$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6716FA6D4BF11EBAD93480EC4F9AE02.roa File: A6716FA6D4BF11EBAD93480EC4F9AE02.roa (raw, json) Hash identifier: n6b2hacY5p/eVpr7owQ95I4v5JFhtKoOpmIWOAOX2Yo= Subject key identifier: 90:8C:3C:50:98:9E:10:3C:2A:54:0F:94:16:82:CF:12:BE:3C:AD:9B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F2D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6716FA6D4BF11EBAD93480EC4F9AE02.roa Signing time: Wed 10 May 2023 16:37:34 +0000 ROA not before: Wed 10 May 2023 16:37:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141856 IP address blocks: 103.168.94.0/23 maxlen: 24 2001:df6:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28461 (0x6f2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:37:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc84d-1f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:87:47:29:23:69:5b:ed:77:38:e7:b1:03: 29:91:12:72:f9:0b:54:b5:b9:3a:f7:b3:e2:bd:c6: 75:3d:fa:ec:de:b8:f8:0b:f5:ed:22:7e:fb:9c:14: 94:80:34:5b:85:78:e4:dd:6f:82:ff:4e:54:99:d6: ea:0d:c4:dd:bf:f3:b3:e8:f5:59:7e:3f:8a:6c:f3: e9:27:92:7d:9a:56:33:5a:f8:9c:e6:24:99:84:40: 6a:5d:20:ee:3d:21:73:3a:a3:92:d7:62:db:47:f8: 86:84:9f:f2:aa:7e:62:f1:ba:9f:69:ee:79:67:97: 6c:9e:3d:4b:a8:d9:61:67:88:03:78:1c:31:f2:a0: b3:50:81:70:71:94:e5:b7:14:2d:76:5b:db:50:f1: 8a:e2:2b:eb:8c:bc:e7:67:4e:97:b5:cf:5e:5f:dc: 88:cb:bf:e3:02:15:af:b6:c8:9b:13:4d:1c:6e:c4: 4d:2a:df:c3:ac:35:b6:f4:21:e1:cd:d5:4f:37:56: 50:0d:fa:c2:a9:df:fe:cb:ea:5a:a6:47:f8:67:75: d9:ba:66:7f:8a:14:11:d6:89:43:fd:9d:1f:0c:28: 96:98:ba:b9:7d:7f:fb:77:e8:68:e6:ea:65:3c:16: a7:52:13:35:73:23:8e:d6:3d:40:b8:c8:a8:d9:94: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:3C:50:98:9E:10:3C:2A:54:0F:94:16:82:CF:12:BE:3C:AD:9B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6716FA6D4BF11EBAD93480EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.94.0/23 IPv6: 2001:df6:d780::/48 Signature Algorithm: sha256WithRSAEncryption 12:25:ea:32:a8:a4:1a:db:31:9a:a0:93:f1:81:59:92:40:a0: cf:47:a2:7f:6e:8b:6e:b4:22:4d:71:62:7d:ff:8e:20:cc:05: a1:22:fa:64:77:65:8c:88:28:cd:2f:e1:ff:4b:0f:b6:70:43: ff:c5:e7:14:5a:86:4a:7f:46:3d:61:ac:9b:20:7e:12:50:eb: b0:55:82:8f:88:6b:a2:10:a3:5a:94:aa:13:f7:f5:d1:27:1b: 13:61:9a:ee:8a:88:2b:d9:ff:f0:f0:23:b5:1c:a0:0a:0f:78: 85:7d:b3:20:7e:20:b4:e1:88:83:79:85:a8:6f:c7:57:cf:ea: e4:45:df:84:30:fc:01:3d:de:ef:b9:bb:66:98:4a:ff:84:f3: 1d:37:53:eb:72:ae:4a:8e:8a:2f:21:45:88:39:d5:2a:b2:74: f0:0d:36:8f:e9:dc:3d:d1:80:29:96:b3:1c:17:30:3e:c3:de: 8d:e9:e6:7b:50:a6:84:96:72:01:e9:60:00:1c:94:cc:5f:d9: 4a:29:8f:4e:f0:75:36:13:34:6e:5f:fe:7b:7f:ed:79:40:04: 76:d3:53:8c:4c:f6:e1:41:db:79:b9:b6:67:fc:70:0f:6b:6b: 73:08:06:14:3b:80:ee:98:71:8e:df:7a:ea:0b:57:ed:75:cc: 37:d9:12:09 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICby0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg0ZC0xZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCuHRykjaVvtdzjnsQMpkRJy+QtUtbk697PivcZ1Pfrs3rj4C/XtIn77nBSU gDRbhXjk3W+C/05UmdbqDcTdv/Oz6PVZfj+KbPPpJ5J9mlYzWvic5iSZhEBqXSDu PSFzOqOS12LbR/iGhJ/yqn5i8bqfae55Z5dsnj1LqNlhZ4gDeBwx8qCzUIFwcZTl txQtdlvbUPGK4ivrjLznZ06Xtc9eX9yIy7/jAhWvtsibE00cbsRNKt/DrDW29CHh zdVPN1ZQDfrCqd/+y+papkf4Z3XZumZ/ihQR1olD/Z0fDCiWmLq5fX/7d+ho5upl PBanUhM1cyOO1j1AuMio2ZQLwwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJCMPFCY nhA8KlQPlBaCzxK+PK2bMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTY3MTZGQTZE NEJGMTFFQkFEOTM0ODBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqF4wDwQCAAIwCQMHACABDfbXgDANBgkqhkiG9w0BAQsF AAOCAQEAEiXqMqikGtsxmqCT8YFZkkCgz0eif26LbrQiTXFiff+OIMwFoSL6ZHdl jIgozS/h/0sPtnBD/8XnFFqGSn9GPWGsmyB+ElDrsFWCj4hrohCjWpSqE/f10Scb E2Ga7oqIK9n/8PAjtRygCg94hX2zIH4gtOGIg3mFqG/HV8/q5EXfhDD8AT3e77m7 ZphK/4TzHTdT63KuSo6KLyFFiDnVKrJ08A02j+ncPdGAKZazHBcwPsPejenme1Cm hJZyAelgAByUzF/ZSimPTvB1NhM0bl/+e3/teUAEdtNTjEz24UHbebm2Z/xwD2tr cwgGFDuA7phxjt966gtX7XXMN9kSCQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org