$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa File: B6D83712C4AA11ED98F4D369C4F9AE02.roa (raw, json) Hash identifier: AwInEAlOC+7zUREKcBEY+Hx1gVNUSF2RJvXepL4gxrQ= Subject key identifier: 15:D5:7A:B2:C5:38:34:14:C3:19:EF:48:5A:B2:80:0B:E4:19:31:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70B5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:49 +0000 ROA not before: Wed 10 May 2023 16:44:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150023 IP address blocks: 103.113.36.0/23 maxlen: 24 2001:df2:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28853 (0x70b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca01-fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:04:4c:a0:30:eb:67:04:f7:6e:e8:3f:91:4f: 48:b7:0a:33:95:77:bf:66:89:8d:1f:eb:99:27:53: 80:d6:df:ee:47:2f:2e:2a:b1:38:ea:fd:58:ec:81: 6e:bc:43:52:9d:f8:48:ea:68:80:23:4b:65:29:40: ab:85:b0:d9:73:8c:b8:13:82:20:05:08:5d:b0:ba: 84:9a:d5:e5:75:f9:e2:96:03:46:8d:36:2e:f7:51: 9e:3c:0e:09:4a:b5:90:da:eb:32:df:ec:1e:f4:18: 52:49:c3:8f:ed:c0:7f:9a:13:74:5d:b0:41:5b:f1: 5f:7f:8e:80:a8:6c:69:f9:4b:3b:c1:15:3c:09:95: fc:40:ac:64:1f:7c:60:cb:ed:ad:8d:ea:57:78:4b: fa:e7:59:07:6d:ba:16:c6:0e:09:22:51:39:f8:53: eb:54:28:cc:7f:0e:75:e5:59:41:7e:33:2d:25:a1: e9:5e:98:1a:79:0b:7d:7f:a8:1e:6b:7d:bf:01:86: 35:5b:25:3f:49:b9:99:ba:9e:5a:a1:0f:7d:17:40: cb:7a:48:84:af:e9:ce:8c:0f:13:70:85:7c:da:dd: 29:db:2e:c5:63:42:29:8b:ab:4d:ab:dc:8d:d8:52: 29:61:58:5f:98:2a:c4:11:a2:1d:e3:12:60:10:96: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D5:7A:B2:C5:38:34:14:C3:19:EF:48:5A:B2:80:0B:E4:19:31:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6D83712C4AA11ED98F4D369C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.36.0/23 IPv6: 2001:df2:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 96:22:e4:e7:5d:c2:9b:e0:c9:f1:26:82:e7:da:61:93:ca:c8: 10:61:ff:38:ec:7d:80:cf:ed:35:77:a8:96:9b:4d:03:98:30: 70:0c:2f:22:71:bf:47:e5:4d:1a:00:c1:db:23:da:3b:e5:38: b4:bd:a4:6b:5b:27:41:f1:31:5d:d7:46:b3:7b:d3:96:b9:fa: bd:32:36:9e:c3:64:57:90:cb:4f:69:d3:64:94:c3:4c:57:a4: f0:65:b8:e0:e4:da:1b:b0:e3:4a:30:5f:30:8a:bb:7b:22:f0: 96:9b:b4:3a:55:49:2b:72:45:88:de:2b:9e:4f:48:79:56:c1: e8:80:98:bb:a3:f5:3b:f4:53:12:56:da:f3:04:fb:ab:1e:ee: c6:2b:6b:1a:a1:7a:de:74:76:6f:dc:77:4e:cf:d0:8f:be:46: 3e:a8:57:42:da:c9:d0:d5:18:83:d7:7a:f8:4b:6a:97:ec:c4: ae:d3:bd:9d:c1:a3:5f:dd:b6:39:48:44:c2:86:55:16:ed:02: 74:b5:8d:3f:29:32:82:be:64:98:97:c7:29:4f:5e:dd:89:9f: 9a:d9:45:17:02:85:3a:3f:b3:5e:ce:e8:40:7b:75:9d:31:a2: e6:ee:7f:69:b3:20:83:dd:33:09:3b:d3:00:a1:39:6b:55:8f: c5:47:56:55 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2EwMS1mZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gRMoDDrZwT3bug/kU9ItwozlXe/ZomNH+uZJ1OA1t/uRy8uKrE46v1Y7IFu vENSnfhI6miAI0tlKUCrhbDZc4y4E4IgBQhdsLqEmtXldfnilgNGjTYu91GePA4J SrWQ2usy3+we9BhSScOP7cB/mhN0XbBBW/Fff46AqGxp+Us7wRU8CZX8QKxkH3xg y+2tjepXeEv651kHbboWxg4JIlE5+FPrVCjMfw515VlBfjMtJaHpXpgaeQt9f6ge a32/AYY1WyU/SbmZup5aoQ99F0DLekiEr+nOjA8TcIV82t0p2y7FY0Ipi6tNq9yN 2FIpYVhfmCrEEaId4xJgEJZp8QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBXVerLF ODQUwxnvSFqygAvkGTGgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjZEODM3MTJD NEFBMTFFRDk4RjREMzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFncSQwDwQCAAIwCQMHACABDfIdwDANBgkqhkiG9w0BAQsF AAOCAQEAliLk513Cm+DJ8SaC59phk8rIEGH/OOx9gM/tNXeolptNA5gwcAwvInG/ R+VNGgDB2yPaO+U4tL2ka1snQfExXddGs3vTlrn6vTI2nsNkV5DLT2nTZJTDTFek 8GW44OTaG7DjSjBfMIq7eyLwlpu0OlVJK3JFiN4rnk9IeVbB6ICYu6P1O/RTElba 8wT7qx7uxitrGqF63nR2b9x3Ts/Qj75GPqhXQtrJ0NUYg9d6+Etql+zErtO9ncGj X922OUhEwoZVFu0CdLWNPykygr5kmJfHKU9e3YmfmtlFFwKFOj+zXs7oQHt1nTGi 5u5/abMgg90zCTvTAKE5a1WPxUdWVQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org