$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8AF4EA248311EEAF57905EC4F9AE02.roa File: 9E8AF4EA248311EEAF57905EC4F9AE02.roa (raw, json) Hash identifier: 8kIPDOfoVjRpOplQv/7nuf7G1wVGF5ytk9OWf7zJo6E= Subject key identifier: 3C:7F:01:3D:0A:7D:F2:9F:95:BC:4B:B3:E6:43:EF:29:C0:9C:82:7D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 759D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8AF4EA248311EEAF57905EC4F9AE02.roa Signing time: Mon 17 Jul 2023 09:23:42 +0000 ROA not before: Mon 17 Jul 2023 09:23:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150636 IP address blocks: 103.89.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30109 (0x759d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 17 09:23:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64b5089d-5a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:6f:c6:53:e3:3b:73:d6:85:70:7d:e5:5f: 1b:d4:df:fa:76:b4:e2:08:4f:6c:fc:02:40:ab:34: 49:f0:99:1b:86:e9:ea:e8:bc:95:5c:8b:c3:cd:00: 2b:b3:65:cb:52:d9:cc:d8:b1:4e:cf:98:b1:2d:7d: fd:35:1d:fb:1a:24:75:2a:4d:2d:80:0a:62:d3:c6: 09:a2:76:a9:7a:ad:e2:42:96:a3:f0:cf:4b:35:e3: 88:f4:ca:25:28:19:2a:42:b4:d6:cd:24:6c:de:2e: cb:c9:79:52:34:4e:da:6c:cc:d3:37:b1:1d:d6:fe: e1:8c:a5:2c:5f:cd:e3:6e:aa:d7:89:2a:13:2d:dd: 96:e1:05:8b:0d:81:c8:f6:20:c4:66:c1:9a:d8:ad: d9:58:06:fb:0e:59:b7:5f:60:71:2d:86:cc:4d:83: fe:dc:dc:4e:af:f3:c9:a4:21:71:e4:d8:20:dd:78: 65:52:b2:83:73:a9:95:54:8c:61:40:f7:14:63:07: 42:1a:37:09:04:75:0e:8d:1b:69:64:4b:b5:ca:57: b0:19:84:32:fa:52:6f:bf:0e:52:60:9e:b4:d5:d1: 4a:d4:90:b5:04:9b:87:b4:d7:8a:5e:df:13:5f:9b: 65:f7:c1:50:f0:06:82:5c:71:b1:e3:ea:5d:9e:c0: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:01:3D:0A:7D:F2:9F:95:BC:4B:B3:E6:43:EF:29:C0:9C:82:7D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E8AF4EA248311EEAF57905EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.46.0/23 Signature Algorithm: sha256WithRSAEncryption 34:7b:dc:5b:4a:06:c3:12:f1:c1:1d:05:f2:80:ef:03:69:52: 3e:74:fb:50:83:7a:37:75:54:f9:e6:59:51:87:84:6a:c1:9c: 57:9b:38:db:f2:73:91:b6:17:ad:73:32:b1:57:fd:5e:c9:d0: 19:b0:3f:a3:b8:d0:3e:3f:35:21:e4:80:95:4e:37:d0:ee:81: 0f:c7:e3:44:41:cc:03:2b:f1:04:2e:a2:6a:76:e0:9e:0e:01: 81:b3:3a:06:ba:07:9a:0a:1b:35:84:41:41:10:b3:5b:93:70: 6b:f7:5c:d9:d8:8d:be:2f:80:69:70:af:cb:5f:09:11:04:8d: 91:b0:c4:bc:06:dd:d6:6f:0b:2a:27:e8:1f:e5:70:61:4e:9d: 12:d5:77:9b:ca:12:45:cd:bc:14:6a:f4:bb:32:4b:b3:2b:18: 20:98:a2:f9:98:d9:bd:c0:bc:69:38:5b:87:81:d8:d4:d8:3a: 7e:6c:20:93:54:eb:07:85:eb:cd:e2:29:31:e4:62:9b:b8:7f: 98:24:6c:94:10:41:f6:cb:68:ef:40:1b:46:c1:c0:44:77:5a: 9b:2c:78:fd:da:9f:b1:17:b2:20:e2:25:86:26:19:bb:1c:ba: 30:28:b3:2b:91:8a:33:b8:fe:7b:11:2a:48:9a:9e:0d:02:b1: ca:e9:c9:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICdZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzE3MDkyMzQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI1MDg5ZC01YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16xvxlPjO3PWhXB95V8b1N/6drTiCE9s/AJAqzRJ8Jkbhunq6LyVXIvDzQAr s2XLUtnM2LFOz5ixLX39NR37GiR1Kk0tgApi08YJonapeq3iQpaj8M9LNeOI9Mol KBkqQrTWzSRs3i7LyXlSNE7abMzTN7Ed1v7hjKUsX83jbqrXiSoTLd2W4QWLDYHI 9iDEZsGa2K3ZWAb7Dlm3X2BxLYbMTYP+3NxOr/PJpCFx5Ngg3XhlUrKDc6mVVIxh QPcUYwdCGjcJBHUOjRtpZEu1ylewGYQy+lJvvw5SYJ601dFK1JC1BJuHtNeKXt8T X5tl98FQ8AaCXHGx4+pdnsB6XwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDx/AT0K ffKflbxLs+ZD7ynAnIJ9MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUU4QUY0RUEy NDgzMTFFRUFGNTc5MDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnWS4wDQYJKoZIhvcNAQELBQADggEBADR73FtKBsMS8cEd BfKA7wNpUj50+1CDejd1VPnmWVGHhGrBnFebONvyc5G2F61zMrFX/V7J0BmwP6O4 0D4/NSHkgJVON9DugQ/H40RBzAMr8QQuomp24J4OAYGzOga6B5oKGzWEQUEQs1uT cGv3XNnYjb4vgGlwr8tfCREEjZGwxLwG3dZvCyon6B/lcGFOnRLVd5vKEkXNvBRq 9LsyS7MrGCCYovmY2b3AvGk4W4eB2NTYOn5sIJNU6weF683iKTHkYpu4f5gkbJQQ QfbLaO9AG0bBwER3WpsseP3an7EXsiDiJYYmGbscujAosyuRijO4/nsRKkiang0C scrpyZ8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org