$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2886774DDB211ED93355C4FC4F9AE02.roa File: B2886774DDB211ED93355C4FC4F9AE02.roa (raw, json) Hash identifier: Knp613l39S7IO+sJ4Wpnj2jRFXQCOncSd/VPu7Cz75s= Subject key identifier: DA:FC:9E:52:D2:2F:7D:BC:86:02:D6:14:EF:60:5B:9F:48:D3:11:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7144 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2886774DDB211ED93355C4FC4F9AE02.roa Signing time: Wed 10 May 2023 16:47:25 +0000 ROA not before: Wed 10 May 2023 16:47:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151156 IP address blocks: 103.129.100.0/23 maxlen: 24 2001:df2:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28996 (0x7144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca9c-5322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:3c:40:0b:77:07:94:3d:00:c9:28:07:88: df:01:71:65:13:b7:cd:56:93:64:2b:11:c2:b7:d1: 01:05:a2:51:42:7d:83:14:63:54:0a:77:33:36:f3: ce:02:2d:da:65:01:3b:65:de:0c:51:ec:5b:ac:bd: cc:db:ea:2b:9d:45:75:81:7d:b3:46:bd:95:0e:a3: 4e:5c:6e:d5:98:e8:ec:a2:6c:68:51:ea:40:00:d1: 43:69:81:02:5f:0a:f4:5a:0b:a9:5c:f1:42:4c:1b: 1b:de:33:c5:e2:fc:2a:2b:04:b5:cc:2b:f8:ec:61: 71:85:65:97:a0:38:1b:2b:11:80:7b:e9:7e:9c:1e: a8:99:3d:a2:2c:1e:92:91:45:ae:a5:e8:bf:8c:3a: 6a:fe:90:c2:e3:c8:4a:bc:70:3a:9a:10:37:d7:d9: 45:f5:a4:2a:62:2d:24:80:c4:d3:df:60:57:da:34: c5:4c:c8:8e:34:ad:b5:e8:08:3b:67:d5:8b:07:14: 4a:71:3b:6b:d5:2e:40:4e:83:ce:fc:97:8a:f2:8a: 96:c4:90:f2:ce:b0:9d:c9:64:bd:20:73:b8:4e:ff: 4f:54:f9:1a:b6:ad:58:8e:fd:1d:78:94:4c:05:ac: ae:4c:07:34:e6:52:02:3e:f2:1c:bf:b4:fe:32:bb: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FC:9E:52:D2:2F:7D:BC:86:02:D6:14:EF:60:5B:9F:48:D3:11:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2886774DDB211ED93355C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.100.0/23 IPv6: 2001:df2:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 49:da:0f:0d:e1:ad:cd:10:d8:7e:92:f5:9a:ff:55:4e:21:1f: 48:9e:1b:92:a9:eb:08:a3:13:a6:78:b9:71:2a:d4:f6:4e:48: b6:e1:05:fb:64:3a:ac:2c:ac:50:9b:7f:14:95:43:36:9c:08: 77:1a:19:16:92:98:85:80:83:eb:60:90:08:49:7d:5f:65:5c: 60:e4:c0:07:b0:9f:0f:86:34:15:d0:ff:39:b2:24:11:2a:52: 2f:63:66:fd:86:7a:70:eb:df:49:48:a5:00:ff:bb:c9:fd:bc: 7f:21:6f:4d:68:bb:75:2a:e3:5e:72:bb:7e:93:36:d6:54:48: b2:1d:45:fe:d6:69:8f:7c:23:b8:1a:2e:89:57:37:f3:aa:87: bb:46:21:86:c9:3f:ff:19:3e:4b:99:01:4a:51:89:e6:df:3c: 31:af:6f:8c:ce:d5:a3:07:96:37:6b:bc:7b:7b:dc:af:35:17: 09:7f:fd:20:ae:d0:36:77:42:02:61:1e:13:7e:13:82:e8:25: 03:c0:b2:4c:37:ee:45:7a:b7:32:a0:23:ce:41:a7:a3:c1:ab: ec:45:8a:c0:3d:80:3c:bd:47:27:19:70:31:77:d7:32:06:a1: f9:e6:19:45:6f:a3:7b:5b:9b:ca:e4:25:bb:f8:52:f2:eb:3d: 7c:5f:df:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzI1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E5Yy01MzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWQ8QAt3B5Q9AMkoB4jfAXFlE7fNVpNkKxHCt9EBBaJRQn2DFGNUCnczNvPO Ai3aZQE7Zd4MUexbrL3M2+ornUV1gX2zRr2VDqNOXG7VmOjsomxoUepAANFDaYEC Xwr0WgupXPFCTBsb3jPF4vwqKwS1zCv47GFxhWWXoDgbKxGAe+l+nB6omT2iLB6S kUWupei/jDpq/pDC48hKvHA6mhA319lF9aQqYi0kgMTT32BX2jTFTMiONK216Ag7 Z9WLBxRKcTtr1S5AToPO/JeK8oqWxJDyzrCdyWS9IHO4Tv9PVPkatq1Yjv0deJRM BayuTAc05lICPvIcv7T+MrvCIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNr8nlLS L328hgLWFO9gW59I0xEgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjI4ODY3NzRE REIyMTFFRDkzMzU1QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFngWQwDwQCAAIwCQMHACABDfI5wDANBgkqhkiG9w0BAQsF AAOCAQEASdoPDeGtzRDYfpL1mv9VTiEfSJ4bkqnrCKMTpni5cSrU9k5ItuEF+2Q6 rCysUJt/FJVDNpwIdxoZFpKYhYCD62CQCEl9X2VcYOTAB7CfD4Y0FdD/ObIkESpS L2Nm/YZ6cOvfSUilAP+7yf28fyFvTWi7dSrjXnK7fpM21lRIsh1F/tZpj3wjuBou iVc386qHu0Yhhsk//xk+S5kBSlGJ5t88Ma9vjM7VoweWN2u8e3vcrzUXCX/9IK7Q NndCAmEeE34TguglA8CyTDfuRXq3MqAjzkGno8Gr7EWKwD2APL1HJxlwMXfXMgah +eYZRW+je1ubyuQlu/hS8us9fF/fBg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org