$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6EC72D4699E11EEADE90A6BC4F9AE02.roa File: A6EC72D4699E11EEADE90A6BC4F9AE02.roa (raw, json) Hash identifier: uTZ2Q23blAwmKu3IkVuM/Rg4+U8r3aWHFBs9mu6ffKs= Subject key identifier: 13:97:F8:E0:13:5C:2F:07:46:B1:5F:6A:94:8D:77:DB:0E:A5:B2:9F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7BD4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6EC72D4699E11EEADE90A6BC4F9AE02.roa Signing time: Fri 13 Oct 2023 08:05:56 +0000 ROA not before: Fri 13 Oct 2023 08:05:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59196 IP address blocks: 45.114.36.0/22 maxlen: 24 103.44.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31700 (0x7bd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 13 08:05:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6528fa64-7ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:0c:51:49:eb:c9:e0:a9:e9:58:17:18:2d: 22:2d:5c:91:e6:b8:2a:af:a6:7e:82:d6:5d:5a:39: 69:05:e4:72:bb:7f:ea:1c:54:08:40:66:bd:f2:c7: fe:8d:79:81:7a:e4:32:99:aa:60:a7:82:3f:f4:61: 43:e3:e7:2d:ad:20:e8:c4:31:f0:af:2c:24:21:bb: 62:66:11:7c:f0:53:2e:ee:64:89:71:a2:37:4a:3b: af:33:de:7e:95:42:ad:fa:88:30:67:f1:b4:45:77: 49:20:fe:bd:f7:5e:aa:27:05:43:ee:6a:9c:05:ab: d0:14:2c:10:c0:63:cf:8e:e8:ad:0f:32:bc:d4:2e: 15:8d:1b:0b:a6:fd:12:fd:11:35:6f:8e:41:4c:af: 4e:ef:e7:f4:b7:71:f1:e2:4b:95:b5:83:74:00:d3: c7:a9:68:bc:fd:86:35:24:04:2e:35:28:75:31:61: dc:3c:94:97:b9:15:89:9b:07:b5:01:b5:e1:88:0a: d1:60:4a:9e:29:d7:c7:5a:0f:a6:4e:d0:75:60:80: e4:80:14:e9:6a:49:0e:6b:26:81:22:92:03:33:bf: 6a:7a:88:64:58:f2:dd:3a:1b:76:0f:41:41:4f:6e: de:20:5a:55:27:0b:a2:4c:47:05:63:9e:bc:b9:1b: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:97:F8:E0:13:5C:2F:07:46:B1:5F:6A:94:8D:77:DB:0E:A5:B2:9F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6EC72D4699E11EEADE90A6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.36.0/22 103.44.156.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:26:62:74:bd:3c:62:44:31:fb:40:8f:65:8d:60:96:44:2a: c4:25:b7:3f:ac:6c:94:bf:b0:43:f7:68:f4:be:89:8c:ae:97: 94:2b:69:1e:7d:47:af:24:d8:cb:45:a5:ba:59:29:0b:47:d2: 6c:c5:dd:05:f0:b4:07:34:97:a0:c4:f5:ec:34:19:e8:b0:25: 80:85:b9:03:b7:58:80:a4:e2:20:12:56:97:6f:af:b5:4c:c2: 0d:1b:69:50:ce:bd:35:90:a7:f7:8b:ea:d4:f3:d2:55:bc:41: d4:52:5e:f8:54:55:31:1c:06:4e:b4:ba:de:f6:a4:12:63:a2: 63:7c:6e:41:d1:2b:ee:a0:a0:9e:71:a5:0d:88:36:90:8d:41: b3:f1:c1:4b:0e:d6:8d:0a:09:f5:3f:c4:99:cc:d8:21:d5:5c: 79:ee:9e:56:16:99:01:a0:fb:95:b3:a5:10:a8:ff:53:30:d1: 80:30:a8:c8:9e:b6:8a:49:11:28:84:0a:df:56:48:51:e1:37: 38:69:9e:81:60:01:17:67:21:ba:62:bd:61:88:76:7a:50:cf: 09:ed:f4:0d:50:97:81:31:aa:7e:8c:bc:c6:9e:c4:c0:5b:cd: 76:50:93:37:10:d0:9a:18:91:68:52:2e:98:03:7c:c0:05:d5: b9:16:99:7e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICe9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDEzMDgwNTU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4ZmE2NC03Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPkMUUnryeCp6VgXGC0iLVyR5rgqr6Z+gtZdWjlpBeRyu3/qHFQIQGa98sf+ jXmBeuQymapgp4I/9GFD4+ctrSDoxDHwrywkIbtiZhF88FMu7mSJcaI3SjuvM95+ lUKt+ogwZ/G0RXdJIP69916qJwVD7mqcBavQFCwQwGPPjuitDzK81C4VjRsLpv0S /RE1b45BTK9O7+f0t3Hx4kuVtYN0ANPHqWi8/YY1JAQuNSh1MWHcPJSXuRWJmwe1 AbXhiArRYEqeKdfHWg+mTtB1YIDkgBTpakkOayaBIpIDM79qeohkWPLdOht2D0FB T27eIFpVJwuiTEcFY568uRvtrwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBOX+OAT XC8HRrFfapSNd9sOpbKfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTZFQzcyRDQ2 OTlFMTFFRUFERTkwQTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItciQDBAJnLJwwDQYJKoZIhvcNAQELBQADggEBAJomYnS9 PGJEMftAj2WNYJZEKsQltz+sbJS/sEP3aPS+iYyul5QraR59R68k2MtFpbpZKQtH 0mzF3QXwtAc0l6DE9ew0GeiwJYCFuQO3WICk4iASVpdvr7VMwg0baVDOvTWQp/eL 6tTz0lW8QdRSXvhUVTEcBk60ut72pBJjomN8bkHRK+6goJ5xpQ2INpCNQbPxwUsO 1o0KCfU/xJnM2CHVXHnunlYWmQGg+5WzpRCo/1Mw0YAwqMietopJESiECt9WSFHh NzhpnoFgARdnIbpivWGIdnpQzwnt9A1Ql4Exqn6MvMaexMBbzXZQkzcQ0JoYkWhS LpgDfMAF1bkWmX4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org