$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa File: B581773824E311EC81167B44C4F9AE02.roa (raw, json) Hash identifier: t94RTn5sj4zjpAotgwMQWETv2yClUG++05UcBf+zaAg= Subject key identifier: 35:93:0E:0C:CC:82:3C:1E:75:00:EC:57:C6:C3:63:FD:27:FF:B5:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6AE6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa Signing time: Wed 10 May 2023 16:17:02 +0000 ROA not before: Wed 10 May 2023 16:17:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134012 IP address blocks: 103.58.96.0/22 maxlen: 24 2407:4ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27366 (0x6ae6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:17:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc37d-8bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:66:b7:be:e5:35:7e:25:53:6f:f9:b9:49: e6:08:70:58:59:c3:de:ea:02:a5:7a:bb:4f:7c:4d: 80:cf:6a:2d:43:b3:49:5b:24:83:67:be:86:4a:bd: 4e:4f:a8:38:b7:0b:32:c8:f5:63:1b:92:65:7e:5a: 67:fc:1d:f6:de:48:e6:82:e2:9d:fe:c2:33:18:eb: 4d:ee:d5:f9:30:e1:1e:f9:d6:e7:72:dd:fb:6c:8d: 37:00:e3:c7:74:32:29:12:42:3f:7f:79:73:47:cd: 36:3d:48:c7:bb:ea:6c:f6:e1:9d:8d:4f:1b:d0:db: 3f:da:92:f1:01:06:96:70:a8:29:64:b2:bd:69:0b: 6a:1d:2a:c6:d0:6b:ec:7b:6a:ee:8b:95:20:ca:12: 6b:a6:6c:1e:6e:25:e6:51:02:af:c9:c5:e8:07:73: 64:08:d6:36:fb:2a:07:bb:90:84:7c:80:99:e7:16: e8:d6:8d:86:5c:79:ad:3a:5a:93:4e:8c:38:8c:00: 60:1f:da:53:7a:6a:e4:c8:a1:25:c7:17:23:3f:ee: 6b:a5:b1:22:88:32:8d:68:f9:b6:63:9a:11:bf:4f: f9:50:7c:e7:74:a4:93:25:31:73:b8:f5:8e:ef:3e: e1:91:48:e2:69:a9:85:69:03:28:fe:17:70:a3:fe: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:93:0E:0C:CC:82:3C:1E:75:00:EC:57:C6:C3:63:FD:27:FF:B5:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B581773824E311EC81167B44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.96.0/22 IPv6: 2407:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:27:3e:63:da:c3:8a:0a:06:5f:0d:14:4e:9b:c7:cf:27:e4: 4f:84:e1:d7:9d:57:75:f2:4b:98:a9:19:c0:70:ba:d3:8b:f7: e6:05:3d:d3:0a:c8:6f:5d:fc:ec:7f:c4:f7:13:ca:cc:3c:05: e1:8d:e9:78:c2:0c:65:e9:0b:47:74:4d:af:89:18:5c:97:86: 0c:a4:cb:2e:ee:4d:d3:d0:22:24:b9:60:ab:02:f0:ce:2d:60: 52:18:11:03:a0:d6:db:09:d2:64:b8:4e:e3:03:79:d9:76:75: 5d:93:ab:91:8f:08:1b:4f:17:f1:b0:f8:59:f9:74:19:61:2a: dd:c7:36:ec:df:45:71:e6:a4:c3:f8:62:fc:c4:5d:1d:31:81: 9a:c6:6c:73:a9:af:90:97:15:34:2b:7e:d7:76:d0:be:66:20: 44:7e:fc:b6:c6:4a:68:63:fd:4e:a1:25:44:e7:ba:89:30:c8: 27:d5:c2:7b:0e:b7:3c:23:fe:10:9d:25:a2:37:80:c8:48:5b: 5d:e0:f7:a6:18:de:d9:5e:22:1d:46:15:d4:1b:10:38:37:19: 35:02:61:34:e5:1a:a4:f7:0a:1c:b5:13:9c:e7:46:a6:be:17: eb:a7:34:0b:e5:01:79:9f:7a:40:41:cb:a3:1c:29:92:96:ee: af:1f:57:6f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICauYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNzAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM3ZC04YmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqFmt77lNX4lU2/5uUnmCHBYWcPe6gKlertPfE2Az2otQ7NJWySDZ76GSr1O T6g4twsyyPVjG5Jlflpn/B323kjmguKd/sIzGOtN7tX5MOEe+dbnct37bI03AOPH dDIpEkI/f3lzR802PUjHu+ps9uGdjU8b0Ns/2pLxAQaWcKgpZLK9aQtqHSrG0Gvs e2rui5UgyhJrpmwebiXmUQKvycXoB3NkCNY2+yoHu5CEfICZ5xbo1o2GXHmtOlqT Tow4jABgH9pTemrkyKElxxcjP+5rpbEiiDKNaPm2Y5oRv0/5UHzndKSTJTFzuPWO 7z7hkUjiaamFaQMo/hdwo/7DiQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDWTDgzM gjwedQDsV8bDY/0n/7XhMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjU4MTc3Mzgy NEUzMTFFQzgxMTY3QjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnOmAwDQQCAAIwBwMFACQHTsAwDQYJKoZIhvcNAQELBQAD ggEBAFwnPmPaw4oKBl8NFE6bx88n5E+E4dedV3XyS5ipGcBwutOL9+YFPdMKyG9d /Ox/xPcTysw8BeGN6XjCDGXpC0d0Ta+JGFyXhgykyy7uTdPQIiS5YKsC8M4tYFIY EQOg1tsJ0mS4TuMDedl2dV2Tq5GPCBtPF/Gw+Fn5dBlhKt3HNuzfRXHmpMP4YvzE XR0xgZrGbHOpr5CXFTQrftd20L5mIER+/LbGSmhj/U6hJUTnuokwyCfVwnsOtzwj /hCdJaI3gMhIW13g96YY3tleIh1GFdQbEDg3GTUCYTTlGqT3Chy1E5znRqa+F+un NAvlAXmfekBBy6McKZKW7q8fV28= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org