$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa File: A11514B4B37411ED87DE486DC4F9AE02.roa (raw, json) Hash identifier: NuMjFqSD798yUK8DdjGnJt3+7nTO287uvlHp/iXsnLg= Subject key identifier: 45:D8:74:FA:34:A1:53:58:0F:70:81:4D:C5:BE:10:7A:44:CD:6E:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D15 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa Signing time: Wed 10 May 2023 16:27:36 +0000 ROA not before: Wed 10 May 2023 16:27:36 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137594 IP address blocks: 103.129.108.0/22 maxlen: 24 2001:df1:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27925 (0x6d15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:36 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5f8-17b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:7f:33:86:87:a0:91:aa:a0:26:0d:28:4e: 50:45:ab:6c:cb:6b:7b:12:91:b6:b7:59:93:a0:b1: 20:81:ee:c5:b0:1f:d7:8f:b3:76:98:5d:fc:47:3a: 2b:60:e8:2c:26:ee:19:39:a5:f6:d7:39:c4:ae:8b: e5:cf:2c:ad:8b:ba:ee:b5:f9:0d:a8:e8:f3:9c:83: b7:90:9f:c9:ca:e0:ab:ef:55:f9:18:79:cc:42:66: 2b:97:57:1f:b1:71:42:2a:85:1d:68:01:b5:af:cc: 02:fc:ca:04:e7:51:58:e1:fc:d3:c8:47:de:47:a0: 22:72:0d:33:87:23:73:dc:0e:99:02:3b:09:df:a7: ab:fe:6a:fb:4a:b0:c1:e9:b4:6e:23:a2:54:44:0f: 62:cb:74:bd:7b:04:d6:bb:88:52:69:56:a0:dd:1e: b7:9a:3f:ff:4b:02:49:31:b2:83:41:49:ff:86:19: a2:2b:5a:9e:12:fd:99:ff:fc:b2:96:bb:06:95:d5: 17:ad:83:08:7e:b9:59:10:8d:fd:8a:ac:90:7e:e6: 8f:e4:ab:30:0b:ae:43:1a:09:d8:69:44:57:b1:41: 49:99:53:84:34:03:c9:a6:45:04:11:cd:3d:2f:a7: 5a:b2:f9:b6:d4:dd:19:d3:98:94:45:a2:46:0d:33: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:74:FA:34:A1:53:58:0F:70:81:4D:C5:BE:10:7A:44:CD:6E:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.108.0/22 IPv6: 2001:df1:9040::/48 Signature Algorithm: sha256WithRSAEncryption 3d:5d:7b:1a:92:73:4a:7b:ba:ea:2e:09:c9:6b:b8:1d:7a:82: dd:55:15:22:16:f5:5e:b3:22:1f:1c:70:fb:7e:66:66:42:4d: 02:f5:8b:a5:79:ce:ee:55:3a:c7:7f:49:3f:32:0c:dc:0a:d2: 6a:f6:e9:77:9b:87:fa:61:cd:b6:49:01:2b:7f:d3:29:8a:cd: 01:86:f1:fb:27:dc:39:02:88:b5:81:3b:af:c9:f9:88:65:57: f1:31:1c:8e:cd:d6:9c:f2:91:6f:1a:e2:df:eb:40:4a:b4:b7: c3:61:ab:04:97:e7:df:5f:aa:2b:05:49:80:22:76:03:c3:ea: 2d:58:8e:07:f4:dc:4a:66:de:d9:23:82:58:c7:d0:7c:44:b1: 8f:bc:02:9b:eb:97:3d:cf:b4:70:1f:a5:b8:58:81:9e:0f:42: 95:cd:f9:ba:8d:21:7c:85:be:92:72:e0:84:22:9f:e2:f3:74: 84:93:03:d9:de:97:b8:a3:b5:ab:81:9e:26:24:e3:32:bd:04: 7e:73:b9:cf:59:6e:54:30:99:5e:74:b2:e8:40:c2:0e:db:4b: 18:28:db:b6:0e:9c:9a:7e:cd:ca:0b:b0:8e:4b:e1:c4:ac:52: 7f:b2:7c:b4:ad:2b:40:d1:b6:7a:6b:7a:eb:4a:61:bd:39:0d: 13:e9:9c:e8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzM2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVmOC0xN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvF/M4aHoJGqoCYNKE5QRatsy2t7EpG2t1mToLEgge7FsB/Xj7N2mF38Rzor YOgsJu4ZOaX21znErovlzyyti7rutfkNqOjznIO3kJ/JyuCr71X5GHnMQmYrl1cf sXFCKoUdaAG1r8wC/MoE51FY4fzTyEfeR6Aicg0zhyNz3A6ZAjsJ36er/mr7SrDB 6bRuI6JURA9iy3S9ewTWu4hSaVag3R63mj//SwJJMbKDQUn/hhmiK1qeEv2Z//yy lrsGldUXrYMIfrlZEI39iqyQfuaP5KswC65DGgnYaURXsUFJmVOENAPJpkUEEc09 L6dasvm21N0Z05iURaJGDTNNTwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEXYdPo0 oVNYD3CBTcW+EHpEzW6GMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTExNTE0QjRC Mzc0MTFFRDg3REU0ODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJngWwwDwQCAAIwCQMHACABDfGQQDANBgkqhkiG9w0BAQsF AAOCAQEAPV17GpJzSnu66i4JyWu4HXqC3VUVIhb1XrMiHxxw+35mZkJNAvWLpXnO 7lU6x39JPzIM3ArSavbpd5uH+mHNtkkBK3/TKYrNAYbx+yfcOQKItYE7r8n5iGVX 8TEcjs3WnPKRbxri3+tASrS3w2GrBJfn31+qKwVJgCJ2A8PqLViOB/TcSmbe2SOC WMfQfESxj7wCm+uXPc+0cB+luFiBng9Clc35uo0hfIW+knLghCKf4vN0hJMD2d6X uKO1q4GeJiTjMr0EfnO5z1luVDCZXnSy6EDCDttLGCjbtg6cmn7NyguwjkvhxKxS f7J8tK0rQNG2emt660phvTkNE+mc6A== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org