$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa File: A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa (raw, json) Hash identifier: 1zkE+xgSd3pNKOF4vll+PfLlOWcEpM52AOgwExm4S+g= Subject key identifier: C0:D5:1F:71:A3:35:C4:27:25:54:CF:42:CF:83:89:EE:A2:98:E4:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7904 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa Signing time: Wed 30 Aug 2023 10:17:10 +0000 ROA not before: Wed 30 Aug 2023 10:17:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151770 IP address blocks: 103.111.6.0/24 maxlen: 24 103.111.7.0/24 maxlen: 24 103.206.176.0/24 maxlen: 24 103.206.177.0/24 maxlen: 24 103.206.178.0/24 maxlen: 24 103.206.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30980 (0x7904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 30 10:17:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ef1725-8739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:91:02:c8:f2:d7:91:88:37:74:5f:d6:cd: 4f:47:09:a1:dd:3e:05:b3:3f:31:61:56:31:22:1b: f5:25:d8:a7:43:d9:94:25:30:e5:db:9b:9d:12:4e: 96:a0:25:8b:f9:24:8b:8c:f6:45:c8:5f:c0:32:b5: 86:09:6c:ac:27:a4:d6:b1:88:ee:ef:b4:38:ca:1e: b7:76:6b:d3:9c:af:2b:a7:1f:18:53:18:0a:69:d1: 76:9b:9a:02:6a:63:d5:9e:b9:d9:b8:55:8d:9b:8f: 98:65:66:0e:a6:2a:3a:7e:31:61:e3:08:49:c4:25: aa:29:09:13:21:fd:15:f9:bd:27:4e:57:b3:c6:3a: 64:dc:87:9f:fe:e8:ff:56:e7:07:08:6f:55:b0:47: 7a:9f:47:bb:15:f8:2d:85:0f:28:ef:5c:63:ed:c2: d7:14:f5:fe:a8:43:5b:b5:b6:b3:37:de:d4:56:86: 4f:b4:bb:a5:5a:1c:20:07:42:2a:da:93:29:f5:8f: 0a:25:2d:a2:af:8f:96:06:72:bc:d2:2d:f2:59:60: 63:e4:d0:50:22:bf:45:46:56:ff:d8:59:a4:67:88: 97:93:5c:59:e0:e1:75:97:fc:4b:ab:d0:58:6d:f6: 93:6a:4e:2c:7a:f2:4a:39:0b:2c:b4:df:73:e2:d4: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D5:1F:71:A3:35:C4:27:25:54:CF:42:CF:83:89:EE:A2:98:E4:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7BDDB7A46EF11EEA0DF7D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.6.0/23 103.206.176.0/22 Signature Algorithm: sha256WithRSAEncryption 37:45:2a:56:5b:46:a1:a9:99:dd:9d:d4:84:09:94:5d:d7:9f: ed:49:67:08:b9:da:55:81:89:a4:3e:48:cb:6f:d0:83:8e:14: 89:f0:ab:b9:cf:f4:68:a6:d2:55:eb:5f:76:9a:b8:00:a6:26: 1b:33:ec:6e:64:1e:71:ea:e1:2e:b7:0f:2d:71:c2:fd:87:6b: fd:2f:5a:15:a8:dc:6a:c5:7c:02:31:69:b3:fd:e2:72:c5:23: c5:71:60:34:21:9b:f8:db:77:b4:03:2b:4c:58:b9:22:88:9e: 56:78:71:7b:f2:51:aa:85:03:58:b2:7b:38:69:de:7c:64:ae: 0d:46:7f:6b:eb:ce:7f:f9:e0:f3:a7:05:2c:52:f6:de:01:57: 7a:b9:76:87:ba:16:1c:63:9c:83:3d:a9:38:c0:79:1d:98:d8: 0f:f8:27:ce:8c:cb:58:43:8c:07:76:0d:2f:64:38:55:f7:9d: 0a:ce:c2:f8:44:3e:9f:32:cb:61:8e:db:ff:46:f3:51:98:b5: b3:21:68:86:21:83:d1:c0:32:fc:86:a6:cb:15:d0:ce:6b:19: 50:76:61:da:33:d1:5f:03:40:3b:45:94:7d:9f:3a:17:3c:ab: 95:15:74:8e:4c:11:a4:97:43:b0:8d:e6:c3:e8:f4:70:45:ce: 91:fc:e1:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICeQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODMwMTAxNzEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVmMTcyNS04NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlWRAsjy15GIN3Rf1s1PRwmh3T4Fsz8xYVYxIhv1JdinQ9mUJTDl25udEk6W oCWL+SSLjPZFyF/AMrWGCWysJ6TWsYju77Q4yh63dmvTnK8rpx8YUxgKadF2m5oC amPVnrnZuFWNm4+YZWYOpio6fjFh4whJxCWqKQkTIf0V+b0nTlezxjpk3Ief/uj/ VucHCG9VsEd6n0e7FfgthQ8o71xj7cLXFPX+qENbtbazN97UVoZPtLulWhwgB0Iq 2pMp9Y8KJS2ir4+WBnK80i3yWWBj5NBQIr9FRlb/2FmkZ4iXk1xZ4OF1l/xLq9BY bfaTak4sevJKOQsstN9z4tQSuwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMDVH3Gj NcQnJVTPQs+Die6imOTMMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTdCRERCN0E0 NkVGMTFFRUEwREY3RDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnbwYDBAJnzrAwDQYJKoZIhvcNAQELBQADggEBADdFKlZb RqGpmd2d1IQJlF3Xn+1JZwi52lWBiaQ+SMtv0IOOFInwq7nP9Gim0lXrX3aauACm Jhsz7G5kHnHq4S63Dy1xwv2Ha/0vWhWo3GrFfAIxabP94nLFI8VxYDQhm/jbd7QD K0xYuSKInlZ4cXvyUaqFA1iyezhp3nxkrg1Gf2vrzn/54POnBSxS9t4BV3q5doe6 FhxjnIM9qTjAeR2Y2A/4J86My1hDjAd2DS9kOFX3nQrOwvhEPp8yy2GO2/9G81GY tbMhaIYhg9HAMvyGpssV0M5rGVB2Ydoz0V8DQDtFlH2fOhc8q5UVdI5MEaSXQ7CN 5sPo9HBFzpH84dc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org