$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0519A4A005211EE9EE48855C4F9AE02.roa File: A0519A4A005211EE9EE48855C4F9AE02.roa (raw, json) Hash identifier: harQxbtJbxdph7GWweuZB969UYEBNUylbjFhswtw/ss= Subject key identifier: BB:C6:56:D3:71:AF:D7:18:1C:57:39:D6:3E:5F:39:29:9B:EA:40:8E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 731D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0519A4A005211EE9EE48855C4F9AE02.roa Signing time: Thu 01 Jun 2023 08:02:17 +0000 ROA not before: Thu 01 Jun 2023 08:02:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135258 IP address blocks: 103.70.40.0/22 maxlen: 22 103.70.40.0/24 maxlen: 24 103.70.41.0/24 maxlen: 24 103.70.42.0/24 maxlen: 24 103.70.43.0/24 maxlen: 24 2001:df2:47c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29469 (0x731d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 1 08:02:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64785089-0824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:37:f3:16:94:53:30:b4:b0:ef:de:70:28: bb:db:e1:07:fb:ac:10:ab:a6:2c:33:5a:c8:4c:5c: 11:0c:44:9b:63:9c:1b:6b:11:a8:cc:5a:67:71:a5: b2:46:35:48:2f:dc:21:44:c2:85:a7:fb:d8:57:fe: 3c:10:19:c5:f3:6e:7c:94:5f:fe:8a:13:b7:1d:d3: dc:96:0e:78:30:43:f9:bc:cc:84:b5:44:46:29:bb: 96:a5:c3:7b:08:1c:dc:e3:61:f2:8b:90:b0:d7:72: ba:53:5c:3a:fa:a7:63:4b:be:d2:9f:c6:de:6a:bf: 71:fc:c9:1e:c4:3f:18:75:27:42:1c:48:e7:2f:ca: c0:6d:49:d0:10:df:91:52:87:e2:53:6b:df:99:1a: 07:61:e5:b0:af:ea:ad:d1:66:61:fe:79:73:c6:b5: 84:c7:d6:a8:50:4b:0d:4d:09:dc:de:eb:d2:72:30: 49:11:5e:a6:ab:c3:10:a0:b4:ca:11:bf:ca:fc:6b: e0:09:21:1b:a7:6e:fe:b6:8d:dd:4f:21:c5:cf:42: b5:57:a6:f1:0b:5d:66:84:99:59:8e:9c:ca:d3:6a: 00:a6:04:8a:4e:8e:63:34:36:3e:a7:b8:2e:53:e9: 93:87:ee:93:33:34:94:07:f6:76:3f:8d:f7:96:5f: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C6:56:D3:71:AF:D7:18:1C:57:39:D6:3E:5F:39:29:9B:EA:40:8E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0519A4A005211EE9EE48855C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.40.0/22 IPv6: 2001:df2:47c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:00:bf:e9:b3:05:bf:69:e5:5e:69:b1:dd:a9:73:98:e9:f7: fd:07:4e:b8:01:11:0c:d5:f3:77:01:40:eb:53:56:81:de:14: 22:0b:35:61:4f:b2:db:be:2d:ed:15:8d:dd:15:e0:60:3d:f7: 06:3b:e3:86:2e:2b:86:e6:62:ec:6f:71:06:fb:6a:2d:0f:9b: f4:a3:37:ab:dc:37:89:31:61:cf:66:16:0d:ac:e9:e8:b0:36: a0:28:9d:b6:d9:9b:8c:84:a5:aa:d2:35:ce:00:a7:f4:f6:90: 63:d4:35:1c:00:19:e3:41:c2:5e:6b:3e:0c:85:8b:1c:e0:74: c2:39:b3:5e:87:be:44:5b:0c:f9:e5:31:d5:25:74:22:80:3b: cf:d6:1c:5c:b1:80:df:9b:d1:0f:28:72:18:51:b3:53:f9:6d: ec:e4:25:13:9f:79:39:31:1e:9d:c8:69:6a:fc:ee:eb:97:34: f6:ad:9d:56:54:75:a3:53:84:a2:bc:19:1a:05:e4:fa:5d:a7: dd:a7:ac:cf:27:c0:49:fa:8e:a9:0c:9c:a7:37:5d:58:12:bb: 4d:c3:3f:c5:a3:a7:1e:6d:4d:27:af:13:71:11:ab:85:94:3f: 3f:59:5a:b5:61:e7:ba:bc:cf:c5:26:ad:7e:4c:7e:ea:4e:60: b8:55:23:4d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjAxMDgwMjE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc4NTA4OS0wODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunA38xaUUzC0sO/ecCi72+EH+6wQq6YsM1rITFwRDESbY5wbaxGozFpncaWy RjVIL9whRMKFp/vYV/48EBnF8258lF/+ihO3HdPclg54MEP5vMyEtURGKbuWpcN7 CBzc42Hyi5Cw13K6U1w6+qdjS77Sn8bear9x/MkexD8YdSdCHEjnL8rAbUnQEN+R UofiU2vfmRoHYeWwr+qt0WZh/nlzxrWEx9aoUEsNTQnc3uvScjBJEV6mq8MQoLTK Eb/K/GvgCSEbp27+to3dTyHFz0K1V6bxC11mhJlZjpzK02oApgSKTo5jNDY+p7gu U+mTh+6TMzSUB/Z2P433ll9ZLwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLvGVtNx r9cYHFc51j5fOSmb6kCOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTA1MTlBNEEw MDUyMTFFRTlFRTQ4ODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnRigwDwQCAAIwCQMHACABDfJHwDANBgkqhkiG9w0BAQsF AAOCAQEARwC/6bMFv2nlXmmx3alzmOn3/QdOuAERDNXzdwFA61NWgd4UIgs1YU+y 274t7RWN3RXgYD33Bjvjhi4rhuZi7G9xBvtqLQ+b9KM3q9w3iTFhz2YWDazp6LA2 oCidttmbjISlqtI1zgCn9PaQY9Q1HAAZ40HCXms+DIWLHOB0wjmzXoe+RFsM+eUx 1SV0IoA7z9YcXLGA35vRDyhyGFGzU/lt7OQlE595OTEenchpavzu65c09q2dVlR1 o1OEorwZGgXk+l2n3aeszyfASfqOqQycpzddWBK7TcM/xaOnHm1NJ68TcRGrhZQ/ P1latWHnurzPxSatfkx+6k5guFUjTQ== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:30 2024 by rpki-client on console-fra.rpki-client.org