$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C837A6007911EE99460918C4F9AE02.roa File: B8C837A6007911EE99460918C4F9AE02.roa (raw, json) Hash identifier: Dp8x6BY+AR8rCnB7gNo9/1vKj1edp1ERJ0QPvCiQJRY= Subject key identifier: 2A:87:15:BA:D1:1E:A1:B3:BB:F8:10:60:BD:87:05:D6:44:23:67:1D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7325 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C837A6007911EE99460918C4F9AE02.roa Signing time: Thu 01 Jun 2023 12:42:09 +0000 ROA not before: Thu 01 Jun 2023 12:42:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150577 IP address blocks: 103.54.176.0/24 maxlen: 24 103.54.177.0/24 maxlen: 24 2001:df1:b140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29477 (0x7325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 1 12:42:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64789220-f6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:61:ad:c7:73:9a:0e:8a:17:04:26:3e:83: 16:be:d1:27:e8:a7:44:da:db:3a:ae:13:f0:2f:bd: 92:fe:44:e0:a8:db:62:59:42:73:3f:2f:8c:61:31: 24:e2:d0:30:aa:af:0f:f1:ce:22:94:9f:48:7a:30: 65:f4:a8:f7:51:18:05:ab:d2:f8:f2:5d:49:45:11: fe:52:7f:6c:a5:3f:d0:e8:55:3a:6d:36:cc:41:fc: 15:8a:c0:22:f3:15:1c:f4:7d:01:f4:a3:ab:11:b8: 1d:6c:d7:e8:03:96:df:d8:79:71:43:d8:5e:3d:09: ef:83:1b:19:03:3b:ab:19:92:2a:a4:b5:73:69:95: ac:69:28:94:9f:30:c4:3f:bc:76:07:68:f6:51:ec: 72:9b:87:2d:4a:41:cf:06:c3:1a:89:83:e0:43:97: f2:be:c7:62:8e:fe:30:b9:b7:fa:52:93:b7:5b:d3: ff:75:81:de:18:29:61:02:dd:91:bd:1c:35:3d:6d: 70:80:4a:41:6f:c0:37:54:62:e4:4b:d7:c4:98:d4: dd:b5:5b:1c:b9:74:63:3a:04:f7:87:b5:6d:bf:d9: 1f:1e:67:cd:f7:77:26:9d:75:cc:4c:2c:0a:a9:0c: 0c:53:f1:b3:23:cb:da:b7:b0:ee:66:c4:8b:7a:09: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:15:BA:D1:1E:A1:B3:BB:F8:10:60:BD:87:05:D6:44:23:67:1D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8C837A6007911EE99460918C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.176.0/23 IPv6: 2001:df1:b140::/48 Signature Algorithm: sha256WithRSAEncryption 70:58:5e:0c:ad:6a:77:47:a6:70:ad:c8:62:5e:33:34:7f:cf: 74:70:06:6a:a9:8e:6e:8b:b3:f8:cd:4c:41:01:29:6d:25:9d: 4f:ff:44:65:54:3f:91:f0:85:2c:8d:5c:f9:b5:8e:79:1c:e6: 61:75:45:a8:13:cb:33:58:8b:38:04:13:6a:39:27:a2:d2:9f: 77:72:7b:02:0a:64:ee:e8:6e:fb:14:82:54:34:f0:5a:29:77: 45:f4:a5:ec:f9:db:6d:57:4f:c4:ea:d4:7c:f0:e2:50:9c:2c: 38:39:3e:58:ab:f1:84:59:2c:6e:af:8a:67:71:38:8c:db:8b: b1:2a:ff:d5:8a:f6:56:c1:d3:33:df:c0:71:6d:b5:3b:d3:2e: 73:aa:98:ed:a2:97:af:7a:5d:0b:f8:06:91:e1:cf:60:1e:92: bd:e5:f0:ea:52:12:e3:38:aa:d3:9a:5d:a1:c8:9b:65:48:ca: 53:4c:e1:46:e8:76:fa:d0:8d:73:e9:ed:86:0d:a0:2c:21:b2: 52:0a:1b:3d:41:37:5c:dc:49:ed:7e:18:31:51:95:64:88:5a: d4:5b:51:79:4f:b1:b8:fb:90:be:84:e3:05:c5:35:5a:0a:8a: 30:9d:c2:31:05:e6:f7:5e:b8:93:b0:a7:4a:c9:ee:d2:ab:26: ff:9e:8e:1f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjAxMTI0MjA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc4OTIyMC1mNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAxhrcdzmg6KFwQmPoMWvtEn6KdE2ts6rhPwL72S/kTgqNtiWUJzPy+MYTEk 4tAwqq8P8c4ilJ9IejBl9Kj3URgFq9L48l1JRRH+Un9spT/Q6FU6bTbMQfwVisAi 8xUc9H0B9KOrEbgdbNfoA5bf2HlxQ9hePQnvgxsZAzurGZIqpLVzaZWsaSiUnzDE P7x2B2j2Uexym4ctSkHPBsMaiYPgQ5fyvsdijv4wubf6UpO3W9P/dYHeGClhAt2R vRw1PW1wgEpBb8A3VGLkS9fEmNTdtVscuXRjOgT3h7Vtv9kfHmfN93cmnXXMTCwK qQwMU/GzI8vat7DuZsSLegmNNQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCqHFbrR HqGzu/gQYL2HBdZEI2cdMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjhDODM3QTYw MDc5MTFFRTk5NDYwOTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnNrAwDwQCAAIwCQMHACABDfGxQDANBgkqhkiG9w0BAQsF AAOCAQEAcFheDK1qd0emcK3IYl4zNH/PdHAGaqmObouz+M1MQQEpbSWdT/9EZVQ/ kfCFLI1c+bWOeRzmYXVFqBPLM1iLOAQTajknotKfd3J7Agpk7uhu+xSCVDTwWil3 RfSl7PnbbVdPxOrUfPDiUJwsODk+WKvxhFksbq+KZ3E4jNuLsSr/1Yr2VsHTM9/A cW21O9Muc6qY7aKXr3pdC/gGkeHPYB6SveXw6lIS4ziq05pdocibZUjKU0zhRuh2 +tCNc+nthg2gLCGyUgobPUE3XNxJ7X4YMVGVZIha1FtReU+xuPuQvoTjBcU1WgqK MJ3CMQXm9164k7CnSsnu0qsm/56OHw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org