$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B5C73F409BB11EDA08CD35BC4F9AE02.roa File: 9B5C73F409BB11EDA08CD35BC4F9AE02.roa (raw, json) Hash identifier: vxKtXYUNE7i3OOcLZVTBQYLtfCHnyQr90plj6DnksmQ= Subject key identifier: 19:EA:B5:2C:4A:50:09:25:6B:85:F4:02:05:B7:F0:CC:8A:95:8C:30 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 76CC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B5C73F409BB11EDA08CD35BC4F9AE02.roa Signing time: Thu 03 Aug 2023 09:32:29 +0000 ROA not before: Thu 03 Aug 2023 09:32:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45596 IP address blocks: 103.110.246.0/23 maxlen: 24 103.252.142.0/23 maxlen: 24 203.176.112.0/23 maxlen: 24 2001:df0:e6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30412 (0x76cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 3 09:32:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64cb742d-54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:9e:2d:da:57:90:fe:95:64:d5:68:be:6b: e6:57:7a:7c:fd:8e:35:9d:82:07:d7:a1:6a:a1:2f: d0:4f:d2:45:49:56:c1:b4:7c:98:0c:81:b2:62:e2: 3b:6a:83:80:54:a3:5b:98:8c:44:70:27:c4:b0:4c: 60:99:c6:8b:6d:9a:ae:43:30:f6:f2:4d:ed:bd:e6: bc:6e:56:5f:e8:1e:8d:41:85:e4:b3:24:dc:36:26: dd:c4:be:4a:eb:6e:9b:81:26:8f:54:f1:0d:62:48: 79:b7:39:45:fc:c9:24:77:a6:21:cb:a5:fc:4c:c6: db:bd:ae:3e:a5:db:1d:4c:12:a2:73:5b:0f:64:d0: bc:f3:f3:a9:1a:8a:18:6b:22:f8:6a:be:37:47:f5: 18:7a:a7:1b:2e:36:d3:bb:38:b1:3c:64:80:96:9e: 49:76:a4:f2:9a:57:f8:00:8e:f8:c7:f0:39:9d:ca: 25:78:47:d4:64:ec:a5:41:ac:0c:e9:9c:42:1e:99: 57:32:64:5a:f0:d3:18:c1:2e:58:72:7a:13:47:a0: 58:c5:a8:ec:28:25:c0:2f:62:6c:1a:10:f8:4b:62: 31:54:a0:83:d7:7c:e5:09:33:27:0b:73:9b:5a:f3: b5:ef:fc:37:48:6d:ad:18:fc:b7:a4:7c:4f:58:7a: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EA:B5:2C:4A:50:09:25:6B:85:F4:02:05:B7:F0:CC:8A:95:8C:30 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B5C73F409BB11EDA08CD35BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.246.0/23 103.252.142.0/23 203.176.112.0/23 IPv6: 2001:df0:e6::/48 Signature Algorithm: sha256WithRSAEncryption 18:34:aa:82:5d:b2:e4:e0:f9:0c:f1:c7:e9:ba:df:63:5b:d6: ef:9e:9f:c5:22:05:c0:e8:ce:15:be:c5:59:ae:8f:c3:5c:60: 7b:1b:48:b5:9d:56:af:fb:94:2a:9c:a3:fa:49:2a:ec:e8:00: 3c:eb:51:d3:7b:2f:de:cd:a2:e6:6a:55:1f:9b:6f:09:2e:2b: ec:b6:3d:45:06:03:73:38:8d:c3:8c:0e:fe:a5:f3:7e:18:ea: 66:b8:69:ed:64:43:f6:d2:2c:00:ca:45:8e:73:df:8c:4a:ed: 65:3f:ba:c3:8e:3f:e2:82:76:77:20:63:5d:49:9e:2d:f4:08: 4c:d9:56:e9:49:9c:3d:a2:5e:3e:4b:94:1e:1c:83:b2:89:1d: d4:c6:a4:c2:6a:7d:3e:93:86:c3:48:75:a9:ec:58:20:b8:26: ba:2d:ae:4b:31:61:bc:f5:62:51:1c:09:e8:61:63:89:72:f5: 3a:14:d8:5a:dd:d1:dc:29:4e:b9:c2:b6:12:90:f7:6c:a2:a5: c3:8e:7d:b0:1a:1f:1b:f1:af:d6:74:70:5c:e8:a4:7d:96:b8: bc:00:5d:87:b7:5b:48:c6:3b:2e:cd:ff:46:ab:3e:54:f1:ca: 96:34:41:de:9c:19:46:07:d4:ed:19:c9:02:05:66:6d:e6:29: 95:43:2e:07 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICdswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODAzMDkzMjI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNiNzQyZC01NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRWeLdpXkP6VZNVovmvmV3p8/Y41nYIH16FqoS/QT9JFSVbBtHyYDIGyYuI7 aoOAVKNbmIxEcCfEsExgmcaLbZquQzD28k3tvea8blZf6B6NQYXksyTcNibdxL5K 626bgSaPVPENYkh5tzlF/Mkkd6Yhy6X8TMbbva4+pdsdTBKic1sPZNC88/OpGooY ayL4ar43R/UYeqcbLjbTuzixPGSAlp5JdqTymlf4AI74x/A5ncoleEfUZOylQawM 6ZxCHplXMmRa8NMYwS5YcnoTR6BYxajsKCXAL2JsGhD4S2IxVKCD13zlCTMnC3Ob WvO17/w3SG2tGPy3pHxPWHokVQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBnqtSxK UAkla4X0AgW38MyKlYwwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUI1QzczRjQw OUJCMTFFREEwOENEMzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnbvYDBAFn/I4DBAHLsHAwDwQCAAIwCQMHACABDfAA5jAN BgkqhkiG9w0BAQsFAAOCAQEAGDSqgl2y5OD5DPHH6brfY1vW756fxSIFwOjOFb7F Wa6Pw1xgextItZ1Wr/uUKpyj+kkq7OgAPOtR03sv3s2i5mpVH5tvCS4r7LY9RQYD cziNw4wO/qXzfhjqZrhp7WRD9tIsAMpFjnPfjErtZT+6w44/4oJ2dyBjXUmeLfQI TNlW6UmcPaJePkuUHhyDsokd1Makwmp9PpOGw0h1qexYILgmui2uSzFhvPViURwJ 6GFjiXL1OhTYWt3R3ClOucK2EpD3bKKlw459sBofG/Gv1nRwXOikfZa4vABdh7db SMY7Ls3/Rqs+VPHKljRB3pwZRgfU7RnJAgVmbeYplUMuBw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org