$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6983658BDD711EA96C4CC31C4F9AE02.roa File: B6983658BDD711EA96C4CC31C4F9AE02.roa (raw, json) Hash identifier: YLOATPTFlW1ouefPYa385WA4RmCy+EKIcTiQh8wGcgs= Subject key identifier: A0:6A:F6:F3:44:E6:13:1C:40:9A:10:19:E4:28:72:FE:AD:88:65:0F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7174 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6983658BDD711EA96C4CC31C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:20 +0000 ROA not before: Wed 10 May 2023 16:48:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 32475 IP address blocks: 103.94.240.0/24 maxlen: 24 103.94.241.0/24 maxlen: 24 103.94.242.0/24 maxlen: 24 103.96.100.0/24 maxlen: 24 103.96.101.0/24 maxlen: 24 103.96.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29044 (0x7174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcad4-ef9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:7f:64:2c:12:ef:74:bc:14:95:03:28:46: 04:d7:5e:e8:ff:be:ac:0b:06:47:fd:e6:20:4c:16: 8b:7d:a4:64:78:31:5d:d5:98:35:ea:f9:56:1b:38: ad:06:58:82:d3:e4:82:ed:35:f5:b1:70:7a:6f:e1: 01:fa:b0:bd:d0:0f:eb:21:19:17:e4:8b:56:6c:c0: c1:3e:4c:a3:1a:75:7e:c1:77:d0:80:fc:f1:c3:76: f4:fc:46:5b:42:64:f8:ef:f4:19:66:2f:1a:4b:0d: 79:11:40:d1:b2:fc:65:26:80:33:a6:5d:a6:a1:1d: b0:c6:f1:c1:23:06:bc:55:98:1c:8c:fa:27:fc:68: 35:c2:54:ea:11:fd:c1:9b:c4:73:fa:54:b5:cc:c3: 86:0b:df:91:c3:e9:08:7a:fe:74:33:63:2a:97:11: 07:eb:a6:e3:c5:bf:7f:ca:e4:36:8c:d7:04:b5:48: 85:e8:3e:79:bc:a4:18:ab:d3:6f:fc:c8:c8:b2:ed: af:af:0a:1a:3e:f7:82:04:3f:f3:73:24:c3:cc:0f: cb:a7:e5:bf:19:3a:ba:d1:64:0c:a6:76:f3:1b:8c: cb:ed:a8:10:da:57:95:af:69:98:2d:f4:89:27:f9: 91:d7:37:96:f6:3a:78:84:11:de:2c:9a:3d:be:eb: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6A:F6:F3:44:E6:13:1C:40:9A:10:19:E4:28:72:FE:AD:88:65:0F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6983658BDD711EA96C4CC31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.240.0-103.94.242.255 103.96.100.0-103.96.102.255 Signature Algorithm: sha256WithRSAEncryption 3d:f4:a9:4d:3d:72:8a:b6:4a:4d:ff:dd:de:a2:e2:d8:7e:07: 99:1f:36:32:1d:ca:a2:b0:0a:de:38:c9:e6:5d:5e:06:8c:99: 6f:ac:32:d9:b1:d8:79:77:77:01:94:c8:1c:57:ef:d3:58:ab: e3:44:77:ca:ce:84:a7:5e:51:10:74:fe:1e:b7:22:66:20:ac: 3d:7a:2d:1e:f0:9a:57:03:73:29:cf:40:06:01:7c:0d:ce:d9: 80:ca:ab:8d:47:b5:b9:26:83:cc:59:78:8f:78:7a:d5:2e:77: ae:fc:42:cb:51:ec:e5:6f:19:ed:94:9d:ce:64:ae:92:d5:05: 56:29:36:9f:23:28:97:b6:19:25:a7:a2:92:96:67:a2:29:b9: 65:48:b4:51:5d:af:dd:6e:64:c8:77:68:35:25:b8:7b:71:3e: 4a:75:f1:5e:6e:52:99:5d:d9:49:eb:2a:9b:8a:cf:a5:fa:85: 5d:27:cd:2b:42:87:33:64:96:1b:6c:37:d4:ee:c9:88:75:c3: 7d:d1:bb:f4:0e:fb:6c:71:75:5e:54:e3:bd:f9:ec:6c:2f:96: 92:a6:2c:fb:ef:88:c6:9e:c0:17:aa:8a:27:6d:e1:33:3a:ca: 04:1b:60:b9:9a:fb:ec:40:4a:6d:86:21:3f:4f:bd:2a:fd:73: 51:4f:07:bb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FkNC1lZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/d/ZCwS73S8FJUDKEYE117o/76sCwZH/eYgTBaLfaRkeDFd1Zg16vlWGzit BliC0+SC7TX1sXB6b+EB+rC90A/rIRkX5ItWbMDBPkyjGnV+wXfQgPzxw3b0/EZb QmT47/QZZi8aSw15EUDRsvxlJoAzpl2moR2wxvHBIwa8VZgcjPon/Gg1wlTqEf3B m8Rz+lS1zMOGC9+Rw+kIev50M2MqlxEH66bjxb9/yuQ2jNcEtUiF6D55vKQYq9Nv /MjIsu2vrwoaPveCBD/zcyTDzA/Lp+W/GTq60WQMpnbzG4zL7agQ2leVr2mYLfSJ J/mR1zeW9jp4hBHeLJo9vut2+wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKBq9vNE 5hMcQJoQGeQocv6tiGUPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjY5ODM2NThC REQ3MTFFQTk2QzRDQzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEBGde8AMEAGde8jAMAwQCZ2BkAwQAZ2BmMA0GCSqGSIb3 DQEBCwUAA4IBAQA99KlNPXKKtkpN/93eouLYfgeZHzYyHcqisAreOMnmXV4GjJlv rDLZsdh5d3cBlMgcV+/TWKvjRHfKzoSnXlEQdP4etyJmIKw9ei0e8JpXA3Mpz0AG AXwNztmAyquNR7W5JoPMWXiPeHrVLneu/ELLUezlbxntlJ3OZK6S1QVWKTafIyiX thklp6KSlmeiKbllSLRRXa/dbmTId2g1Jbh7cT5KdfFeblKZXdlJ6yqbis+l+oVd J80rQoczZJYbbDfU7smIdcN90bv0DvtscXVeVOO9+exsL5aSpiz774jGnsAXqoon beEzOsoEG2C5mvvsQEpthiE/T70q/XNRTwe7 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org