$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa File: B58B40A2404A11EBA10D3C57C4F9AE02.roa (raw, json) Hash identifier: UbwcfhfK2sVoWTFiI0E3fNdhutoN/va9Wd7KDflZ1RA= Subject key identifier: 28:78:0B:50:43:53:69:51:9B:6F:34:6D:30:D7:49:4A:AD:C3:C5:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EA1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa Signing time: Wed 10 May 2023 16:34:56 +0000 ROA not before: Wed 10 May 2023 16:34:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141335 IP address blocks: 103.160.98.0/23 maxlen: 24 2001:df5:9b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28321 (0x6ea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7b0-44cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:b1:ba:ab:b5:d3:6a:c0:d5:d6:1c:f6:04: b2:d4:a1:89:4f:df:53:80:7d:82:c6:3b:b2:bf:d2: ca:60:be:12:c8:c8:37:54:fc:d3:e4:ac:ce:91:34: c8:cc:b8:a3:fb:bb:e8:6d:66:e8:50:9b:01:93:d0: 4b:8f:d2:1a:8f:cb:5d:92:1a:0a:0f:4c:b2:67:bb: 05:15:63:61:32:f0:57:ba:68:95:7a:f5:ca:81:07: 1d:6a:c2:83:00:5a:fc:fa:7d:76:9d:e9:5e:8b:b9: 1d:a0:43:38:97:b4:89:eb:2f:1e:df:8b:74:b1:4b: f5:e1:16:71:98:a7:0a:86:57:f2:bb:4d:90:d2:42: 71:40:b1:11:6a:08:b2:48:9e:ca:60:07:8f:15:68: b2:dd:80:03:15:27:5e:b3:93:90:6d:5c:c3:8d:b3: 81:b3:01:cb:d9:98:ec:b0:6c:3d:ff:6f:1e:71:a9: 2f:54:26:c9:ff:15:e7:b7:8e:24:47:97:2f:4f:a5: 0f:4c:61:25:4e:51:86:14:1b:e3:95:14:ed:0f:26: 7f:08:26:27:c6:6b:23:c3:da:48:ff:68:85:77:c4: 63:f6:2f:61:b8:02:10:03:50:b9:39:cd:ef:c4:53: 35:71:dd:73:fa:16:af:b1:e1:52:a1:7f:53:db:14: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:78:0B:50:43:53:69:51:9B:6F:34:6D:30:D7:49:4A:AD:C3:C5:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58B40A2404A11EBA10D3C57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.98.0/23 IPv6: 2001:df5:9b80::/48 Signature Algorithm: sha256WithRSAEncryption 4f:1c:da:4a:3c:a8:1f:4f:0b:d4:b0:2f:f3:52:c8:53:fe:23: 05:c7:09:cf:f2:08:9a:b7:14:9c:03:72:c4:8b:32:c8:d6:b7: 36:d1:2d:29:38:11:83:ad:2f:80:97:0c:8d:ba:62:1e:ac:77: 0e:be:bc:9d:c7:0e:62:4d:de:04:e4:e0:d0:ec:15:8a:0c:0e: 73:a0:8e:bd:a0:16:e6:c2:79:94:47:e7:27:c6:7d:f7:ce:29: 6d:96:fd:2f:76:b9:59:ea:0f:03:3d:80:4c:d6:83:18:2f:67: d4:35:e9:79:89:14:e2:1d:66:d8:86:08:ed:45:20:60:69:3d: 87:4a:3d:45:ad:fb:7c:0c:d5:89:27:84:ed:c6:be:e8:90:79: d4:74:1e:49:0a:fc:fb:b5:4c:85:84:a2:8e:90:88:72:24:35: c9:3c:41:03:14:7b:c0:3d:b8:95:d2:d6:38:74:2d:65:7f:3d: e4:20:f7:5c:9e:12:08:1d:91:24:60:c1:8a:1b:83:7f:0d:cb: af:56:1d:5e:57:63:bc:6a:b6:ef:20:04:82:17:1c:d6:59:e3: 12:62:f4:03:cd:67:2c:2e:92:f4:6e:69:08:4f:8b:0b:47:6c: 56:17:c2:2b:00:61:53:6e:c8:3c:45:22:e2:63:6e:09:ce:2a: 91:17:d8:81 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdiMC00NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQSxuqu102rA1dYc9gSy1KGJT99TgH2Cxjuyv9LKYL4SyMg3VPzT5KzOkTTI zLij+7vobWboUJsBk9BLj9Iaj8tdkhoKD0yyZ7sFFWNhMvBXumiVevXKgQcdasKD AFr8+n12nelei7kdoEM4l7SJ6y8e34t0sUv14RZxmKcKhlfyu02Q0kJxQLERagiy SJ7KYAePFWiy3YADFSdes5OQbVzDjbOBswHL2ZjssGw9/28ecakvVCbJ/xXnt44k R5cvT6UPTGElTlGGFBvjlRTtDyZ/CCYnxmsjw9pI/2iFd8Rj9i9huAIQA1C5Oc3v xFM1cd1z+havseFSoX9T2xTg9wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCh4C1BD U2lRm280bTDXSUqtw8WxMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjU4QjQwQTI0 MDRBMTFFQkExMEQzQzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoGIwDwQCAAIwCQMHACABDfWbgDANBgkqhkiG9w0BAQsF AAOCAQEATxzaSjyoH08L1LAv81LIU/4jBccJz/IImrcUnANyxIsyyNa3NtEtKTgR g60vgJcMjbpiHqx3Dr68nccOYk3eBOTg0OwVigwOc6COvaAW5sJ5lEfnJ8Z9984p bZb9L3a5WeoPAz2ATNaDGC9n1DXpeYkU4h1m2IYI7UUgYGk9h0o9Ra37fAzViSeE 7ca+6JB51HQeSQr8+7VMhYSijpCIciQ1yTxBAxR7wD24ldLWOHQtZX895CD3XJ4S CB2RJGDBihuDfw3Lr1YdXldjvGq27yAEghcc1lnjEmL0A81nLC6S9G5pCE+LC0ds VhfCKwBhU27IPEUi4mNuCc4qkRfYgQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org