$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa File: B301869A276011EC9237AB73C4F9AE02.roa (raw, json) Hash identifier: 2JAtgSLg6awR1mbs3+CRAGa8aLZlqW6BnSbxm1F84Gk= Subject key identifier: B7:17:FA:ED:4B:53:5C:99:FC:5E:5C:F2:8F:E1:03:23:95:9F:0E:C5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AD1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa Signing time: Wed 10 May 2023 16:16:38 +0000 ROA not before: Wed 10 May 2023 16:16:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133977 IP address blocks: 123.253.12.0/24 maxlen: 24 123.253.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27345 (0x6ad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:16:38 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc366-d56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:07:de:43:9b:a0:16:15:b0:21:26:76:2c: 62:16:bf:da:fc:98:a4:a4:60:0f:13:85:17:09:88: 81:bb:1d:0a:08:b2:8b:d8:c9:31:c6:5d:19:e9:d3: f6:ba:07:db:7b:91:7f:51:63:09:97:12:16:22:e9: 83:d4:f7:fb:ef:f0:d9:c1:2d:50:b5:49:b9:e9:fd: 28:97:c5:77:36:d9:6a:2f:87:d8:05:ce:7a:f8:ee: 37:e0:94:e8:50:2c:96:69:8d:4b:aa:b4:ab:47:fa: d7:6a:7e:2d:79:ff:82:6b:7a:2f:bc:c6:8b:73:6a: 0c:69:74:ef:3d:b8:a9:96:27:49:8d:ae:a8:f4:d9: 1f:41:98:eb:cc:cc:1d:90:e2:1e:ff:5c:f6:27:1d: d3:ed:ff:ce:5e:5d:f3:a0:7e:af:eb:14:8f:ea:58: 16:15:6e:e3:36:f3:8f:2f:b9:9f:db:e2:87:6f:ac: d7:af:0f:09:1d:21:ce:db:5d:f2:fb:0f:a7:08:63: 6a:9c:c9:fa:aa:1c:31:d8:d4:8f:f8:3f:28:83:68: a2:4d:ac:29:a1:34:6d:5f:9e:32:a5:06:b7:5c:67: 34:c3:de:96:ed:0d:f0:2f:85:b1:46:f6:a8:20:e7: c5:ee:44:46:be:f0:c1:ef:df:c6:d1:ad:c9:e2:d9: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:17:FA:ED:4B:53:5C:99:FC:5E:5C:F2:8F:E1:03:23:95:9F:0E:C5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.12.0/24 123.253.15.0/24 Signature Algorithm: sha256WithRSAEncryption 77:2b:62:4c:d2:40:6e:1f:38:eb:e3:30:c1:cf:3b:1d:de:e7: f3:d7:66:fb:82:84:ad:79:af:41:df:57:6f:e9:22:83:0b:88: df:3a:12:46:a8:90:70:ca:d0:dd:d8:97:50:18:43:3d:df:aa: 50:bc:e2:fe:c5:78:6b:1f:dc:3b:d4:09:46:54:25:a8:ae:3d: 9e:56:19:e0:bd:25:6a:cd:f2:3d:93:57:f9:a9:f5:ac:a3:2f: 07:76:de:0d:38:a3:11:e5:0e:87:99:fe:9d:84:6b:b7:46:e4: 37:f2:8b:d0:d5:0b:07:67:2a:90:79:93:16:14:f3:b0:b1:8a: 73:61:d5:d0:15:ed:e6:06:73:50:fa:c1:c2:71:f5:ef:80:db: aa:62:e5:fc:22:13:9b:4a:d2:1b:be:8b:7d:9f:b1:b6:68:50: 32:23:5a:0d:3a:8b:3d:5e:83:b2:b9:99:06:56:b4:07:6d:f5: 02:2b:f6:ad:8f:5e:5d:3a:2a:57:45:34:65:8f:fd:b1:3f:5b: 7a:c5:bb:5a:99:20:72:4d:5a:51:27:98:08:fa:ae:3a:30:8d: f7:6e:ae:4d:05:d9:10:63:bd:a3:bc:22:b5:ad:18:f5:ae:0f: bc:95:76:6f:d7:ef:4a:59:0b:4e:9c:0e:b7:4d:68:5a:81:d7: d8:23:65:e2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICatEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM2Ni1kNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBIH3kOboBYVsCEmdixiFr/a/JikpGAPE4UXCYiBux0KCLKL2Mkxxl0Z6dP2 ugfbe5F/UWMJlxIWIumD1Pf77/DZwS1QtUm56f0ol8V3NtlqL4fYBc56+O434JTo UCyWaY1LqrSrR/rXan4tef+Ca3ovvMaLc2oMaXTvPbiplidJja6o9NkfQZjrzMwd kOIe/1z2Jx3T7f/OXl3zoH6v6xSP6lgWFW7jNvOPL7mf2+KHb6zXrw8JHSHO213y +w+nCGNqnMn6qhwx2NSP+D8og2iiTawpoTRtX54ypQa3XGc0w96W7Q3wL4WxRvao IOfF7kRGvvDB79/G0a3J4tnwFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLcX+u1L U1yZ/F5c8o/hAyOVnw7FMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjMwMTg2OUEy NzYwMTFFQzkyMzdBQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB7/QwDBAB7/Q8wDQYJKoZIhvcNAQELBQADggEBAHcrYkzS QG4fOOvjMMHPOx3e5/PXZvuChK15r0HfV2/pIoMLiN86EkaokHDK0N3Yl1AYQz3f qlC84v7FeGsf3DvUCUZUJaiuPZ5WGeC9JWrN8j2TV/mp9ayjLwd23g04oxHlDoeZ /p2Ea7dG5Dfyi9DVCwdnKpB5kxYU87CxinNh1dAV7eYGc1D6wcJx9e+A26pi5fwi E5tK0hu+i32fsbZoUDIjWg06iz1eg7K5mQZWtAdt9QIr9q2PXl06KldFNGWP/bE/ W3rFu1qZIHJNWlEnmAj6rjowjfdurk0F2RBjvaO8IrWtGPWuD7yVdm/X70pZC06c DrdNaFqB19gjZeI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org