$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CFB93CE47DC11EE8D9F1162C4F9AE02.roa File: 9CFB93CE47DC11EE8D9F1162C4F9AE02.roa (raw, json) Hash identifier: urCTsjODftmnYB8VJcNlInhONwXEEWqP7HljC4rAqxw= Subject key identifier: F8:A1:2E:EC:B1:86:68:69:2C:E1:63:7F:4A:B1:ED:70:59:EA:A9:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CB4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CFB93CE47DC11EE8D9F1162C4F9AE02.roa Signing time: Mon 30 Oct 2023 05:24:02 +0000 ROA not before: Mon 30 Oct 2023 05:24:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151752 IP address blocks: 103.126.140.0/23 maxlen: 24 2001:df3:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31924 (0x7cb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 30 05:24:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=653f3df2-907b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:86:32:42:76:4f:16:c5:41:de:d0:48:e9: 22:f7:cf:67:ea:11:82:d6:c2:67:81:36:fa:c6:70: 92:06:bd:f3:90:87:f9:0d:42:d9:e0:d5:5a:af:83: 96:95:79:56:df:00:40:db:04:ba:4e:36:2e:43:87: 1c:4c:50:e7:4f:47:15:90:0c:e4:73:d0:30:b5:3b: 2b:6c:4d:48:7c:a6:6b:e1:c9:c6:a2:2a:26:a3:df: 93:db:54:0e:76:32:cc:e0:2f:1f:42:16:02:16:7f: 12:86:26:29:1f:99:6e:5e:63:f2:05:0e:22:2a:c2: a0:d9:33:cc:2c:77:8e:59:16:be:19:07:ba:3c:93: e8:ef:87:fe:bd:5a:69:44:4c:e6:fd:dc:e9:d8:f8: 35:0f:ba:e7:ed:5a:b3:30:df:c7:ed:b2:18:29:39: d3:d2:5c:84:52:25:92:79:07:65:d7:ed:d5:24:d5: 49:b4:bf:cb:b9:5c:05:5d:9a:00:dd:ee:fb:21:ce: 1f:f9:26:5a:84:6f:8c:14:9c:4f:6f:40:88:59:67: ab:54:1d:f8:bd:98:4b:61:2a:a7:69:6c:45:a4:5e: f0:ce:e5:d9:36:fe:ed:45:9d:f7:da:4e:bb:72:67: 88:7c:54:99:f7:76:dd:87:e8:3d:67:3b:99:b7:d5: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A1:2E:EC:B1:86:68:69:2C:E1:63:7F:4A:B1:ED:70:59:EA:A9:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CFB93CE47DC11EE8D9F1162C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.140.0/23 IPv6: 2001:df3:1240::/48 Signature Algorithm: sha256WithRSAEncryption 74:3e:00:3b:d7:7f:d7:e2:bc:0a:ed:21:26:3b:7b:e7:bf:c3: 6d:b4:0f:de:1b:61:40:65:53:7d:ef:bb:74:31:3d:62:00:a5: 8d:97:ec:c7:e0:d8:11:3d:89:00:f7:95:61:5f:fc:8f:25:7c: f7:c4:3d:3b:74:91:47:ef:b6:ae:5b:21:41:99:c2:9d:54:49: 1a:8d:f4:85:4a:ad:7e:2f:e8:3a:44:32:70:29:39:26:94:54: 10:04:57:58:0c:fc:e3:d6:2f:c0:db:36:d3:5e:87:b8:d6:aa: af:fe:52:6f:df:49:53:5c:ac:96:fd:0b:2a:84:15:ab:95:fb: 7f:66:22:70:2a:5b:4e:d6:16:62:df:e1:42:d2:73:69:7a:9f: 69:cd:da:c4:1c:60:74:aa:a4:b0:91:1f:2e:8f:83:72:05:2e: fd:c4:22:0d:9b:59:26:80:d4:e2:dd:ff:3a:a4:df:f4:17:ea: 3a:a2:13:3c:6d:41:fc:4f:76:1c:eb:4a:de:5c:5e:b4:28:8c: 0d:10:84:71:8f:19:a1:5c:6d:d7:bd:8e:ba:f5:58:80:f1:01: c5:9c:c8:e8:1c:f1:f7:4a:85:88:15:75:f5:43:09:b5:0a:c5: 98:ab:1e:d8:b3:e2:d9:1f:85:6f:05:e7:1b:73:c9:c2:4b:95: a6:cb:9d:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDMwMDUyNDAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNmM2RmMi05MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH2GMkJ2TxbFQd7QSOki989n6hGC1sJngTb6xnCSBr3zkIf5DULZ4NVar4OW lXlW3wBA2wS6TjYuQ4ccTFDnT0cVkAzkc9AwtTsrbE1IfKZr4cnGoiomo9+T21QO djLM4C8fQhYCFn8ShiYpH5luXmPyBQ4iKsKg2TPMLHeOWRa+GQe6PJPo74f+vVpp REzm/dzp2Pg1D7rn7VqzMN/H7bIYKTnT0lyEUiWSeQdl1+3VJNVJtL/LuVwFXZoA 3e77Ic4f+SZahG+MFJxPb0CIWWerVB34vZhLYSqnaWxFpF7wzuXZNv7tRZ332k67 cmeIfFSZ93bdh+g9ZzuZt9XS4wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPihLuyx hmhpLOFjf0qx7XBZ6qmgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUNGQjkzQ0U0 N0RDMTFFRThEOUYxMTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnfowwDwQCAAIwCQMHACABDfMSQDANBgkqhkiG9w0BAQsF AAOCAQEAdD4AO9d/1+K8Cu0hJjt757/DbbQP3hthQGVTfe+7dDE9YgCljZfsx+DY ET2JAPeVYV/8jyV898Q9O3SRR++2rlshQZnCnVRJGo30hUqtfi/oOkQycCk5JpRU EARXWAz849YvwNs2016HuNaqr/5Sb99JU1yslv0LKoQVq5X7f2YicCpbTtYWYt/h QtJzaXqfac3axBxgdKqksJEfLo+DcgUu/cQiDZtZJoDU4t3/OqTf9BfqOqITPG1B /E92HOtK3lxetCiMDRCEcY8ZoVxt172OuvVYgPEBxZzI6Bzx90qFiBV19UMJtQrF mKse2LPi2R+FbwXnG3PJwkuVpsuddQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org