$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF95A5EF95A11EDAB130133C4F9AE02.roa File: AAF95A5EF95A11EDAB130133C4F9AE02.roa (raw, json) Hash identifier: E5tmd81tasLaIF+BkBvdQmTOoupAxVpCwmFIKPIxAk4= Subject key identifier: 61:71:43:92:69:9F:DE:F3:50:31:91:79:D5:A4:A7:0A:64:21:75:70 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7298 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF95A5EF95A11EDAB130133C4F9AE02.roa Signing time: Tue 23 May 2023 11:12:13 +0000 ROA not before: Tue 23 May 2023 11:12:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151095 IP address blocks: 103.199.142.0/23 maxlen: 24 2001:df2:7340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29336 (0x7298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 23 11:12:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646c9f8d-4bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:27:a8:a2:77:dd:80:6f:1c:0f:4a:c4:d7: 2b:aa:41:6b:78:89:af:5e:92:d8:f0:0f:67:bd:6b: 1d:ed:c0:02:2e:be:34:8c:f0:15:eb:98:5d:80:4a: 17:20:41:95:c7:e3:03:f7:91:8c:54:27:e9:3a:c1: a7:9e:57:29:b2:5b:57:6e:00:3d:aa:d0:67:63:3e: fd:b6:01:7e:70:fd:50:fe:d7:bd:e0:5d:5d:0d:5d: 78:5f:1f:19:a1:5c:dc:9b:d3:20:0b:67:92:ae:5a: 3e:97:91:42:6f:78:a1:6f:52:fc:db:b6:7d:e3:70: d1:e6:98:26:c0:cb:c0:a2:85:d6:19:9d:8a:27:a7: d3:81:4b:5d:60:15:f7:f5:72:7a:71:3a:0a:f2:f8: 78:41:e8:6c:32:8e:fd:1a:51:4f:58:63:a0:a1:9e: 16:3e:8c:4e:d1:8b:5e:50:ed:d7:2d:24:b8:8b:1e: 39:34:00:9e:96:95:0c:86:33:dd:69:45:b8:75:59: 32:8e:51:2f:b1:43:38:a0:0e:35:4e:4e:48:54:40: 9f:9a:b9:61:01:63:67:9c:cd:68:ca:6a:52:f3:1a: 53:ef:03:59:b4:63:fb:94:67:13:0c:ac:8b:a8:93: d5:94:7a:bb:9d:22:4b:9f:dc:7b:a9:b9:46:4c:15: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:71:43:92:69:9F:DE:F3:50:31:91:79:D5:A4:A7:0A:64:21:75:70 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF95A5EF95A11EDAB130133C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.199.142.0/23 IPv6: 2001:df2:7340::/48 Signature Algorithm: sha256WithRSAEncryption 51:48:e4:b7:5c:6a:b3:42:89:9f:22:45:96:8f:7e:0c:e5:bd: 0e:e4:2b:e5:b9:f0:c6:69:c8:a1:09:68:07:9e:1d:a7:9f:78: a5:e7:72:7e:da:56:6f:75:cc:b7:bf:cb:18:c8:45:7c:13:eb: 0d:4d:80:c4:63:88:cd:9a:5e:53:d7:ad:d8:1c:dd:b8:5f:00: 74:df:4d:2b:6f:05:b8:02:18:e5:21:eb:59:c9:7e:9c:f0:25: bc:e8:7b:1e:18:fb:a0:5e:d7:77:2e:b1:5a:ef:a7:74:61:dc: 6d:e3:e9:bd:84:b2:85:11:f2:d6:3b:45:47:62:9f:18:05:07: 74:0b:2f:9c:a0:18:77:9a:e0:b5:7e:56:28:6d:c8:5e:4b:65: 88:11:78:14:81:f7:b6:38:27:6a:16:34:6e:ca:78:e4:78:df: a7:22:d3:9a:9d:b4:30:6e:57:5d:d4:75:56:32:2b:71:7f:b6: bd:01:1f:03:0c:3a:64:bd:b3:0e:e4:93:ef:3b:b8:4a:99:0f: 3d:e5:82:df:2e:01:55:f5:17:c4:22:6f:4e:39:0c:94:4b:86: 33:81:72:22:f9:7c:35:ab:5f:06:64:52:89:e4:29:57:49:2a: 52:b4:f8:bc:fd:8a:7a:f2:50:a8:e5:b3:a2:8b:ca:65:26:37: 50:81:97:62 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTIzMTExMjEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZjOWY4ZC00YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusgnqKJ33YBvHA9KxNcrqkFreImvXpLY8A9nvWsd7cACLr40jPAV65hdgEoX IEGVx+MD95GMVCfpOsGnnlcpsltXbgA9qtBnYz79tgF+cP1Q/te94F1dDV14Xx8Z oVzcm9MgC2eSrlo+l5FCb3ihb1L827Z943DR5pgmwMvAooXWGZ2KJ6fTgUtdYBX3 9XJ6cToK8vh4QehsMo79GlFPWGOgoZ4WPoxO0YteUO3XLSS4ix45NACelpUMhjPd aUW4dVkyjlEvsUM4oA41Tk5IVECfmrlhAWNnnM1oympS8xpT7wNZtGP7lGcTDKyL qJPVlHq7nSJLn9x7qblGTBXFqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGFxQ5Jp n97zUDGRedWkpwpkIXVwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUFGOTVBNUVG OTVBMTFFREFCMTMwMTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnx44wDwQCAAIwCQMHACABDfJzQDANBgkqhkiG9w0BAQsF AAOCAQEAUUjkt1xqs0KJnyJFlo9+DOW9DuQr5bnwxmnIoQloB54dp594pedyftpW b3XMt7/LGMhFfBPrDU2AxGOIzZpeU9et2BzduF8AdN9NK28FuAIY5SHrWcl+nPAl vOh7Hhj7oF7Xdy6xWu+ndGHcbePpvYSyhRHy1jtFR2KfGAUHdAsvnKAYd5rgtX5W KG3IXktliBF4FIH3tjgnahY0bsp45HjfpyLTmp20MG5XXdR1VjIrcX+2vQEfAww6 ZL2zDuST7zu4SpkPPeWC3y4BVfUXxCJvTjkMlEuGM4FyIvl8NatfBmRSieQpV0kq UrT4vP2KevJQqOWzoovKZSY3UIGXYg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org