$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A399703EDCE411ECA193587DC4F9AE02.roa File: A399703EDCE411ECA193587DC4F9AE02.roa (raw, json) Hash identifier: XXqW0frnbmu+BjqNvhh07RtO9OH2O3RPcmK0DxeN28M= Subject key identifier: BF:C5:7C:25:5E:39:C1:62:63:54:CA:B1:66:0F:6D:6E:CC:78:80:EB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 781D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A399703EDCE411ECA193587DC4F9AE02.roa Signing time: Mon 21 Aug 2023 12:38:28 +0000 ROA not before: Mon 21 Aug 2023 12:38:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149558 IP address blocks: 103.187.210.0/23 maxlen: 24 2001:df2:d1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30749 (0x781d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 21 12:38:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64e35ac4-3b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:6f:a8:ed:82:64:96:6e:41:55:38:b5:91: 1d:a9:dc:9b:d0:f2:9a:46:67:2d:12:d1:b7:e6:98: 43:3b:24:30:7d:8c:b9:84:9c:b1:43:64:9b:c9:14: fd:fa:5a:23:bc:f3:09:52:d6:40:2c:ab:e9:59:98: 94:98:aa:a5:35:3f:06:27:1b:40:e8:63:9d:f0:ec: 0e:e4:2a:57:34:b7:88:82:b7:79:a4:a3:26:ff:0e: 26:05:8d:b6:dc:94:b1:2c:07:8b:b3:68:84:72:2f: 6c:fd:e3:5c:73:66:61:3e:06:c9:9c:db:41:7f:c8: 60:a7:a3:f5:b9:3f:10:06:57:9b:a9:e2:8e:44:db: 28:95:0d:88:01:68:26:89:83:5c:19:9c:cd:8b:00: 3f:0f:6e:d8:d2:86:2b:0a:45:06:de:db:63:86:5e: 3e:87:2a:bb:e7:dc:1d:11:56:8c:3d:01:59:f6:22: b1:33:a8:c5:3a:d6:86:b2:30:90:90:3c:da:6d:96: c2:fc:5f:9d:58:de:41:35:bd:5b:79:33:c5:fb:c3: d6:cd:c5:e3:96:46:42:7e:79:67:53:4f:8d:e4:2c: bd:38:92:0f:6b:3d:09:c0:2f:d6:ff:e0:2b:51:ac: d6:fb:3b:f6:2a:8a:a1:20:04:5e:ec:c6:af:a0:e1: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C5:7C:25:5E:39:C1:62:63:54:CA:B1:66:0F:6D:6E:CC:78:80:EB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A399703EDCE411ECA193587DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.210.0/23 IPv6: 2001:df2:d1c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:0b:da:de:e7:1c:d5:d6:f6:3c:b1:07:bd:d2:98:35:4a:8d: 9a:35:a0:ba:fb:94:7b:14:2a:5d:b5:87:2e:2a:b0:8d:43:f0: 57:a9:b6:f3:fd:5b:f2:06:8a:76:af:60:c8:10:a7:8f:49:9b: 5c:fe:fb:5b:81:2c:51:c0:ef:00:86:d9:85:01:1a:91:85:28: a1:1e:a1:94:ec:ed:e3:41:5e:7e:42:f8:77:af:e2:b5:85:c4: 48:6b:81:4d:d8:6b:3c:91:c9:c2:40:4a:07:76:03:c2:67:e9: 7f:e0:73:87:46:3c:b8:94:3d:60:a4:8c:b1:dc:e2:27:e6:39: 4e:3c:41:02:b0:9b:cb:2b:af:b5:fa:a8:9b:29:52:ac:ee:3f: 21:12:fc:8a:93:7f:7e:4b:33:96:77:29:23:c7:66:57:01:e5: e7:fe:22:18:2f:63:19:fc:dc:38:1f:40:9f:04:50:89:2f:60: 47:d2:98:f0:bf:95:6a:4f:b7:1f:77:59:cc:05:7c:70:26:c2: 4e:6a:0e:2d:5a:8f:60:dc:42:7b:4c:c1:a4:40:74:47:e6:d2: 97:e5:85:0d:e4:22:20:eb:f0:85:ae:ca:23:44:67:e5:1f:bf: d6:4f:24:08:43:b4:fd:c8:1a:58:98:73:d0:52:1b:2e:76:bd: fc:e5:f1:a0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICeB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODIxMTIzODI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGUzNWFjNC0zYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzVvqO2CZJZuQVU4tZEdqdyb0PKaRmctEtG35phDOyQwfYy5hJyxQ2SbyRT9 +lojvPMJUtZALKvpWZiUmKqlNT8GJxtA6GOd8OwO5CpXNLeIgrd5pKMm/w4mBY22 3JSxLAeLs2iEci9s/eNcc2ZhPgbJnNtBf8hgp6P1uT8QBlebqeKORNsolQ2IAWgm iYNcGZzNiwA/D27Y0oYrCkUG3ttjhl4+hyq759wdEVaMPQFZ9iKxM6jFOtaGsjCQ kDzabZbC/F+dWN5BNb1beTPF+8PWzcXjlkZCfnlnU0+N5Cy9OJIPaz0JwC/W/+Ar UazW+zv2KoqhIARe7MavoOHOvwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL/FfCVe OcFiY1TKsWYPbW7MeIDrMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTM5OTcwM0VE Q0U0MTFFQ0ExOTM1ODdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnu9IwDwQCAAIwCQMHACABDfLRwDANBgkqhkiG9w0BAQsF AAOCAQEApwva3ucc1db2PLEHvdKYNUqNmjWguvuUexQqXbWHLiqwjUPwV6m28/1b 8gaKdq9gyBCnj0mbXP77W4EsUcDvAIbZhQEakYUooR6hlOzt40FefkL4d6/itYXE SGuBTdhrPJHJwkBKB3YDwmfpf+Bzh0Y8uJQ9YKSMsdziJ+Y5TjxBArCbyyuvtfqo mylSrO4/IRL8ipN/fkszlncpI8dmVwHl5/4iGC9jGfzcOB9AnwRQiS9gR9KY8L+V ak+3H3dZzAV8cCbCTmoOLVqPYNxCe0zBpEB0R+bSl+WFDeQiIOvwha7KI0Rn5R+/ 1k8kCEO0/cgaWJhz0FIbLna9/OXxoA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org