$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa File: AFE4E7C0085F11EB9D109A82C4F9AE02.roa (raw, json) Hash identifier: lAG7nZgybm/pdxj5uDVADoXav975/X+Nyy6RGfcJDKs= Subject key identifier: F2:60:65:87:1C:FB:F4:8C:D1:B3:26:6B:CF:0E:E5:D0:FF:49:42:A4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B3E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa Signing time: Wed 10 May 2023 16:18:43 +0000 ROA not before: Wed 10 May 2023 16:18:43 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134849 IP address blocks: 103.246.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27454 (0x6b3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:18:43 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3e2-7f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:87:74:22:13:98:8d:91:bb:49:6e:cb:b3: 55:12:ca:87:3d:9b:a0:67:72:3f:fc:bf:e0:69:a8: c0:be:f1:8b:fc:78:33:b3:af:ef:72:19:ba:56:27: 63:66:7d:7b:04:c2:b5:aa:ec:10:7c:f9:d0:f8:82: 0c:8d:a2:92:58:aa:b1:0e:96:42:fb:32:e4:26:f9: 1d:88:66:c7:da:b9:58:d1:e8:c0:d5:fb:45:cb:3c: f2:83:4d:3e:47:21:53:c0:d5:cc:bc:02:3f:cb:8e: 61:8a:7e:9b:8f:90:27:c4:fa:b5:6f:27:8c:4d:6f: 94:30:5a:f4:3b:c6:0e:57:b1:46:d1:a4:44:be:da: dd:35:09:ce:85:24:c1:93:eb:4b:dc:4d:45:65:eb: 3e:80:42:1a:26:81:49:5e:58:31:c6:5b:d3:16:c5: 20:8d:e2:3e:0e:6d:c0:e6:03:96:25:72:f3:bc:d0: c0:41:00:dd:77:88:ed:2e:e4:6f:98:ad:1a:41:06: 41:6b:69:34:70:b3:2e:a2:79:3e:5d:6b:78:8d:e0: f6:2f:fc:b8:4c:b9:7b:9a:22:58:9d:62:1d:92:37: 29:a7:32:41:8a:1a:7e:6f:27:38:16:b7:d9:b3:5f: f2:4c:ff:9e:d1:72:c6:a4:0e:e0:74:e8:de:40:be: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:60:65:87:1C:FB:F4:8C:D1:B3:26:6B:CF:0E:E5:D0:FF:49:42:A4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFE4E7C0085F11EB9D109A82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.187.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:96:1f:7b:ae:11:96:9a:ff:5d:60:75:29:c6:63:fd:eb:a5: cf:d9:25:28:23:6c:f8:45:2c:6e:a8:14:4d:9e:3f:6f:7f:e7: 2b:3f:fb:67:ab:35:46:8f:18:35:18:4c:91:11:35:19:69:17: 55:c7:b0:a3:63:0e:90:94:ac:00:87:c9:f0:20:e4:42:12:80: ac:89:d0:88:e6:f7:c7:70:b0:b5:ea:d5:95:a2:aa:34:73:d2: 13:f5:05:71:7b:ce:ab:0e:51:93:c9:24:8e:88:16:17:fc:37: 54:bf:8a:cc:63:04:05:27:91:a1:35:87:3a:82:43:ef:d8:bd: 58:ce:b3:85:45:97:f0:54:a3:44:66:ee:74:fa:65:cf:f3:5a: 5e:d1:08:88:37:bf:be:20:76:29:14:8d:2b:0c:00:9b:e8:f5: 7b:d7:72:7a:d0:a0:5e:52:e6:0f:bd:9d:a2:fe:3b:c8:1b:ad: 1d:25:96:eb:bf:90:51:6d:9a:ea:39:a2:83:ae:8b:b9:a9:bd: a8:53:74:81:7e:7b:28:88:36:b5:74:94:d4:ae:73:0b:33:f1: 9f:07:e3:f9:28:74:e7:38:83:dd:73:0c:46:11:d4:da:61:eb: a7:c3:97:34:c9:45:dd:30:75:77:bf:c4:84:9b:36:64:27:55: 2a:7c:1d:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxODQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNlMi03ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMyHdCITmI2Ru0luy7NVEsqHPZugZ3I//L/gaajAvvGL/Hgzs6/vchm6Vidj Zn17BMK1quwQfPnQ+IIMjaKSWKqxDpZC+zLkJvkdiGbH2rlY0ejA1ftFyzzyg00+ RyFTwNXMvAI/y45hin6bj5AnxPq1byeMTW+UMFr0O8YOV7FG0aREvtrdNQnOhSTB k+tL3E1FZes+gEIaJoFJXlgxxlvTFsUgjeI+Dm3A5gOWJXLzvNDAQQDdd4jtLuRv mK0aQQZBa2k0cLMuonk+XWt4jeD2L/y4TLl7miJYnWIdkjcppzJBihp+byc4FrfZ s1/yTP+e0XLGpA7gdOjeQL6khQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPJgZYcc +/SM0bMma88O5dD/SUKkMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUZFNEU3QzAw ODVGMTFFQjlEMTA5QTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn9rswDQYJKoZIhvcNAQELBQADggEBAAyWH3uuEZaa/11g dSnGY/3rpc/ZJSgjbPhFLG6oFE2eP29/5ys/+2erNUaPGDUYTJERNRlpF1XHsKNj DpCUrACHyfAg5EISgKyJ0Ijm98dwsLXq1ZWiqjRz0hP1BXF7zqsOUZPJJI6IFhf8 N1S/isxjBAUnkaE1hzqCQ+/YvVjOs4VFl/BUo0Rm7nT6Zc/zWl7RCIg3v74gdikU jSsMAJvo9XvXcnrQoF5S5g+9naL+O8gbrR0lluu/kFFtmuo5ooOui7mpvahTdIF+ eyiINrV0lNSucwsz8Z8H4/kodOc4g91zDEYR1Nph66fDlzTJRd0wdXe/xISbNmQn VSp8HaM= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:33 2024 by rpki-client on console-fra.rpki-client.org