:a5:b2:8a:75:b3:ee:2a:9f:4c:b6:22:a6:65:e5: a9:62:2f:60:e6:f4:1b:c1:e2:8a:e3:63:e1:49:30:ac:bf:47: b9:a4:93:08:3c:78:c2:2c:9e:ad:0b:5d:eb:b1:00:eb:b4:c4: 9c:10:a1:f5:97:1e:88:98:b3:62:b2:b6:aa:89:23:83:f1:52: ab:69:96:fd:fc:eb:df:e9:74:e8:60:c3:77:f2:ce:d5:f2:0a: 6e:e0:a0:ec:73:d3:5e:e0:fd:70:63:12:37:8e:3f:df:62:79: 24:42:06:74:1d:46:28:e3:ec:12:61:ea:e9:ca:06:f1:9f:f2: 12:61:e9:85:0f:e1:13:17:40:94:3c:26:26:fe:4a:42:3a:72: 0a:4e:d9:8a:08:45:c1:0c:cb:7a:04:5a:6e:d9:35:87:ef:c5: 58:18:e3:93:26:d2:4d:df:f6:99:fc:5b:bd:4a:37:ea:6e:cd: f8:7d:be:29:08:16:e4:9a:10:9a:08:7d:03:d6:a3:f5:3c:49: 7f:75:b3:86:49:6c:81:02:91:d2:f6:c2:95:fb:fa:84:d0:98: 8e:cd:94:3a:8a:b6:cd:b1:d7:71:1d:55:ba:18:94:88:b9:f1: aa:99:b5:e7:a0:a7:f1:44:6e:ac:19:79:16:95:72:28:ba:54: 89:58:b8:d0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICc/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjE1MDgyMjA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhhY2EyZC05ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2S7bob2xIlQRvGjaZs634FkL8DFzbSDBn9xSr9eIq//gSaqwHajYBu4MhQj XcnMvP7Z8yoFKkI4hbDrJDmQTARvGvksSMRwhx56UOlRZXdz6UeQcX/hjZ9gein6 yszidJ8cS/2SSCjDZPu2V9fc0Q2xT2Cjpu+nQtQDAW5PL/v5OIN9PZbrFzbArhOk AecHJhJn6fBaOo96/uDQS6ibsBF/3P1OHvYeG7zXJO0rBf44bWRlXk5SdE5WHInh JQzoNoDZhPluxoIH8SCzHpA7/CW3Z/5Qpo8MXE0Hz4HW8haUW/gjoYWZM/RKQOHt Hoe79EyX85NtEEAAQQnIfYLe7QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ+Tyz9m 0tinAhKIIvmPdBaMbx6cMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTlFNDQwMkFB QjkwMTFFRDk3MzVFMjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnnGYDBAFno2gwDQQCAAIwBwMFACQAn6AwDQYJKoZIhvcN AQELBQADggEBAFnjpi+lsop1s+4qn0y2IqZl5aliL2Dm9BvB4orjY+FJMKy/R7mk kwg8eMIsnq0LXeuxAOu0xJwQofWXHoiYs2KytqqJI4PxUqtplv3869/pdOhgw3fy ztXyCm7goOxz017g/XBjEjeOP99ieSRCBnQdRijj7BJh6unKBvGf8hJh6YUP4RMX QJQ8Jib+SkI6cgpO2YoIRcEMy3oEWm7ZNYfvxVgY45Mm0k3f9pn8W71KN+puzfh9 vikIFuSaEJoIfQPWo/U8SX91s4ZJbIECkdL2wpX7+oTQmI7NlDqKts2x13EdVboY lIi58aqZteegp/FEbqwZeRaVcii6VIlYuNA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org