$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa File: B75C7B8E688111EC89ED595FC4F9AE02.roa (raw, json) Hash identifier: iZAAxi9q4HLbLqwJzvHQAaNIG0Cm2S9HYZf6dQfVt6A= Subject key identifier: EE:9B:30:7B:75:B2:F9:FF:2C:2F:0A:9D:04:FB:25:B0:1C:53:12:F0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 701E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa Signing time: Wed 10 May 2023 16:42:03 +0000 ROA not before: Wed 10 May 2023 16:42:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149187 IP address blocks: 103.175.174.0/23 maxlen: 24 103.177.12.0/23 maxlen: 24 103.178.114.0/24 maxlen: 24 103.178.115.0/24 maxlen: 24 103.179.194.0/23 maxlen: 24 2400:4620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28702 (0x701e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc95b-5b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:56:40:08:2b:b2:65:5d:4c:c0:a9:6b:92: db:f5:8a:2c:ed:54:00:3b:65:a1:b4:c1:58:43:be: 9a:14:d0:77:1d:29:06:bb:16:f0:ee:75:1c:6e:e3: 38:a4:dd:de:0e:bc:be:16:03:12:43:e2:8d:1d:b5: fc:46:94:a5:09:a8:8b:52:bc:bf:07:a1:31:54:f1: d3:de:43:68:4a:01:dc:18:56:2f:b0:64:3d:8c:8d: cd:22:d5:92:40:8c:d1:d5:e6:81:45:91:3f:c5:05: 4a:08:c1:76:29:75:91:8b:46:84:86:2f:80:bb:59: ce:70:ae:b3:3c:87:61:a3:68:c2:40:fb:62:76:c9: 2e:aa:b4:ee:2a:d1:c4:93:5a:b3:bb:c4:ae:55:6c: 4a:89:59:08:f8:22:c8:22:cf:65:19:78:4f:1c:0b: de:4c:f1:63:95:52:4c:e0:25:d8:73:a3:cb:66:bd: ba:a7:db:90:e1:33:80:c6:7c:c3:1a:38:45:7d:eb: 84:4c:50:34:d1:23:c9:92:e3:0d:3e:d2:fa:82:3e: a1:22:71:cc:ad:86:c1:42:c1:bf:f7:16:4d:fe:21: cf:75:0c:c8:a4:e1:8e:16:8e:9d:07:85:6b:4a:12: a9:90:73:d5:87:e6:f6:aa:c7:6c:b7:91:ac:f9:b1: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9B:30:7B:75:B2:F9:FF:2C:2F:0A:9D:04:FB:25:B0:1C:53:12:F0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75C7B8E688111EC89ED595FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.174.0/23 103.177.12.0/23 103.178.114.0/23 103.179.194.0/23 IPv6: 2400:4620::/32 Signature Algorithm: sha256WithRSAEncryption 3b:94:40:39:75:c0:42:a3:eb:28:d4:3c:44:cd:5b:ca:e1:4a: cf:85:20:b1:83:60:91:79:ca:81:b4:48:79:ac:f6:97:75:bb: 84:f2:8c:0d:9a:60:d0:45:a3:f0:7c:1b:b7:73:01:df:0c:4e: 3f:19:d3:6e:ff:cc:8c:66:61:48:22:db:33:34:22:cd:40:05: 55:65:05:9b:0d:c3:78:fc:63:a3:db:46:d0:8a:42:38:02:08: 72:04:10:85:35:cb:9f:d2:f8:0a:2d:7a:bd:88:76:d7:8a:03: ea:cc:b8:49:c2:8d:19:e6:a3:fc:37:e0:4a:21:eb:b7:56:2e: ef:6a:9b:52:ea:ec:fb:b8:5b:ed:0e:6e:14:58:22:6f:43:ba: 75:a3:d6:5d:d4:2f:4c:f8:81:69:b7:61:e8:e2:bb:1e:86:09: 4f:26:6f:dd:04:36:5a:dc:af:31:72:58:8f:24:6e:5f:fa:1e: d4:90:34:5c:34:61:37:26:eb:ee:db:b1:ab:73:7b:dd:da:f8: b1:bb:40:4a:ad:94:d0:90:2e:94:73:af:fb:10:6a:68:98:7c: a6:2b:e5:a0:cd:fa:4b:bc:7b:13:70:01:9c:09:0a:36:37:af: 93:e0:a6:f2:6c:86:f0:2f:9f:42:8f:e8:30:98:9b:8e:40:9c: f2:ae:3c:ad -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICcB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk1Yi01YjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJRWQAgrsmVdTMCpa5Lb9Yos7VQAO2WhtMFYQ76aFNB3HSkGuxbw7nUcbuM4 pN3eDry+FgMSQ+KNHbX8RpSlCaiLUry/B6ExVPHT3kNoSgHcGFYvsGQ9jI3NItWS QIzR1eaBRZE/xQVKCMF2KXWRi0aEhi+Au1nOcK6zPIdho2jCQPtidskuqrTuKtHE k1qzu8SuVWxKiVkI+CLIIs9lGXhPHAveTPFjlVJM4CXYc6PLZr26p9uQ4TOAxnzD GjhFfeuETFA00SPJkuMNPtL6gj6hInHMrYbBQsG/9xZN/iHPdQzIpOGOFo6dB4Vr ShKpkHPVh+b2qsdst5Gs+bGlMQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFO6bMHt1 svn/LC8KnQT7JbAcUxLwMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjc1QzdCOEU2 ODgxMTFFQzg5RUQ1OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnr64DBAFnsQwDBAFnsnIDBAFns8IwDQQCAAIwBwMFACQA RiAwDQYJKoZIhvcNAQELBQADggEBADuUQDl1wEKj6yjUPETNW8rhSs+FILGDYJF5 yoG0SHms9pd1u4TyjA2aYNBFo/B8G7dzAd8MTj8Z027/zIxmYUgi2zM0Is1ABVVl BZsNw3j8Y6PbRtCKQjgCCHIEEIU1y5/S+Aoter2IdteKA+rMuEnCjRnmo/w34Eoh 67dWLu9qm1Lq7Pu4W+0ObhRYIm9DunWj1l3UL0z4gWm3Yejiux6GCU8mb90ENlrc rzFyWI8kbl/6HtSQNFw0YTcm6+7bsatze93a+LG7QEqtlNCQLpRzr/sQamiYfKYr 5aDN+ku8exNwAZwJCjY3r5PgpvJshvAvn0KP6DCYm45AnPKuPK0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org