$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C41562CC19911ED854B7639C4F9AE02.roa File: 9C41562CC19911ED854B7639C4F9AE02.roa (raw, json) Hash identifier: 5VYjGyDVoJbdRme9v+uOCjO+92A0Jej/1NCh863IHgA= Subject key identifier: 76:27:BE:50:15:41:40:68:5F:21:F4:F9:4C:1F:A7:49:0A:9C:92:E3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7134 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C41562CC19911ED854B7639C4F9AE02.roa Signing time: Wed 10 May 2023 16:47:07 +0000 ROA not before: Wed 10 May 2023 16:47:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150648 IP address blocks: 103.207.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28980 (0x7134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca8b-79da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:bd:88:ad:6a:6e:ce:96:54:40:a7:11:d6: 5a:07:e2:39:1b:2d:02:49:a8:e8:9c:cd:20:51:87: 90:28:9a:a5:4c:12:54:69:d9:55:19:d2:9d:5e:ce: 3f:39:b3:f3:48:de:6e:7b:fe:64:22:d6:0d:c2:e2: 00:2a:35:df:3e:ef:34:62:ca:14:d6:a5:7d:7e:16: 73:1a:36:c2:9b:5f:03:1c:65:e7:62:71:1e:cf:32: e2:dc:de:a2:ba:12:a7:0e:3d:17:10:07:95:90:94: bb:42:55:08:f1:b2:0d:a1:6b:2c:ec:58:3d:7f:93: 4a:a4:dc:69:30:00:06:4c:f2:7d:6d:3c:82:ef:4e: 43:fb:f4:31:e5:12:6d:57:a0:79:a1:07:1d:2e:2a: 38:a3:5a:8d:fc:15:9c:55:6d:05:0f:35:74:9b:8e: d5:dc:62:66:61:43:99:b7:00:37:14:c7:ab:09:e6: b8:04:52:fb:be:48:cb:99:7e:7f:e7:2f:96:9c:74: ee:70:12:3a:a4:b3:00:14:7d:51:ee:69:79:ac:3a: 2e:a4:53:2e:65:98:d1:b3:02:c8:5a:43:cf:87:71: d0:39:5b:b9:c7:f9:dd:82:e5:92:7d:5e:b8:3c:6b: e8:97:3a:d9:1b:87:8c:22:ff:3e:66:44:9a:74:1f: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:BE:50:15:41:40:68:5F:21:F4:F9:4C:1F:A7:49:0A:9C:92:E3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C41562CC19911ED854B7639C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.17.0/24 Signature Algorithm: sha256WithRSAEncryption 63:42:5f:a8:25:57:17:83:cb:db:73:78:75:b6:35:b3:91:35: b1:60:c5:32:4a:09:43:af:1c:8b:0c:67:a3:5c:d0:7b:96:36: 5b:92:69:34:96:42:fb:3b:2b:3e:84:1c:55:4c:37:2e:e4:5e: 6a:14:b2:73:28:91:f0:92:f1:41:39:19:43:56:53:ae:3d:44: 90:90:74:0b:55:0e:ff:1f:13:48:e8:2c:53:94:66:ea:56:dd: d7:ca:ef:bd:51:d9:6d:d0:2b:de:ba:53:dc:eb:b0:90:18:ce: d7:17:e8:f4:5c:a7:12:75:40:be:1f:06:95:cd:11:3d:8b:c7: ff:cf:52:d0:3e:fb:75:65:10:bb:f3:b8:ad:66:e6:b4:23:cb: 8e:b5:1e:e2:be:f1:17:37:16:64:d3:14:0a:18:86:53:3f:f9: 74:56:eb:f3:86:0b:cf:d8:85:0e:10:7e:6c:12:d8:fc:47:ad: 22:29:c8:4c:13:d4:f3:fc:31:6b:15:d7:c6:81:57:57:20:27: 41:73:fa:09:f9:a7:f0:78:0b:a8:bb:7f:de:4b:98:5e:78:c0: a5:e2:7d:a6:2c:b0:ba:4b:23:ee:53:13:8f:0e:5e:b9:50:bb: 23:80:d3:73:6e:17:66:54:9d:54:d1:fd:51:8c:f0:ae:a0:1b: 23:d6:fa:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E4Yi03OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Mm9iK1qbs6WVECnEdZaB+I5Gy0CSajonM0gUYeQKJqlTBJUadlVGdKdXs4/ ObPzSN5ue/5kItYNwuIAKjXfPu80YsoU1qV9fhZzGjbCm18DHGXnYnEezzLi3N6i uhKnDj0XEAeVkJS7QlUI8bINoWss7Fg9f5NKpNxpMAAGTPJ9bTyC705D+/Qx5RJt V6B5oQcdLio4o1qN/BWcVW0FDzV0m47V3GJmYUOZtwA3FMerCea4BFL7vkjLmX5/ 5y+WnHTucBI6pLMAFH1R7ml5rDoupFMuZZjRswLIWkPPh3HQOVu5x/ndguWSfV64 PGvolzrZG4eMIv8+ZkSadB9fwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHYnvlAV QUBoXyH0+Uwfp0kKnJLjMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUM0MTU2MkND MTk5MTFFRDg1NEI3NjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnzxEwDQYJKoZIhvcNAQELBQADggEBAGNCX6glVxeDy9tz eHW2NbORNbFgxTJKCUOvHIsMZ6Nc0HuWNluSaTSWQvs7Kz6EHFVMNy7kXmoUsnMo kfCS8UE5GUNWU649RJCQdAtVDv8fE0joLFOUZupW3dfK771R2W3QK966U9zrsJAY ztcX6PRcpxJ1QL4fBpXNET2Lx//PUtA++3VlELvzuK1m5rQjy461HuK+8Rc3FmTT FAoYhlM/+XRW6/OGC8/YhQ4QfmwS2PxHrSIpyEwT1PP8MWsV18aBV1cgJ0Fz+gn5 p/B4C6i7f95LmF54wKXifaYssLpLI+5TE48OXrlQuyOA03NuF2ZUnVTR/VGM8K6g GyPW+uw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org