$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C56E2C3E9D11EB91773F3FC4F9AE02.roa File: B8C56E2C3E9D11EB91773F3FC4F9AE02.roa (raw, json) Hash identifier: 7OShT6Bo4t8ektgU6nvEsU74qJFkuEa8l2pbTgNhx5s= Subject key identifier: 98:71:F9:30:0D:38:88:90:EC:F5:B0:F3:6F:74:5D:8D:AE:6A:FA:85 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E79 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C56E2C3E9D11EB91773F3FC4F9AE02.roa Signing time: Wed 10 May 2023 16:34:13 +0000 ROA not before: Wed 10 May 2023 16:34:13 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141286 IP address blocks: 103.159.246.0/23 maxlen: 23 103.166.220.0/23 maxlen: 24 103.170.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28281 (0x6e79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:34:13 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc785-d80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:97:17:2a:70:c1:e9:eb:32:a3:b8:64:72: 53:56:62:9b:95:bf:9a:47:fa:29:b7:b7:3b:da:55: 90:8c:a5:0d:80:42:af:f9:ca:de:01:3c:eb:46:0b: f4:48:87:6e:ef:52:e9:3f:97:1d:5d:3d:40:83:34: 0c:8d:7c:38:69:1e:bc:65:dc:19:34:db:92:ad:9b: db:f4:06:bb:ce:e8:08:a9:d9:20:74:c3:c6:0f:f8: a1:cd:2a:be:0d:92:ca:12:f9:e0:bd:b2:b1:19:df: c8:fd:7f:cc:0d:6b:17:c8:53:1c:45:32:32:e9:0f: 2b:ed:b3:71:40:28:d5:f4:ab:1b:b3:a2:48:b4:dd: 85:af:d5:9f:2b:eb:ad:97:44:08:55:f2:2b:6d:da: 52:7e:7e:1b:a6:23:d3:de:81:32:29:41:4f:8e:88: 79:a7:6c:99:25:da:10:ad:71:5f:2f:8e:cd:3a:4a: 0e:a4:97:56:98:64:d0:74:72:7a:17:40:58:00:36: f8:20:72:f5:9a:af:68:68:3c:bc:e7:4d:bc:31:39: 14:6c:b7:0d:6f:9f:68:75:92:be:c6:1a:47:c1:ae: a3:42:7a:9f:31:f4:e0:52:e5:8f:6a:44:a2:3e:98: a7:06:c1:82:06:93:b4:83:87:53:6a:82:39:78:5d: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:71:F9:30:0D:38:88:90:EC:F5:B0:F3:6F:74:5D:8D:AE:6A:FA:85 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C56E2C3E9D11EB91773F3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.246.0/23 103.166.220.0/23 103.170.86.0/23 Signature Algorithm: sha256WithRSAEncryption b4:8e:b6:63:5d:55:66:2d:77:37:f4:0d:90:8b:97:61:49:30: 75:db:23:e2:44:2d:dc:17:0d:6b:e7:a3:d2:5a:43:5e:ec:57: ff:f0:4d:b8:f0:e9:a3:5f:a7:f8:b6:f8:2a:79:50:e8:d3:2b: 3a:53:2b:f6:d1:0a:46:8e:d8:2d:8c:6f:79:9b:59:66:5a:50: ed:bb:5d:70:e9:91:2f:a7:c8:d2:55:56:85:c8:c7:f0:12:ac: 01:a6:9a:a2:8d:bc:f6:85:2b:3a:34:7b:60:b4:b9:c6:fc:04: c5:ba:bd:8c:46:bf:9d:4d:48:41:70:af:24:90:98:9a:9b:1d: 7e:a9:80:c5:af:ca:b4:1c:5b:53:13:bc:78:a9:12:5b:72:c9: 8e:b9:9b:f7:12:ec:8e:97:5b:63:e8:8a:6f:e3:f0:74:e4:52: 55:3d:0a:05:be:1f:1d:76:32:7d:bd:f5:e0:a1:46:33:47:7e: 0c:c8:0f:db:e1:fc:95:ca:73:fb:29:62:02:a4:d8:e2:76:69: 46:18:c4:c5:b4:f0:b6:51:9d:1f:81:3b:2c:dd:34:49:f6:ce: 0e:3b:49:2d:c6:b3:ac:e0:c2:d7:43:58:98:b2:a7:a8:99:14: a0:ba:1a:7e:57:00:ad:6a:7f:34:da:1b:12:95:7b:1f:5f:02: 2a:7a:1b:90 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICbnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNDEzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc4NS1kODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOWXFypwwenrMqO4ZHJTVmKblb+aR/opt7c72lWQjKUNgEKv+creATzrRgv0 SIdu71LpP5cdXT1AgzQMjXw4aR68ZdwZNNuSrZvb9Aa7zugIqdkgdMPGD/ihzSq+ DZLKEvngvbKxGd/I/X/MDWsXyFMcRTIy6Q8r7bNxQCjV9Ksbs6JItN2Fr9WfK+ut l0QIVfIrbdpSfn4bpiPT3oEyKUFPjoh5p2yZJdoQrXFfL47NOkoOpJdWmGTQdHJ6 F0BYADb4IHL1mq9oaDy85028MTkUbLcNb59odZK+xhpHwa6jQnqfMfTgUuWPakSi PpinBsGCBpO0g4dTaoI5eF06fwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJhx+TAN OIiQ7PWw8290XY2uavqFMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjhDNTZFMkMz RTlEMTFFQjkxNzczRjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnn/YDBAFnptwDBAFnqlYwDQYJKoZIhvcNAQELBQADggEB ALSOtmNdVWYtdzf0DZCLl2FJMHXbI+JELdwXDWvno9JaQ17sV//wTbjw6aNfp/i2 +Cp5UOjTKzpTK/bRCkaO2C2Mb3mbWWZaUO27XXDpkS+nyNJVVoXIx/ASrAGmmqKN vPaFKzo0e2C0ucb8BMW6vYxGv51NSEFwrySQmJqbHX6pgMWvyrQcW1MTvHipElty yY65m/cS7I6XW2Poim/j8HTkUlU9CgW+Hx12Mn299eChRjNHfgzID9vh/JXKc/sp YgKk2OJ2aUYYxMW08LZRnR+BOyzdNEn2zg47SS3Gs6zgwtdDWJiyp6iZFKC6Gn5X AK1qfzTaGxKVex9fAip6G5A= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org