$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa File: B0F45E9A2F7911EEAACBD155C4F9AE02.roa (raw, json) Hash identifier: +6/rYl5gzjlOTVXI+YjtFqzShGNPe9LQS0vSaneTRJI= Subject key identifier: 9E:9D:EE:65:96:01:91:6D:8E:C5:9C:08:F3:05:35:51:FC:19:EE:E4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 768A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa Signing time: Mon 31 Jul 2023 08:14:50 +0000 ROA not before: Mon 31 Jul 2023 08:14:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59170 IP address blocks: 45.113.76.0/22 maxlen: 22 45.113.76.0/24 maxlen: 24 45.113.77.0/24 maxlen: 24 45.113.78.0/24 maxlen: 24 45.113.79.0/24 maxlen: 24 103.52.224.0/22 maxlen: 22 103.52.224.0/24 maxlen: 24 103.52.225.0/24 maxlen: 24 103.52.226.0/24 maxlen: 24 103.52.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30346 (0x768a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 31 08:14:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64c76d7a-ec10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:39:b9:13:e8:49:25:64:9c:d3:a8:89:17:86: eb:f5:c1:e7:70:c5:a9:55:28:66:db:bb:2b:cd:4a: 0e:72:98:4b:48:cf:5f:e2:3c:f8:34:70:4d:08:94: 4e:e7:51:a5:08:cd:46:ce:dc:6d:9c:99:15:9e:22: a0:86:5e:70:84:54:41:4a:f9:ff:3a:b2:d5:e6:6d: 91:ac:99:7e:b2:6e:aa:56:47:b3:c8:b5:b9:a2:7b: 1b:94:7c:73:ec:b7:bd:c2:19:5e:eb:96:8a:f1:2a: 50:3d:41:14:5f:ba:5b:dd:23:10:da:5a:54:ec:b2: 90:f6:ba:b7:a9:46:ee:30:aa:f2:97:52:1c:a8:7d: 41:15:f5:24:e1:49:a0:c0:e9:85:3f:59:9b:d6:c2: f8:34:da:c4:3b:dd:af:10:d0:40:83:3b:e6:4d:54: 43:0f:98:75:8b:f6:00:56:78:e1:a0:8c:18:82:24: 57:46:84:7b:e0:c5:28:02:b0:92:0f:f7:f2:a3:08: c0:23:7a:f1:bf:1d:1e:98:ba:8a:54:9f:12:b6:f8: 13:e6:f0:77:d0:82:13:c3:cf:7a:2f:b6:35:63:a4: 91:ab:1c:0c:b8:9a:d0:22:18:41:a0:6e:4f:30:b2: fc:f0:53:ef:ca:77:2e:5b:b4:b6:8f:42:83:53:b1: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9D:EE:65:96:01:91:6D:8E:C5:9C:08:F3:05:35:51:FC:19:EE:E4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B0F45E9A2F7911EEAACBD155C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.76.0/22 103.52.224.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:e1:dd:bc:40:ad:e3:f9:44:60:35:09:fa:60:d7:48:15:31: fc:7c:7d:71:2d:df:1d:db:e0:8f:ce:3c:43:82:3b:f5:c0:89: da:82:f3:66:c5:61:22:3b:05:c1:48:01:6f:45:5b:a5:6f:31: 29:a6:27:a8:2b:ce:26:91:b0:30:c1:3c:97:64:68:d0:30:95: 03:20:54:9b:95:58:5d:f5:b5:87:90:02:8b:83:2a:d5:57:20: 29:38:1a:9a:8c:81:8e:0e:10:b2:df:1a:d1:e2:78:fd:cb:3e: d6:c9:1a:25:69:12:b1:56:82:9c:41:3a:ba:b0:94:37:8c:e4: 7c:7c:63:e0:f2:f1:ec:ac:68:34:4a:07:fe:d1:9c:f9:12:34: f5:31:2a:8f:3f:41:99:a8:3f:a2:19:ed:e3:18:09:30:03:92: fb:37:d9:cb:83:e2:88:c0:11:cb:27:fa:77:e9:c3:24:0c:ee: 6e:13:d2:0f:51:b8:95:12:b1:e7:8f:d1:01:28:2b:aa:7a:36: d3:29:ef:25:67:47:aa:a3:73:be:71:13:98:da:6f:9e:c2:51: 82:4a:12:06:4d:47:5f:b7:41:5c:7d:30:71:f9:45:2c:6e:dd: 6a:6e:8b:5d:3f:47:bf:b1:ac:aa:c4:1f:42:5a:ce:f5:48:0f: 63:29:e7:94 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICdoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzMxMDgxNDUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM3NmQ3YS1lYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Dm5E+hJJWSc06iJF4br9cHncMWpVShm27srzUoOcphLSM9f4jz4NHBNCJRO 51GlCM1GztxtnJkVniKghl5whFRBSvn/OrLV5m2RrJl+sm6qVkezyLW5onsblHxz 7Le9whle65aK8SpQPUEUX7pb3SMQ2lpU7LKQ9rq3qUbuMKryl1IcqH1BFfUk4Umg wOmFP1mb1sL4NNrEO92vENBAgzvmTVRDD5h1i/YAVnjhoIwYgiRXRoR74MUoArCS D/fyowjAI3rxvx0emLqKVJ8StvgT5vB30IITw896L7Y1Y6SRqxwMuJrQIhhBoG5P MLL88FPvyncuW7S2j0KDU7HDHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ6d7mWW AZFtjsWcCPMFNVH8Ge7kMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjBGNDVFOUEy Rjc5MTFFRUFBQ0JEMTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItcUwDBAJnNOAwDQYJKoZIhvcNAQELBQADggEBAF3h3bxA reP5RGA1Cfpg10gVMfx8fXEt3x3b4I/OPEOCO/XAidqC82bFYSI7BcFIAW9FW6Vv MSmmJ6grziaRsDDBPJdkaNAwlQMgVJuVWF31tYeQAouDKtVXICk4GpqMgY4OELLf GtHieP3LPtbJGiVpErFWgpxBOrqwlDeM5Hx8Y+Dy8eysaDRKB/7RnPkSNPUxKo8/ QZmoP6IZ7eMYCTADkvs32cuD4ojAEcsn+nfpwyQM7m4T0g9RuJUSseeP0QEoK6p6 NtMp7yVnR6qjc75xE5jab57CUYJKEgZNR1+3QVx9MHH5RSxu3Wpui10/R7+xrKrE H0JazvVID2Mp55Q= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org