$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE3D46AE226F11EBA0973F7FC4F9AE02.roa File: AE3D46AE226F11EBA0973F7FC4F9AE02.roa (raw, json) Hash identifier: 1f7n/jHebQ/EFxu48lK7hqJi+bNEuKki/iJL4lRERTE= Subject key identifier: CE:88:66:1C:67:89:13:DF:CA:C2:91:51:4A:17:29:82:1F:F1:4F:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A30 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE3D46AE226F11EBA0973F7FC4F9AE02.roa Signing time: Wed 10 May 2023 16:13:32 +0000 ROA not before: Wed 10 May 2023 16:13:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132957 IP address blocks: 103.242.184.0/22 maxlen: 24 163.53.72.0/22 maxlen: 24 2001:df7:9200::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27184 (0x6a30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2ac-eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:2c:c5:b6:62:d3:9b:b6:14:73:10:09:21: 0d:c8:7e:52:16:28:95:ef:93:17:02:a0:73:cc:79: b2:2f:da:86:4e:2c:14:b5:6d:b7:c8:0e:47:b9:44: c7:02:62:af:f2:03:e6:bb:41:21:6a:35:00:70:1c: f3:ab:80:77:48:91:98:61:c4:ca:86:c5:9e:4b:45: bf:05:b4:ab:ce:ac:6c:9e:31:b9:4c:84:c5:73:f4: 92:99:20:0a:60:68:6e:e2:ff:93:6b:d0:54:be:83: 48:37:d9:38:92:5a:09:e2:07:56:3f:ea:67:49:bc: 9c:65:d9:40:f8:f9:88:3e:4a:77:d9:f3:d9:47:89: c3:9e:76:c4:ff:28:0c:29:44:9b:95:0e:ea:c9:28: 5e:94:6b:aa:6e:74:48:ed:27:d5:56:1d:99:ab:fd: c3:eb:f1:c2:5b:ff:5f:83:29:d9:c9:17:2e:b8:32: a3:16:e1:de:5e:09:92:aa:26:b1:a5:bf:80:37:ed: fc:3c:50:1b:48:5b:76:65:3c:04:45:df:97:56:d2: 9f:3a:74:e1:45:30:9f:0b:94:13:1b:73:d2:26:bc: 35:66:8f:91:40:64:72:9e:44:95:19:21:b7:65:71: 30:49:e8:1c:48:39:a0:3e:34:78:d6:e5:31:f2:69: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:66:1C:67:89:13:DF:CA:C2:91:51:4A:17:29:82:1F:F1:4F:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE3D46AE226F11EBA0973F7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.184.0/22 163.53.72.0/22 IPv6: 2001:df7:9200::/43 Signature Algorithm: sha256WithRSAEncryption 55:f1:e8:08:ea:6e:2a:28:0c:91:2a:0d:2a:a3:dd:fd:90:36: 9b:75:12:4f:11:18:81:82:0f:9e:a1:16:08:c3:d3:79:71:c5: 35:e4:33:09:11:b3:22:c8:6a:49:a1:5b:66:b3:d3:57:e4:b7: 41:a6:f4:b6:bf:bf:c6:b7:84:45:1f:5c:3a:05:09:0e:5a:8b: 4d:3a:43:31:c0:57:bf:04:53:d4:2e:24:5d:59:9a:a0:9c:62: c2:b0:88:8e:92:39:ec:25:25:62:9d:51:6b:39:5f:fa:23:84: ae:75:e0:82:a4:d2:43:30:80:96:aa:f2:88:77:ca:c2:3e:72: c0:62:c0:97:10:e8:7e:e7:73:24:60:d3:0d:b8:86:b7:ba:16: 07:cc:c0:1a:e2:f0:8d:60:07:a3:40:75:3c:77:8c:ab:6c:70: 98:ff:eb:b1:24:ea:fd:fe:ea:3c:cf:fb:e2:85:b7:21:33:e4: eb:a6:61:39:41:94:7e:bd:5a:7b:4f:c0:15:e5:fe:02:93:10: f4:1d:93:5e:71:aa:b6:6a:25:83:35:af:eb:eb:ad:77:a5:75: 48:26:49:3f:31:4f:bf:e2:15:ae:b1:66:30:6a:1a:af:aa:52: 2b:ee:27:37:64:c4:28:c5:60:1c:d0:4c:5c:bf:28:df:9e:e9: 1f:fd:c5:59 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICajAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJhYy1lZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrcsxbZi05u2FHMQCSENyH5SFiiV75MXAqBzzHmyL9qGTiwUtW23yA5HuUTH AmKv8gPmu0EhajUAcBzzq4B3SJGYYcTKhsWeS0W/BbSrzqxsnjG5TITFc/SSmSAK YGhu4v+Ta9BUvoNIN9k4kloJ4gdWP+pnSbycZdlA+PmIPkp32fPZR4nDnnbE/ygM KUSblQ7qyShelGuqbnRI7SfVVh2Zq/3D6/HCW/9fgynZyRcuuDKjFuHeXgmSqiax pb+AN+38PFAbSFt2ZTwERd+XVtKfOnThRTCfC5QTG3PSJrw1Zo+RQGRynkSVGSG3 ZXEwSegcSDmgPjR41uUx8mn3+wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFM6IZhxn iRPfysKRUUoXKYIf8U9SMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUUzRDQ2QUUy MjZGMTFFQkEwOTczRjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJn8rgDBAKjNUgwDwQCAAIwCQMHBSABDfeSADANBgkqhkiG 9w0BAQsFAAOCAQEAVfHoCOpuKigMkSoNKqPd/ZA2m3USTxEYgYIPnqEWCMPTeXHF NeQzCRGzIshqSaFbZrPTV+S3Qab0tr+/xreERR9cOgUJDlqLTTpDMcBXvwRT1C4k XVmaoJxiwrCIjpI57CUlYp1Razlf+iOErnXggqTSQzCAlqryiHfKwj5ywGLAlxDo fudzJGDTDbiGt7oWB8zAGuLwjWAHo0B1PHeMq2xwmP/rsSTq/f7qPM/74oW3ITPk 66ZhOUGUfr1ae0/AFeX+ApMQ9B2TXnGqtmolgzWv6+utd6V1SCZJPzFPv+IVrrFm MGoar6pSK+4nN2TEKMVgHNBMXL8o357pH/3FWQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org