$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F08B98CF72911EA8B82EB48C4F9AE02.roa File: 9F08B98CF72911EA8B82EB48C4F9AE02.roa (raw, json) Hash identifier: n6L/VPZjoTKcZ5bhYq8IvqqH7XKvCCCDGZObC8gCm6M= Subject key identifier: 7E:CE:19:AB:AD:AC:AC:C3:A1:A5:52:17:8B:14:28:DC:A8:23:37:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A38 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F08B98CF72911EA8B82EB48C4F9AE02.roa Signing time: Wed 10 May 2023 16:13:42 +0000 ROA not before: Wed 10 May 2023 16:13:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132977 IP address blocks: 103.144.37.0/24 maxlen: 24 103.214.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27192 (0x6a38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:42 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2b6-387a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:93:fd:cc:4f:19:26:dd:96:58:f6:f4:4d: 3b:00:fc:fb:04:94:88:e4:14:d2:30:63:13:60:e1: 88:69:af:18:2f:21:d7:ac:7e:d0:e2:41:92:4c:fa: 85:6e:2e:d0:12:20:d4:ac:17:24:85:88:ea:b8:0f: 49:b0:81:73:90:0a:0e:b9:13:a5:54:58:00:5d:c0: ff:04:6f:e1:bf:8c:41:61:44:ea:2c:8e:9d:59:e7: d8:66:b4:1a:e9:05:30:a8:d7:ae:35:fc:99:24:34: 77:cc:5a:41:e9:39:1b:96:fc:72:27:ce:7a:41:76: bd:bd:a5:d1:07:0e:dd:77:85:88:2e:2f:0e:05:50: 01:32:d3:c7:8e:53:97:c1:58:49:ac:64:cb:4d:88: 55:5d:fc:f7:1a:7e:dc:04:60:bc:1d:94:03:df:ef: 26:18:64:83:b5:28:a6:99:ac:b5:3c:2c:f9:b5:91: 61:4a:a8:72:03:05:74:60:f1:97:5a:5c:e1:d2:7e: 23:40:f9:78:cc:15:c3:d0:15:87:fa:7e:e9:e1:36: f8:3e:3a:7b:0e:31:f6:26:fc:d3:b5:79:25:56:a6: 6d:63:59:6b:42:eb:21:fa:a3:4e:15:28:45:ec:85: 59:45:f6:f6:5c:4d:a4:42:c7:db:64:88:f6:36:86: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CE:19:AB:AD:AC:AC:C3:A1:A5:52:17:8B:14:28:DC:A8:23:37:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F08B98CF72911EA8B82EB48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.37.0/24 103.214.96.0/23 Signature Algorithm: sha256WithRSAEncryption 16:d5:5e:a4:72:5d:c1:40:88:4f:a0:74:5a:79:85:3f:47:34: 70:cb:35:53:0f:e6:9f:5e:05:a5:90:4d:90:07:2e:3c:5e:81: 80:e3:23:34:2c:9e:3f:72:83:2c:30:21:66:e7:7c:49:31:4e: 1a:04:a9:4b:54:f6:14:5e:ee:29:64:ed:4d:38:f4:9f:5c:ca: 53:47:63:7f:86:7e:47:c4:8c:03:ab:7b:66:88:c2:74:a0:a7: 88:36:33:f1:05:44:2a:1f:60:5a:d8:fb:68:a3:37:cb:b7:ae: c9:b5:81:91:90:c0:71:39:07:23:37:1f:fb:a9:d9:ee:62:1f: 4c:ca:ad:fb:62:ac:4a:74:10:b1:e5:a9:08:ec:74:dc:e2:87: 08:83:9a:1d:81:e3:5c:9b:6e:11:11:72:01:9e:16:70:5d:39: 33:8e:af:ae:23:e7:16:a9:32:73:dd:97:57:35:c2:f5:ee:e3: 36:f4:cd:cd:1d:05:99:31:17:03:17:81:a2:55:96:b8:0c:58: bc:65:07:5f:22:da:cc:c2:07:81:67:38:aa:a7:0e:19:70:c1: fa:ef:7b:2d:f5:e1:5e:87:23:8d:11:8e:c4:07:6f:e1:cf:f1: 4e:fc:69:d0:a9:21:77:df:95:2a:1f:1c:a9:5e:46:6d:b8:96: 86:33:c9:f7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICajgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJiNi0zODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hOT/cxPGSbdllj29E07APz7BJSI5BTSMGMTYOGIaa8YLyHXrH7Q4kGSTPqF bi7QEiDUrBckhYjquA9JsIFzkAoOuROlVFgAXcD/BG/hv4xBYUTqLI6dWefYZrQa 6QUwqNeuNfyZJDR3zFpB6TkblvxyJ856QXa9vaXRBw7dd4WILi8OBVABMtPHjlOX wVhJrGTLTYhVXfz3Gn7cBGC8HZQD3+8mGGSDtSimmay1PCz5tZFhSqhyAwV0YPGX Wlzh0n4jQPl4zBXD0BWH+n7p4Tb4Pjp7DjH2JvzTtXklVqZtY1lrQush+qNOFShF 7IVZRfb2XE2kQsfbZIj2NobptwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH7OGaut rKzDoaVSF4sUKNyoIzf7MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUYwOEI5OENG NzI5MTFFQThCODJFQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnkCUDBAFn1mAwDQYJKoZIhvcNAQELBQADggEBABbVXqRy XcFAiE+gdFp5hT9HNHDLNVMP5p9eBaWQTZAHLjxegYDjIzQsnj9ygywwIWbnfEkx ThoEqUtU9hRe7ilk7U049J9cylNHY3+GfkfEjAOre2aIwnSgp4g2M/EFRCofYFrY +2ijN8u3rsm1gZGQwHE5ByM3H/up2e5iH0zKrftirEp0ELHlqQjsdNzihwiDmh2B 41ybbhERcgGeFnBdOTOOr64j5xapMnPdl1c1wvXu4zb0zc0dBZkxFwMXgaJVlrgM WLxlB18i2szCB4FnOKqnDhlwwfrvey314V6HI40RjsQHb+HP8U78adCpIXfflSof HKleRm24loYzyfc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org