$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa File: A9E4451EBB1E11ECAB080E31C4F9AE02.roa (raw, json) Hash identifier: pMTTuBWg5phreHdVhP0XPYZF4LoVQuyDL8WqklTEb3w= Subject key identifier: EF:7E:9B:EC:86:FB:CF:D1:66:96:69:E4:23:34:AD:43:33:D7:DB:8E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D2F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa Signing time: Wed 10 May 2023 16:28:05 +0000 ROA not before: Wed 10 May 2023 16:28:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137640 IP address blocks: 103.186.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27951 (0x6d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:28:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc614-d7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:76:3d:9e:88:2e:64:78:c4:26:6c:17:d7: 8d:40:fc:fd:14:ab:6b:7b:9c:91:1c:77:35:e0:6d: a7:7d:a2:de:91:95:21:17:53:1f:2e:df:24:bb:76: 17:3f:68:cd:0c:0b:50:c8:42:9b:ae:9b:e5:15:39: 03:9d:60:67:a3:32:ec:05:a8:00:24:78:e4:d0:6f: 7e:2c:82:ec:c7:95:9b:35:ca:0e:04:3f:f3:ea:0b: fb:b2:61:fa:a8:8a:79:93:6e:20:59:f9:60:c1:98: c6:50:28:e6:8a:f9:e7:59:fc:ce:a7:cf:6c:54:ba: 07:9b:ad:cb:27:5a:b6:08:1e:cb:ae:52:fa:48:ea: ee:e9:2a:ff:84:8c:7d:a8:5a:11:b7:c9:47:3d:cd: 85:0e:28:b4:54:b4:46:58:49:a7:00:cb:b9:c8:f6: d7:9d:a5:87:2d:5f:72:0b:78:52:0c:69:25:fc:73: 69:3c:a9:6f:bc:05:fb:a8:56:24:50:98:59:19:a7: 44:1c:36:9b:d3:17:bb:3b:8b:68:f4:ab:76:3b:f8: 26:5f:e7:e5:86:35:b6:0a:2b:11:3c:af:50:d9:07: 49:b9:98:16:3e:c8:8d:80:9c:63:b3:e9:b6:cd:74: 6a:90:1c:d3:4b:f8:56:77:e9:62:80:74:e9:56:29: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:9B:EC:86:FB:CF:D1:66:96:69:E4:23:34:AD:43:33:D7:DB:8E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9E4451EBB1E11ECAB080E31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:39:68:f3:db:20:73:65:c7:72:47:f8:3d:d6:8a:4a:c3:e8: 05:bb:98:c1:fe:94:a5:02:4c:c9:8f:fb:a2:20:7c:17:21:95: 23:26:b1:04:e0:a4:66:3f:3d:ef:af:3b:a4:14:6c:e3:0b:ab: bc:08:b9:87:e7:17:4b:be:19:55:54:91:48:7c:1a:fa:52:5f: 7b:ff:dc:7d:bd:2c:b8:0f:96:ff:c1:47:6c:36:6a:60:76:8e: 6b:62:06:70:ee:7e:8f:e1:88:ef:0f:40:7a:72:ad:90:78:ee: dc:b7:10:6d:fe:54:0e:b0:81:a4:8a:3f:b5:7b:dd:d9:8d:c8: 76:23:98:10:7b:8c:c1:93:b8:f0:59:0d:01:ce:41:88:f9:a2: 83:80:ea:a6:9a:36:07:00:09:3f:ba:5a:69:d7:49:f6:a5:74: a5:ff:16:39:19:f5:b7:03:34:46:38:5d:a4:3a:0d:1c:dd:10: e2:73:3f:f1:4f:9b:79:df:d0:7e:b5:38:d3:6e:65:8a:11:ea: f7:27:8a:99:0c:61:60:d0:da:a5:3a:6d:18:49:7f:2b:38:60: 30:f8:a4:c4:b2:8e:65:86:b0:12:99:10:27:cc:79:7f:75:4e: 52:65:54:d3:3f:f9:f5:26:ed:41:92:00:c9:74:99:31:50:6a: 57:60:46:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyODA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzYxNC1kN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmJ2PZ6ILmR4xCZsF9eNQPz9FKtre5yRHHc14G2nfaLekZUhF1MfLt8ku3YX P2jNDAtQyEKbrpvlFTkDnWBnozLsBagAJHjk0G9+LILsx5WbNcoOBD/z6gv7smH6 qIp5k24gWflgwZjGUCjmivnnWfzOp89sVLoHm63LJ1q2CB7LrlL6SOru6Sr/hIx9 qFoRt8lHPc2FDii0VLRGWEmnAMu5yPbXnaWHLV9yC3hSDGkl/HNpPKlvvAX7qFYk UJhZGadEHDab0xe7O4to9Kt2O/gmX+flhjW2CisRPK9Q2QdJuZgWPsiNgJxjs+m2 zXRqkBzTS/hWd+ligHTpVikwGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9+m+yG +8/RZpZp5CM0rUMz19uOMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTlFNDQ1MUVC QjFFMTFFQ0FCMDgwRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnukYwDQYJKoZIhvcNAQELBQADggEBADw5aPPbIHNlx3JH +D3WikrD6AW7mMH+lKUCTMmP+6IgfBchlSMmsQTgpGY/Pe+vO6QUbOMLq7wIuYfn F0u+GVVUkUh8GvpSX3v/3H29LLgPlv/BR2w2amB2jmtiBnDufo/hiO8PQHpyrZB4 7ty3EG3+VA6wgaSKP7V73dmNyHYjmBB7jMGTuPBZDQHOQYj5ooOA6qaaNgcACT+6 WmnXSfaldKX/FjkZ9bcDNEY4XaQ6DRzdEOJzP/FPm3nf0H61ONNuZYoR6vcnipkM YWDQ2qU6bRhJfys4YDD4pMSyjmWGsBKZECfMeX91TlJlVNM/+fUm7UGSAMl0mTFQ aldgRmU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org