$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa File: AF0E42C6085811EBA9F0A16AC4F9AE02.roa (raw, json) Hash identifier: FGIoGRIHOZHZcCCb0Ug02mniEz46M2a4aaBCUowttdY= Subject key identifier: F2:59:94:CA:00:22:87:20:56:69:9D:C1:74:6C:5A:94:AE:7B:33:A4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BA9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa Signing time: Wed 10 May 2023 16:20:46 +0000 ROA not before: Wed 10 May 2023 16:20:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135234 IP address blocks: 103.66.48.0/22 maxlen: 24 103.171.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27561 (0x6ba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc45e-e0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:af:55:6b:db:b6:df:81:ca:ab:fa:66:84: 12:12:33:f0:82:9f:94:1c:bc:91:e6:7b:98:cb:70: 05:c4:61:d2:d2:84:05:79:c5:0a:b7:79:ba:10:3c: a6:39:7e:8d:65:eb:11:2c:0b:ee:56:65:90:81:52: 8e:66:b2:14:ab:ce:05:2c:67:c1:18:60:e0:f2:c3: 4f:a7:b3:8f:ff:ce:40:9f:67:24:45:b3:d9:45:63: c2:50:ee:b1:ca:b3:fa:46:23:97:66:7d:3c:68:59: 8a:8c:f2:0c:f5:b6:c9:84:06:32:22:d8:73:f6:18: 02:9e:1c:89:8c:c6:95:50:ea:d6:f2:83:d8:d8:f0: b3:51:eb:1d:1f:18:c0:7e:9b:d1:e4:0a:50:32:5b: 9f:32:9b:7a:4f:4b:21:24:cc:90:18:cc:ca:8a:41: 65:d9:8d:56:77:2d:f1:27:9a:5d:38:87:fd:ec:9b: 39:09:4e:96:2a:f3:9f:53:ef:72:ba:b2:7e:4b:c2: 18:03:de:3e:02:c0:aa:6e:63:89:7d:61:65:b0:23: 42:39:89:17:e1:3d:e1:8a:86:f0:4a:94:9b:78:17: 26:57:e4:0b:fa:6f:0c:cc:0f:a6:e8:e3:88:e2:d5: 2b:f6:d1:2d:d7:01:76:7f:f7:82:b5:47:71:e8:ae: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:59:94:CA:00:22:87:20:56:69:9D:C1:74:6C:5A:94:AE:7B:33:A4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF0E42C6085811EBA9F0A16AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.48.0/22 103.171.48.0/23 Signature Algorithm: sha256WithRSAEncryption b4:08:03:44:ea:17:fc:a4:1c:b5:04:97:80:84:b9:27:7f:ca: a4:e2:a8:77:9b:df:9b:7d:d4:88:e1:92:3b:91:a9:ac:1c:19: 1a:41:8e:f6:d0:07:8b:03:f9:5a:70:5b:c9:00:c7:82:b6:ea: 19:fc:02:49:18:8e:7a:94:e5:75:7b:d9:e7:a5:5c:69:5e:80: 34:23:73:29:03:e6:8b:02:e4:db:2a:a4:4f:96:a4:66:1a:56: 47:9f:a9:63:15:01:d8:36:1a:46:16:d4:a4:be:90:67:8f:65: d8:50:64:a3:6d:a1:05:0b:9a:5b:29:ba:c9:75:58:a4:b7:44: 03:19:02:6f:25:22:28:8c:1b:65:1e:92:1f:5b:19:9c:21:23: d3:2d:e1:e1:b1:c1:97:32:ab:78:52:36:69:97:7e:db:a2:cf: 9d:de:4f:b8:5a:66:6f:36:99:ee:9e:17:6c:38:e7:51:b9:3c: e3:e8:49:61:ee:b7:c7:0f:cc:eb:9b:8a:59:08:c9:9d:a6:4f: 6a:45:7f:28:ae:2f:aa:b5:cc:2a:3a:48:61:3d:ff:5f:fa:cd: d6:0c:fa:83:08:2a:16:09:7f:b3:e1:16:b2:43:04:37:d9:18: 82:4c:ce:61:db:76:68:f7:2d:29:7c:01:c5:d9:47:00:be:80: 9f:62:f3:49 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ1ZS1lMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh6vVWvbtt+Byqv6ZoQSEjPwgp+UHLyR5nuYy3AFxGHS0oQFecUKt3m6EDym OX6NZesRLAvuVmWQgVKOZrIUq84FLGfBGGDg8sNPp7OP/85An2ckRbPZRWPCUO6x yrP6RiOXZn08aFmKjPIM9bbJhAYyIthz9hgCnhyJjMaVUOrW8oPY2PCzUesdHxjA fpvR5ApQMlufMpt6T0shJMyQGMzKikFl2Y1Wdy3xJ5pdOIf97Js5CU6WKvOfU+9y urJ+S8IYA94+AsCqbmOJfWFlsCNCOYkX4T3hiobwSpSbeBcmV+QL+m8MzA+m6OOI 4tUr9tEt1wF2f/eCtUdx6K6aJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPJZlMoA IocgVmmdwXRsWpSuezOkMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUYwRTQyQzYw ODU4MTFFQkE5RjBBMTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnQjADBAFnqzAwDQYJKoZIhvcNAQELBQADggEBALQIA0Tq F/ykHLUEl4CEuSd/yqTiqHeb35t91IjhkjuRqawcGRpBjvbQB4sD+VpwW8kAx4K2 6hn8AkkYjnqU5XV72eelXGlegDQjcykD5osC5NsqpE+WpGYaVkefqWMVAdg2GkYW 1KS+kGePZdhQZKNtoQULmlspusl1WKS3RAMZAm8lIiiMG2Uekh9bGZwhI9Mt4eGx wZcyq3hSNmmXftuiz53eT7haZm82me6eF2w451G5POPoSWHut8cPzOubilkIyZ2m T2pFfyiuL6q1zCo6SGE9/1/6zdYM+oMIKhYJf7PhFrJDBDfZGIJMzmHbdmj3LSl8 AcXZRwC+gJ9i80k= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org