$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD03AE1ADCCF11ECA401CF31C4F9AE02.roa File: AD03AE1ADCCF11ECA401CF31C4F9AE02.roa (raw, json) Hash identifier: G9pT+duPNS3EmQbFLb1Y7AOWcEVcI2GzmKJI3U9q5y8= Subject key identifier: 28:DD:D6:8F:FD:42:0D:DA:15:5D:40:12:5C:8B:75:85:12:5A:53:C2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 708F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD03AE1ADCCF11ECA401CF31C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:09 +0000 ROA not before: Wed 10 May 2023 16:44:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149594 IP address blocks: 103.184.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28815 (0x708f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9d9-6fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:f6:31:93:e0:04:06:88:b0:7e:65:db:a2: 60:1b:2d:ef:b8:b2:98:3b:44:d9:bf:de:cf:07:88: 69:9f:54:28:33:f2:4f:de:e2:0e:d5:f4:11:c9:54: 2e:8f:3c:73:5e:87:e2:fc:b8:6c:00:63:e6:17:4d: 3f:7a:5c:c0:e9:f1:b6:49:62:5d:45:c2:97:8f:5a: c8:fa:ab:20:c2:e0:25:52:5f:35:dd:4f:27:e9:79: cb:00:9d:9d:49:6c:27:8f:4e:79:91:66:02:3c:e2: 56:82:1c:c6:98:60:77:6e:f1:c6:f7:3a:8e:d5:ac: e1:71:d2:43:b8:ca:3e:e1:86:d9:d7:11:12:af:b9: a9:99:97:e0:7e:a7:f5:74:68:4e:db:e6:da:bd:57: b5:f2:10:41:21:a1:ec:19:0d:8c:2d:28:35:78:9c: 21:67:7c:e2:18:e4:7b:fb:95:7b:bf:80:90:a8:79: ee:87:0c:0f:d6:41:63:a0:16:0d:a3:36:c9:a1:c5: ce:9a:32:ec:0e:7a:6c:4f:91:2b:3d:2b:c8:cd:b5: 6e:4b:94:50:0f:e3:a4:3d:58:35:7c:22:b0:67:76: a5:22:ed:dd:db:99:7f:b4:4d:8e:eb:81:ea:7e:a8: b4:0d:71:72:b2:55:a1:bf:1a:a8:cd:1f:fe:51:4a: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:D6:8F:FD:42:0D:DA:15:5D:40:12:5C:8B:75:85:12:5A:53:C2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD03AE1ADCCF11ECA401CF31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.236.0/23 Signature Algorithm: sha256WithRSAEncryption ad:59:f7:f2:29:10:41:8d:da:03:a2:03:2d:76:11:01:cb:59: f7:6b:88:52:72:8c:bc:a5:83:91:1f:af:61:55:f9:2f:7b:5c: 01:b7:2d:77:48:63:60:1d:97:fc:90:21:be:b7:ce:b2:ac:b2: b1:de:68:b6:3b:ba:ea:d2:7d:20:cb:08:33:33:a3:37:66:65: 26:ad:a4:71:35:24:73:40:05:50:28:6c:14:f3:46:6a:ee:58: 56:66:99:80:19:53:27:27:3d:eb:36:8f:9d:1f:3a:2e:03:69: d5:1e:bb:dd:35:f9:97:4a:33:c2:ac:cb:86:be:bc:da:cf:39: e6:bc:4c:de:9d:5f:9e:55:28:05:11:44:1d:c0:40:bd:2d:3e: a6:b9:01:bf:9e:0d:a3:b5:41:eb:0c:01:7d:6b:9f:b7:e2:f8: f8:06:b7:10:d4:ce:91:06:bd:74:78:3e:13:76:8d:05:dc:5f: 66:5c:b0:9a:a5:1a:f4:18:c7:8d:95:e2:a1:41:07:49:98:13: aa:56:53:7f:f4:04:ed:4c:23:c1:1f:b9:ab:13:91:18:b1:a7: e2:8f:02:d7:e8:7d:3c:31:c4:38:0c:21:24:57:5b:4b:fe:e0: be:a6:ad:f2:25:f3:ca:a7:fd:32:28:14:bb:c1:47:41:21:24: 9a:ad:b4:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlkOS02ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7R72MZPgBAaIsH5l26JgGy3vuLKYO0TZv97PB4hpn1QoM/JP3uIO1fQRyVQu jzxzXofi/LhsAGPmF00/elzA6fG2SWJdRcKXj1rI+qsgwuAlUl813U8n6XnLAJ2d SWwnj055kWYCPOJWghzGmGB3bvHG9zqO1azhcdJDuMo+4YbZ1xESr7mpmZfgfqf1 dGhO2+bavVe18hBBIaHsGQ2MLSg1eJwhZ3ziGOR7+5V7v4CQqHnuhwwP1kFjoBYN ozbJocXOmjLsDnpsT5ErPSvIzbVuS5RQD+OkPVg1fCKwZ3alIu3d25l/tE2O64Hq fqi0DXFyslWhvxqozR/+UUpQWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCjd1o/9 Qg3aFV1AElyLdYUSWlPCMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUQwM0FFMUFE Q0NGMTFFQ0E0MDFDRjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuOwwDQYJKoZIhvcNAQELBQADggEBAK1Z9/IpEEGN2gOi Ay12EQHLWfdriFJyjLylg5Efr2FV+S97XAG3LXdIY2Adl/yQIb63zrKssrHeaLY7 uurSfSDLCDMzozdmZSatpHE1JHNABVAobBTzRmruWFZmmYAZUycnPes2j50fOi4D adUeu901+ZdKM8Ksy4a+vNrPOea8TN6dX55VKAURRB3AQL0tPqa5Ab+eDaO1QesM AX1rn7fi+PgGtxDUzpEGvXR4PhN2jQXcX2ZcsJqlGvQYx42V4qFBB0mYE6pWU3/0 BO1MI8EfuasTkRixp+KPAtfofTwxxDgMISRXW0v+4L6mrfIl88qn/TIoFLvBR0Eh JJqttFY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org