$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa File: ACB23E3AAB7411ED9FFF3432C4F9AE02.roa (raw, json) Hash identifier: X90r5EziifNFd7tt57Fu9SrfAm5ZZF4ey2F3aKeiavw= Subject key identifier: 9D:E0:10:6A:DB:1D:86:75:18:C7:C3:C2:57:BC:12:E4:4A:C4:2E:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F4D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:09 +0000 ROA not before: Wed 10 May 2023 16:38:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142448 IP address blocks: 103.75.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28493 (0x6f4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc871-f224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:08:69:4c:7f:ad:10:2b:d2:b5:3b:11:89: fd:dc:1a:67:6d:cf:af:90:eb:ea:5c:cf:8e:41:3d: bd:16:97:24:89:02:6c:6a:4e:ea:36:14:ad:7d:f9: 48:92:42:8c:37:b1:6d:9e:6b:9d:30:33:4d:41:b1: e8:1b:1f:ec:08:be:09:dd:f6:8a:cf:51:d1:a3:40: 37:36:23:92:84:16:ca:65:9f:1b:51:8d:fd:56:c4: 5b:58:e5:58:f5:ca:2a:e4:04:4c:65:01:9f:65:b7: 0d:71:16:7d:b9:dc:31:9e:61:02:cd:f4:c6:c6:e1: 1d:9f:e7:48:15:2c:cc:0a:ed:99:83:67:a3:60:47: fa:32:ef:b8:db:3a:fc:f7:1a:a1:47:ec:43:1e:c3: f6:bb:b0:04:ed:5a:ce:78:cd:4d:5a:b4:b9:dd:f5: e7:ee:4e:81:67:c1:74:d1:1e:05:03:49:62:68:d9: db:07:6f:67:87:ab:39:fa:47:9d:6a:52:53:6b:ab: e0:16:5f:0c:31:90:9a:03:f8:a6:f0:46:14:a5:b3: b8:89:1c:a0:82:d3:78:ce:25:51:84:3b:89:29:35: e9:b7:4a:47:35:c6:5d:0c:62:8b:57:42:61:ed:61: a4:e4:21:96:f3:6f:6c:b2:23:5f:89:f4:9c:f5:8a: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:10:6A:DB:1D:86:75:18:C7:C3:C2:57:BC:12:E4:4A:C4:2E:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ACB23E3AAB7411ED9FFF3432C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.60.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:a8:6c:43:51:19:e2:98:3e:5e:fd:5a:f4:6e:7f:66:af:d7: cb:e0:60:39:43:d9:0a:51:31:44:77:22:a8:f3:a2:0e:af:b1: a0:f1:85:09:76:97:f9:f1:ec:33:72:1c:ab:b4:61:fe:e1:63: e1:cf:d6:4d:23:43:a6:e4:3f:ad:34:44:4f:19:5a:73:cb:a2: c9:ff:ac:bb:a0:ba:c0:5d:b9:c8:db:ca:20:68:77:bd:56:10: c1:29:5b:c3:1e:19:85:8a:68:59:86:11:23:68:03:7f:00:1f: 3c:7c:a2:5d:cc:8c:31:3e:07:79:e7:00:35:14:26:bf:4a:8f: 1f:9a:ba:d1:d1:c6:d6:ea:b7:bd:8b:b8:76:11:21:fc:16:05: 68:4e:63:79:7c:95:76:3d:e3:86:74:2f:f5:63:a3:05:c1:ce: 15:b4:53:a1:0c:41:00:31:04:46:06:11:f9:ae:19:ab:4f:1c: 0d:b8:38:d5:b5:ca:9e:db:69:99:42:cf:84:c8:9d:cc:1a:ca: 13:a5:9a:db:b4:ee:f0:4b:dd:c8:77:34:16:d8:9c:da:9f:45: c8:8e:f4:13:2d:b1:f1:7d:bc:c1:5c:b2:78:9e:b3:da:70:19: 27:9f:8b:f7:5d:97:c7:2d:30:59:c6:45:c0:7c:e7:81:eb:b9: a5:46:c9:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICb00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg3MS1mMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRsIaUx/rRAr0rU7EYn93Bpnbc+vkOvqXM+OQT29FpckiQJsak7qNhStfflI kkKMN7FtnmudMDNNQbHoGx/sCL4J3faKz1HRo0A3NiOShBbKZZ8bUY39VsRbWOVY 9coq5ARMZQGfZbcNcRZ9udwxnmECzfTGxuEdn+dIFSzMCu2Zg2ejYEf6Mu+42zr8 9xqhR+xDHsP2u7AE7VrOeM1NWrS53fXn7k6BZ8F00R4FA0liaNnbB29nh6s5+ked alJTa6vgFl8MMZCaA/im8EYUpbO4iRyggtN4ziVRhDuJKTXpt0pHNcZdDGKLV0Jh 7WGk5CGW829ssiNfifSc9YpjoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3gEGrb HYZ1GMfDwle8EuRKxC79MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUNCMjNFM0FB Qjc0MTFFRDlGRkYzNDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSzwwDQYJKoZIhvcNAQELBQADggEBAG+obENRGeKYPl79 WvRuf2av18vgYDlD2QpRMUR3Iqjzog6vsaDxhQl2l/nx7DNyHKu0Yf7hY+HP1k0j Q6bkP600RE8ZWnPLosn/rLugusBducjbyiBod71WEMEpW8MeGYWKaFmGESNoA38A Hzx8ol3MjDE+B3nnADUUJr9Kjx+autHRxtbqt72LuHYRIfwWBWhOY3l8lXY944Z0 L/VjowXBzhW0U6EMQQAxBEYGEfmuGatPHA24ONW1yp7baZlCz4TIncwayhOlmtu0 7vBL3ch3NBbYnNqfRciO9BMtsfF9vMFcsnies9pwGSefi/ddl8ctMFnGRcB854Hr uaVGyfE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org