$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5236D6E84611EA9B456717C4F9AE02.roa File: 9E5236D6E84611EA9B456717C4F9AE02.roa (raw, json) Hash identifier: o9hJZPyRopdZntzTlnQVRnF3hyXibYdMPGPmIf30Z3M= Subject key identifier: 0E:B2:E1:11:DA:60:DC:4E:83:62:28:B1:E2:DD:5C:84:FC:4E:D7:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C8C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5236D6E84611EA9B456717C4F9AE02.roa Signing time: Wed 10 May 2023 16:25:04 +0000 ROA not before: Wed 10 May 2023 16:25:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136644 IP address blocks: 103.141.192.0/23 maxlen: 24 2001:df1:780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27788 (0x6c8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:25:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc560-c36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:c0:a5:56:7d:6f:0c:dd:84:86:bb:de:4f: b6:06:0e:13:b2:7d:ab:db:ef:88:c5:74:ce:54:11: 11:93:26:fd:f2:ac:cc:f0:69:00:1c:bc:94:e1:f0: f8:8f:0a:58:50:4d:61:f7:73:ee:ce:89:a2:20:97: f7:da:f6:d0:b2:ee:b7:de:f3:73:c1:1c:d5:a1:c0: 88:a9:00:34:d2:8e:2e:48:b0:66:b2:b4:32:cb:45: 88:a6:3b:3c:a0:f6:d8:9e:61:85:ff:f6:c9:8f:30: a6:d9:6f:88:2d:07:e0:90:b4:af:d7:67:89:32:95: f6:b2:41:48:2a:c3:83:b4:3c:83:fe:59:0a:3a:56: eb:69:42:62:42:31:bb:1a:7e:0b:b5:46:28:9a:a6: 8b:9a:e6:ce:49:8a:b2:41:97:11:30:57:9d:11:e5: 9f:f0:a9:af:f2:c9:0c:31:94:44:d1:f6:0e:ee:87: 37:e2:34:03:d2:20:34:67:6f:44:6e:52:93:13:2f: 73:dc:08:d5:93:8b:82:92:6a:38:ab:88:22:d9:85: 82:3a:7b:fd:ba:04:34:6f:6f:6a:6a:2d:2b:a2:85: de:61:ae:f9:3a:73:7c:72:68:0c:88:8a:95:a2:90: cc:b9:16:dc:86:f3:29:cc:be:19:6b:28:f5:0d:34: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:E1:11:DA:60:DC:4E:83:62:28:B1:E2:DD:5C:84:FC:4E:D7:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5236D6E84611EA9B456717C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.192.0/23 IPv6: 2001:df1:780::/48 Signature Algorithm: sha256WithRSAEncryption 40:29:0c:20:b7:ea:f9:d6:83:d9:f5:fc:a6:96:79:6f:e7:b1: 8e:9c:15:7d:a4:69:f3:8e:dc:60:ae:95:0a:5c:1e:39:26:3b: aa:76:36:d2:08:c7:29:45:fc:4c:0d:15:af:6b:46:6e:e8:8d: 81:95:7b:34:b8:c9:c7:0d:ad:4f:d8:b5:e4:67:09:77:d3:0b: e2:2f:52:24:82:44:cd:ef:b5:6f:35:ed:77:db:46:6d:d2:14: 73:3b:1b:48:a1:17:90:bd:17:d5:be:31:06:65:68:7f:cd:78: 7f:b3:16:02:54:f6:a8:3c:33:17:15:2b:65:f4:39:92:22:14: dd:fa:9d:4c:bb:c7:c1:0b:cd:25:fb:91:50:c4:f2:46:39:f3: d0:9a:d5:3b:5c:f5:d3:b5:43:07:93:6a:91:6f:53:53:93:26: af:08:74:e0:0f:ed:76:b8:94:05:97:b6:f1:91:9a:e2:75:d7: b0:90:1c:ad:6e:bb:c3:76:8f:07:62:92:68:a2:38:94:36:a1: e6:ee:05:8a:e5:42:39:6d:50:4c:3d:36:1c:26:ba:9c:e4:6a: 27:d5:66:be:8e:b5:9c:54:a4:df:7c:fd:fb:1f:10:5a:99:36: 81:19:34:16:7a:5f:d1:3a:d6:82:c4:52:aa:34:5d:6a:aa:42: ef:1d:6f:ba -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNTA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU2MC1jMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQbApVZ9bwzdhIa73k+2Bg4Tsn2r2++IxXTOVBERkyb98qzM8GkAHLyU4fD4 jwpYUE1h93PuzomiIJf32vbQsu633vNzwRzVocCIqQA00o4uSLBmsrQyy0WIpjs8 oPbYnmGF//bJjzCm2W+ILQfgkLSv12eJMpX2skFIKsODtDyD/lkKOlbraUJiQjG7 Gn4LtUYomqaLmubOSYqyQZcRMFedEeWf8Kmv8skMMZRE0fYO7oc34jQD0iA0Z29E blKTEy9z3AjVk4uCkmo4q4gi2YWCOnv9ugQ0b29qai0rooXeYa75OnN8cmgMiIqV opDMuRbchvMpzL4Zayj1DTS5zQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA6y4RHa YNxOg2IoseLdXIT8TtdGMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUU1MjM2RDZF ODQ2MTFFQTlCNDU2NzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjcAwDwQCAAIwCQMHACABDfEHgDANBgkqhkiG9w0BAQsF AAOCAQEAQCkMILfq+daD2fX8ppZ5b+exjpwVfaRp847cYK6VClweOSY7qnY20gjH KUX8TA0Vr2tGbuiNgZV7NLjJxw2tT9i15GcJd9ML4i9SJIJEze+1bzXtd9tGbdIU czsbSKEXkL0X1b4xBmVof814f7MWAlT2qDwzFxUrZfQ5kiIU3fqdTLvHwQvNJfuR UMTyRjnz0JrVO1z107VDB5NqkW9TU5Mmrwh04A/tdriUBZe28ZGa4nXXsJAcrW67 w3aPB2KSaKI4lDah5u4FiuVCOW1QTD02HCa6nORqJ9Vmvo61nFSk33z9+x8QWpk2 gRk0Fnpf0TrWgsRSqjRdaqpC7x1vug== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org