$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa File: AE7F700021B611ECB5DADC4EC4F9AE02.roa (raw, json) Hash identifier: pj3qEtB+Ue6CslIxjtCqDwkfUR4Th0dvuu6EIPuwGUg= Subject key identifier: 1B:83:13:4D:0C:C0:65:CB:21:1C:F1:FE:16:F0:A0:75:3C:1C:25:CB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6FB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa Signing time: Wed 10 May 2023 16:40:03 +0000 ROA not before: Wed 10 May 2023 16:40:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 146900 IP address blocks: 103.173.206.0/23 maxlen: 24 2407:edc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28595 (0x6fb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:40:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc8e3-5ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:2a:90:9e:ea:30:97:91:f5:8f:75:b0:a6: 1e:ba:01:4a:1f:b7:1c:83:ca:30:b2:a9:9b:10:93: 9b:e6:f5:28:a5:34:49:f8:7a:cf:c0:d5:f5:f1:26: 81:41:fb:28:2e:9d:33:ce:e2:cf:fc:97:fc:2a:37: d8:25:dd:65:8e:9c:32:21:2b:47:74:92:f1:72:bb: 1c:43:5d:6a:ce:89:2f:5b:25:78:81:43:59:66:1a: ca:87:4a:90:cc:68:17:e3:67:6e:e5:37:78:00:7d: db:10:e5:71:9e:69:22:2d:a2:10:9b:45:35:93:bb: 9d:72:34:b3:c2:0c:5d:0f:68:08:ca:5f:ec:08:bb: 58:18:2e:24:38:1e:93:fc:e7:fe:1a:5e:fd:f4:f2: d1:24:c9:27:a8:c6:08:0b:57:5c:33:2c:68:40:36: 5b:43:58:3f:4f:0c:93:56:de:bf:13:e1:41:54:7c: 8f:1e:df:0e:f1:79:7c:df:95:b9:69:59:b8:90:96: 80:67:5f:47:5b:57:41:a3:56:3b:d7:8b:e4:52:7d: 39:29:b6:97:f2:12:39:1f:8e:4e:60:e1:68:12:68: 7b:10:ba:fd:94:5a:29:56:0b:44:33:50:20:4c:c8: fa:ee:6a:cd:db:32:a1:1e:a5:e3:1b:46:ec:91:5f: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:13:4D:0C:C0:65:CB:21:1C:F1:FE:16:F0:A0:75:3C:1C:25:CB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE7F700021B611ECB5DADC4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.206.0/23 IPv6: 2407:edc0::/32 Signature Algorithm: sha256WithRSAEncryption 85:9e:0e:4c:fb:0a:96:80:98:ab:5f:47:da:9e:3a:bb:e3:c7: 95:1e:a8:84:89:8e:88:be:12:49:71:11:ed:a7:19:7a:6e:d6: c7:be:85:7a:9a:f1:00:fc:13:06:a6:b7:87:20:fe:67:60:0e: b7:44:3d:cf:3d:d6:70:c5:91:2c:a6:6a:4b:66:8a:9e:07:f7: c8:fc:42:8c:5a:87:32:d5:36:c0:9b:a9:eb:8f:04:e3:23:89: f3:fa:23:35:c1:fc:87:f3:d2:33:b8:cf:c9:f6:2f:4e:74:d9: cd:70:9f:c2:06:c4:af:f4:8c:72:8e:bc:fb:64:3e:86:5f:ec: bf:de:97:31:34:56:d6:72:a4:78:6e:ec:7d:c8:cc:36:4a:dc: 37:66:c3:89:8f:95:5c:4e:e8:48:a5:12:ec:af:0e:3c:be:44: d2:a4:30:5c:e3:77:cd:f2:77:38:9f:57:40:45:76:0b:29:c9: d5:c0:7c:03:e0:9a:2f:88:ff:80:57:0a:34:fd:03:83:66:ac: 23:68:e5:65:1c:0d:70:aa:7a:26:a1:0b:ac:82:30:d4:b0:14: 9e:fd:a0:04:b3:18:10:de:34:03:1c:36:5b:26:40:fc:70:88: bc:29:7d:bd:51:c4:4f:ef:32:cb:a2:09:0b:72:a3:d2:20:3f: 0f:b2:f3:1f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICb7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MDAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzhlMy01ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncoqkJ7qMJeR9Y91sKYeugFKH7ccg8owsqmbEJOb5vUopTRJ+HrPwNX18SaB QfsoLp0zzuLP/Jf8KjfYJd1ljpwyIStHdJLxcrscQ11qzokvWyV4gUNZZhrKh0qQ zGgX42du5Td4AH3bEOVxnmkiLaIQm0U1k7udcjSzwgxdD2gIyl/sCLtYGC4kOB6T /Of+Gl799PLRJMknqMYIC1dcMyxoQDZbQ1g/TwyTVt6/E+FBVHyPHt8O8Xl835W5 aVm4kJaAZ19HW1dBo1Y714vkUn05KbaX8hI5H45OYOFoEmh7ELr9lFopVgtEM1Ag TMj67mrN2zKhHqXjG0bskV/RNQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBuDE00M wGXLIRzx/hbwoHU8HCXLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUU3RjcwMDAy MUI2MTFFQ0I1REFEQzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrc4wDQQCAAIwBwMFACQH7cAwDQYJKoZIhvcNAQELBQAD ggEBAIWeDkz7CpaAmKtfR9qeOrvjx5UeqISJjoi+EklxEe2nGXpu1se+hXqa8QD8 Ewamt4cg/mdgDrdEPc891nDFkSymaktmip4H98j8QoxahzLVNsCbqeuPBOMjifP6 IzXB/Ifz0jO4z8n2L0502c1wn8IGxK/0jHKOvPtkPoZf7L/elzE0VtZypHhu7H3I zDZK3Ddmw4mPlVxO6EilEuyvDjy+RNKkMFzjd83ydzifV0BFdgspydXAfAPgmi+I /4BXCjT9A4NmrCNo5WUcDXCqeiahC6yCMNSwFJ79oASzGBDeNAMcNlsmQPxwiLwp fb1RxE/vMsuiCQtyo9IgPw+y8x8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org