$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa File: B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa (raw, json) Hash identifier: ixfyhgH/wgfJuhjvLojMS+nB7mlrSCew9/ZhhBYZDUE= Subject key identifier: 90:01:F8:4D:F5:57:C0:A6:7F:81:A8:AD:FB:90:3A:F4:30:EC:57:C3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 74AF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa Signing time: Fri 30 Jun 2023 11:31:46 +0000 ROA not before: Fri 30 Jun 2023 11:31:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138760 IP address blocks: 103.139.66.0/23 maxlen: 24 103.164.26.0/24 maxlen: 24 103.164.27.0/24 maxlen: 24 2001:df1:a780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29871 (0x74af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 30 11:31:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=649ebd22-6e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:b6:1c:71:23:ea:0b:d4:bf:64:51:0e:fe: 26:6f:35:44:6f:65:e5:d8:30:c7:09:d7:5d:8c:2f: 4c:c3:f7:d9:1e:ff:20:52:8f:2c:34:b6:61:b5:6f: 0d:57:90:35:c6:51:3a:02:9a:71:ba:97:36:21:7a: 09:66:82:e6:49:f0:99:d6:1b:d1:d3:49:b9:3c:e8: 9a:8c:c5:7d:77:d8:e5:13:1e:2e:90:af:da:26:87: d3:13:84:a1:ee:47:7c:b3:17:94:a4:3c:4a:1a:62: b6:c4:0f:8e:82:b9:3b:4a:a2:44:0f:e3:34:cf:a2: 1c:0d:5a:e8:21:be:99:2f:5a:61:bd:9a:3b:75:df: af:08:9e:f4:a3:63:9c:75:2f:2a:24:34:5d:73:7c: c3:c2:20:82:8a:87:8e:73:dd:4e:91:c3:9a:f1:dc: 6d:4d:2c:d7:c7:9a:16:c0:b9:d8:23:b3:3a:0a:40: f7:9a:31:c1:f0:88:cf:ec:82:91:48:7a:ca:b0:36: f6:32:5e:ed:96:91:78:8e:a2:86:12:c2:bc:0d:8a: 1c:6b:ff:dd:e0:3f:03:48:38:ef:8f:45:ee:a9:66: 09:d7:9c:5b:98:95:4d:50:dd:e6:7e:0c:6a:9c:07: 01:7b:12:be:a1:77:71:d5:a6:2e:25:a3:ce:2d:dd: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:F8:4D:F5:57:C0:A6:7F:81:A8:AD:FB:90:3A:F4:30:EC:57:C3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.66.0/23 103.164.26.0/23 IPv6: 2001:df1:a780::/48 Signature Algorithm: sha256WithRSAEncryption 70:41:38:17:e7:46:69:af:31:5f:12:c6:59:9c:63:26:47:f9: 7e:ac:a4:85:be:aa:2b:35:e6:8c:a9:c1:94:d4:40:d5:9e:8d: 04:d7:f2:64:fb:b1:a9:84:2d:9f:a0:2e:72:27:a5:12:3e:11: 5f:aa:83:93:0f:0b:79:0d:e9:6a:9e:05:1b:a4:06:d6:4f:57: 1d:4a:a9:82:aa:a2:3b:f4:b3:a3:e2:d5:ee:03:3e:fe:15:ec: 8a:52:a9:de:84:e1:9c:80:ff:fd:ae:97:d9:37:5c:2d:bb:c0: f6:d9:50:99:2e:24:1b:9e:9e:cb:4c:32:42:41:c0:57:ae:14: ad:83:1c:90:fc:ab:90:d4:53:da:5e:8f:4e:75:95:d9:de:ad: 03:a2:0c:6e:53:b7:1d:f1:11:e0:32:bf:b8:d0:fc:47:44:b5: 35:f7:75:1c:2e:cd:75:46:1f:b8:07:e6:1e:e6:36:bb:dd:17: ae:b6:78:4c:f5:a0:67:2e:65:47:26:35:e9:6b:62:54:3b:12: 3a:e5:9f:a4:c7:ab:da:28:b5:d4:c1:91:2b:5c:ae:64:9c:87: 5d:b0:66:44:73:4b:64:2d:08:8e:3e:8a:09:6d:1d:22:2f:75: ed:f7:35:e3:e0:dc:86:3c:cd:8d:ef:bc:b0:b7:38:a2:5d:d9: 2c:74:5d:43 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICdK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjMwMTEzMTQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDllYmQyMi02ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJq2HHEj6gvUv2RRDv4mbzVEb2Xl2DDHCdddjC9Mw/fZHv8gUo8sNLZhtW8N V5A1xlE6Appxupc2IXoJZoLmSfCZ1hvR00m5POiajMV9d9jlEx4ukK/aJofTE4Sh 7kd8sxeUpDxKGmK2xA+Ogrk7SqJED+M0z6IcDVroIb6ZL1phvZo7dd+vCJ70o2Oc dS8qJDRdc3zDwiCCioeOc91OkcOa8dxtTSzXx5oWwLnYI7M6CkD3mjHB8IjP7IKR SHrKsDb2Ml7tlpF4jqKGEsK8DYoca//d4D8DSDjvj0XuqWYJ15xbmJVNUN3mfgxq nAcBexK+oXdx1aYuJaPOLd1cwwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJAB+E31 V8Cmf4GorfuQOvQw7FfDMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjFDOEQ4Rjgx NzM5MTFFRUJDQTJERDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFni0IDBAFnpBowDwQCAAIwCQMHACABDfGngDANBgkqhkiG 9w0BAQsFAAOCAQEAcEE4F+dGaa8xXxLGWZxjJkf5fqykhb6qKzXmjKnBlNRA1Z6N BNfyZPuxqYQtn6AucielEj4RX6qDkw8LeQ3pap4FG6QG1k9XHUqpgqqiO/Szo+LV 7gM+/hXsilKp3oThnID//a6X2TdcLbvA9tlQmS4kG56ey0wyQkHAV64UrYMckPyr kNRT2l6PTnWV2d6tA6IMblO3HfER4DK/uND8R0S1Nfd1HC7NdUYfuAfmHuY2u90X rrZ4TPWgZy5lRyY16WtiVDsSOuWfpMer2ii11MGRK1yuZJyHXbBmRHNLZC0Ijj6K CW0dIi917fc14+DchjzNje+8sLc4ol3ZLHRdQw== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:33 2024 by rpki-client on console-fra.rpki-client.org