$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5FA855003CB11EB8547A345C4F9AE02.roa File: A5FA855003CB11EB8547A345C4F9AE02.roa (raw, json) Hash identifier: EVmeh+xZDT7kmhuVtE1x2xDs6ONtzES0mfXfVZ/tJqk= Subject key identifier: 59:79:0D:EC:08:5A:53:12:0A:CF:8E:5D:39:62:4D:88:09:E5:81:55 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CBC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5FA855003CB11EB8547A345C4F9AE02.roa Signing time: Wed 10 May 2023 16:25:59 +0000 ROA not before: Wed 10 May 2023 16:25:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136716 IP address blocks: 43.227.128.0/22 maxlen: 24 103.46.232.0/22 maxlen: 24 103.49.52.0/22 maxlen: 24 103.80.12.0/22 maxlen: 24 2403:75c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27836 (0x6cbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:25:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc596-4381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:0f:7d:59:36:21:04:3a:2a:ac:97:0b:27: 40:a1:bb:af:83:28:0c:3c:84:50:e3:d7:0d:a3:5f: 97:c9:09:2f:1d:a9:f2:5e:f1:c0:2b:25:83:45:02: 7c:a9:6e:f4:fb:d5:60:3b:aa:2e:aa:6e:bf:b6:14: ab:6f:01:da:40:9b:d5:dd:f1:cb:65:b5:6d:50:09: 72:84:7d:ef:4b:f1:87:ea:42:84:ac:53:38:d9:ce: b2:21:70:8a:15:75:a9:50:fb:71:51:01:b6:f2:28: 23:62:6f:1d:d8:a7:ac:c2:26:b6:0d:b7:8c:b3:60: 39:e6:c9:8e:94:eb:9c:63:4e:09:43:19:dd:f8:30: f7:94:9e:d4:ff:29:33:1d:94:4b:cd:8c:a8:04:e8: ea:97:01:3d:ed:29:49:1b:ce:c0:ac:b9:f4:14:09: 82:78:36:f9:c5:76:7b:9f:ac:2a:85:eb:4a:31:62: 59:0d:3f:d1:e6:07:e8:aa:57:97:35:36:4a:33:64: 78:7c:a6:31:8b:88:36:37:fc:5b:d7:6c:df:67:56: 7d:02:bc:63:ec:f4:61:3f:b1:d5:84:51:39:ae:90: c7:06:41:ca:9c:61:56:0b:82:05:19:4b:d5:df:16: 30:82:57:f1:f3:8f:9f:74:9c:1a:a1:60:3f:76:00: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:79:0D:EC:08:5A:53:12:0A:CF:8E:5D:39:62:4D:88:09:E5:81:55 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5FA855003CB11EB8547A345C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.227.128.0/22 103.46.232.0/22 103.49.52.0/22 103.80.12.0/22 IPv6: 2403:75c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:77:8d:ac:6c:d5:b9:1f:c5:ac:b5:7c:04:a4:6e:97:23:60: f6:6e:60:8e:ce:46:42:2c:07:d8:20:d5:19:23:fd:84:1b:21: bb:e4:5a:64:ea:d1:f2:27:69:7f:f3:83:c5:7b:7c:69:54:1b: a6:fe:15:04:aa:0b:c2:95:93:55:e3:01:ff:76:88:5b:a1:66: 3a:c2:ba:62:3e:6b:ad:d6:a6:f2:4c:f2:8d:61:54:8c:c2:41: d0:1b:c6:3f:01:06:f7:d7:25:e0:b2:8b:5a:57:bb:a7:ff:c3: 25:25:2b:f1:fa:86:e5:89:e3:a1:7b:7f:1b:5f:83:b2:fd:57: 8b:f7:17:96:c2:75:67:21:5a:ad:98:bd:f7:af:3d:31:4a:b6: 6f:97:52:da:76:27:af:98:28:89:f8:5d:61:12:21:b6:24:ff: c6:89:fe:f3:f6:85:72:34:69:5e:95:8e:ed:11:ca:6c:1f:c2: 0c:e5:bd:10:68:10:12:6e:a1:5e:9a:a0:e7:ba:27:96:fd:c7: 52:70:1b:fc:47:88:d5:c2:c1:16:7e:ac:8b:22:1a:ea:41:3d: f1:23:f3:e0:00:07:c1:f9:f6:38:f3:5f:ec:c5:54:3b:7b:c4: 0d:71:a3:9b:54:96:91:a6:33:84:93:c4:94:6e:b9:6c:82:f8: 61:25:32:0f -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICbLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU5Ni00MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HoPfVk2IQQ6KqyXCydAobuvgygMPIRQ49cNo1+XyQkvHanyXvHAKyWDRQJ8 qW70+9VgO6ouqm6/thSrbwHaQJvV3fHLZbVtUAlyhH3vS/GH6kKErFM42c6yIXCK FXWpUPtxUQG28igjYm8d2Keswia2DbeMs2A55smOlOucY04JQxnd+DD3lJ7U/ykz HZRLzYyoBOjqlwE97SlJG87ArLn0FAmCeDb5xXZ7n6wqhetKMWJZDT/R5gfoqleX NTZKM2R4fKYxi4g2N/xb12zfZ1Z9Arxj7PRhP7HVhFE5rpDHBkHKnGFWC4IFGUvV 3xYwglfx84+fdJwaoWA/dgBj2QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFl5DewI WlMSCs+OXTliTYgJ5YFVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTVGQTg1NTAw M0NCMTFFQjg1NDdBMzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr44ADBAJnLugDBAJnMTQDBAJnUAwwDQQCAAIwBwMFACQD dcAwDQYJKoZIhvcNAQELBQADggEBAIB3jaxs1bkfxay1fASkbpcjYPZuYI7ORkIs B9gg1Rkj/YQbIbvkWmTq0fInaX/zg8V7fGlUG6b+FQSqC8KVk1XjAf92iFuhZjrC umI+a63WpvJM8o1hVIzCQdAbxj8BBvfXJeCyi1pXu6f/wyUlK/H6huWJ46F7fxtf g7L9V4v3F5bCdWchWq2YvfevPTFKtm+XUtp2J6+YKIn4XWESIbYk/8aJ/vP2hXI0 aV6Vju0RymwfwgzlvRBoEBJuoV6aoOe6J5b9x1JwG/xHiNXCwRZ+rIsiGupBPfEj 8+AAB8H59jjzX+zFVDt7xA1xo5tUlpGmM4STxJRuuWyC+GElMg8= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:31 2024 by rpki-client on console-fra.rpki-client.org