$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B86E986A03E911EC93A92E17C4F9AE02.roa File: B86E986A03E911EC93A92E17C4F9AE02.roa (raw, json) Hash identifier: 29w/6o/LC0CI0lXZ/6MBY2geYwfJvbMvNs270ukAocg= Subject key identifier: F8:0D:0D:82:31:2F:9E:23:21:94:9E:D1:E8:3A:4A:7E:B7:3C:A2:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71CC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B86E986A03E911EC93A92E17C4F9AE02.roa Signing time: Wed 10 May 2023 16:50:00 +0000 ROA not before: Wed 10 May 2023 16:50:00 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59164 IP address blocks: 43.239.200.0/22 maxlen: 24 103.200.40.0/23 maxlen: 24 103.200.42.0/23 maxlen: 24 103.232.128.0/22 maxlen: 24 210.16.76.0/22 maxlen: 24 2001:df7:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29132 (0x71cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:00 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb38-db66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:b2:f4:b4:55:1b:7a:74:9d:f1:30:97:80: 20:ec:7e:d7:57:8c:ea:ef:c4:c3:81:d3:26:04:e0: c8:45:2f:61:a9:da:31:ea:bc:10:3e:6f:28:f2:83: 1b:00:58:95:19:5c:a3:ef:99:b2:a4:4c:08:7c:2c: 8e:c8:10:03:18:52:1a:94:77:40:29:cd:35:e4:35: 40:19:da:c7:92:85:ba:81:7a:03:05:7d:20:9d:c3: 02:59:98:8b:f8:83:57:61:c4:e1:8c:4a:50:48:b4: e1:d7:30:eb:e2:b9:c4:77:8d:82:e8:fd:d0:8e:4d: 10:9c:dd:05:60:c8:ac:62:c2:83:58:15:2a:54:2e: e2:1f:9a:90:4e:7d:b3:da:61:ba:c0:57:4d:23:58: 0a:f9:7b:7d:d7:67:b2:c7:bc:e0:87:f0:46:ef:9d: c6:56:87:5e:24:9d:82:bb:f7:0a:bb:2d:a4:f3:a0: 1e:31:de:ec:a9:4d:d1:a5:1a:b5:29:76:82:d1:e1: 0d:eb:f4:79:34:d9:06:c6:31:fb:5b:fe:c8:a7:4d: 46:7b:b4:ef:2a:5f:91:a7:65:29:d2:97:1c:a0:91: 00:f7:66:56:96:68:53:e5:88:0b:73:ee:4a:01:11: ef:45:29:57:3c:22:1b:16:2c:9f:4b:99:32:7d:b9: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:0D:82:31:2F:9E:23:21:94:9E:D1:E8:3A:4A:7E:B7:3C:A2:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B86E986A03E911EC93A92E17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.200.0/22 103.200.40.0/22 103.232.128.0/22 210.16.76.0/22 IPv6: 2001:df7:4400::/48 Signature Algorithm: sha256WithRSAEncryption a9:0e:d3:6b:cf:01:6b:6a:8d:2e:31:4c:66:52:55:3f:d2:e6: db:56:a5:28:fc:98:74:c0:7f:dc:c0:2c:b9:0e:ae:91:0a:f2: 90:ae:dd:ab:4f:65:71:06:ed:6a:7b:74:16:c7:65:6d:1e:5e: 59:2f:47:c1:99:84:5d:3f:4f:f4:30:bb:70:dc:1c:b6:72:8e: 94:57:5f:4c:9e:4e:50:99:10:51:4c:d3:54:08:d1:37:26:d7: 8e:cd:27:e9:7e:56:13:15:f4:46:b7:a4:d9:7f:ee:21:15:07: 33:f9:72:98:03:15:16:77:80:40:80:de:5e:f7:82:c2:49:c2: d3:14:34:76:75:28:75:34:b7:cc:50:77:09:cd:f8:ae:97:49: 64:ab:a6:61:f6:5b:c8:9a:22:35:4b:c3:4c:e4:53:55:72:40: ec:11:c6:08:11:b1:1a:9f:9b:f3:2c:12:77:2c:66:23:78:e4: 79:09:82:4e:c5:16:a4:3f:13:d0:b5:80:a3:2e:7b:f2:9f:f1: 99:8c:b8:34:b1:88:64:3b:17:3e:fc:66:0b:11:5f:92:55:37: d5:ce:34:aa:b3:33:2b:d2:51:63:0c:31:38:c6:18:f5:1d:02: 3d:b6:e0:69:db:7a:8c:cc:fd:fc:a2:d7:38:17:70:c8:02:37: ab:3a:57:27 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICccwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDAwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IzOC1kYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Hmy9LRVG3p0nfEwl4Ag7H7XV4zq78TDgdMmBODIRS9hqdox6rwQPm8o8oMb AFiVGVyj75mypEwIfCyOyBADGFIalHdAKc015DVAGdrHkoW6gXoDBX0gncMCWZiL +INXYcThjEpQSLTh1zDr4rnEd42C6P3Qjk0QnN0FYMisYsKDWBUqVC7iH5qQTn2z 2mG6wFdNI1gK+Xt912eyx7zgh/BG753GVodeJJ2Cu/cKuy2k86AeMd7sqU3RpRq1 KXaC0eEN6/R5NNkGxjH7W/7Ip01Ge7TvKl+Rp2Up0pccoJEA92ZWlmhT5YgLc+5K ARHvRSlXPCIbFiyfS5kyfbkU8wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPgNDYIx L54jIZSe0eg6Sn63PKKyMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjg2RTk4NkEw M0U5MTFFQzkzQTkyRTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAIr78gDBAJnyCgDBAJn6IADBALSEEwwDwQCAAIwCQMHACAB DfdEADANBgkqhkiG9w0BAQsFAAOCAQEAqQ7Ta88Ba2qNLjFMZlJVP9Lm21alKPyY dMB/3MAsuQ6ukQrykK7dq09lcQbtant0FsdlbR5eWS9HwZmEXT9P9DC7cNwctnKO lFdfTJ5OUJkQUUzTVAjRNybXjs0n6X5WExX0Rrek2X/uIRUHM/lymAMVFneAQIDe XveCwknC0xQ0dnUodTS3zFB3Cc34rpdJZKumYfZbyJoiNUvDTORTVXJA7BHGCBGx Gp+b8ywSdyxmI3jkeQmCTsUWpD8T0LWAoy578p/xmYy4NLGIZDsXPvxmCxFfklU3 1c40qrMzK9JRYwwxOMYY9R0CPbbgadt6jMz9/KLXOBdwyAI3qzpXJw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org