$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa File: B8D6098E458A11EEA6299718C4F9AE02.roa (raw, json) Hash identifier: UmG7gV9u0QF3M4y+7Rqy+oCeFscWmMwpLKZgb7UPXkE= Subject key identifier: 8B:B8:43:14:16:48:5C:6A:0E:B3:48:DC:1D:67:E2:08:86:A2:0D:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 78B9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa Signing time: Mon 28 Aug 2023 10:07:41 +0000 ROA not before: Mon 28 Aug 2023 10:07:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133990 IP address blocks: 103.54.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30905 (0x78b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 28 10:07:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ec71ec-e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:9c:a8:f9:52:c3:74:25:ad:2e:3b:77:c9: f6:40:60:78:d9:2f:06:52:a8:6c:0b:b6:09:c4:c0: 78:27:33:5a:36:62:3f:78:dc:70:aa:85:34:4d:3e: 67:22:ac:49:f9:8c:c6:79:da:7a:3f:e0:97:3e:d6: ef:be:e0:98:18:3c:38:2f:0f:d0:ff:81:b2:a9:04: 20:77:7f:87:c6:77:e7:93:1f:9f:63:bf:2d:ae:1d: 4e:eb:f5:cf:39:2c:81:66:36:24:35:61:31:8f:b5: 2a:eb:3a:56:0e:ce:1f:00:37:9e:95:62:cc:f8:f0: c8:70:73:5c:83:4b:ee:37:68:9a:40:b5:df:c4:44: 55:cf:8e:35:23:75:e4:74:d8:44:3e:f6:37:4d:48: 2b:17:48:de:bd:a0:2b:14:f2:a8:a9:87:6a:8a:69: 4f:73:d8:26:b3:05:ff:bf:75:e9:18:42:ad:b1:8f: 97:23:63:67:e6:76:3a:04:0a:28:c9:69:6a:59:f4: f4:e7:46:90:95:49:e1:7b:e5:15:02:e9:28:3c:03: fb:e0:11:d2:15:a5:3e:a0:5f:7d:8f:95:6c:1d:9f: cd:68:eb:6f:b2:85:94:f3:aa:50:3d:eb:4e:0a:e0: c7:e6:c1:ba:f1:25:fd:23:3d:9f:c4:48:eb:38:c5: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:43:14:16:48:5C:6A:0E:B3:48:DC:1D:67:E2:08:86:A2:0D:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8D6098E458A11EEA6299718C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.173.0/24 Signature Algorithm: sha256WithRSAEncryption 38:73:6d:8e:b7:1d:a2:0b:fc:3e:0a:fc:ae:29:81:17:d4:d4: 85:00:11:9f:18:81:f7:9e:b0:3f:1d:58:a8:6c:31:97:4d:f9: 5d:a4:31:9a:aa:91:d9:4f:a0:10:52:98:e9:84:62:9c:7d:ee: c9:80:61:32:bb:2c:77:7d:24:41:0c:6b:87:07:ed:28:f4:cf: fc:f9:49:df:10:87:b5:a2:2c:a3:8f:09:04:22:82:2a:42:44: 5b:b5:fc:a5:08:f0:e0:d9:67:2e:97:6e:b0:7a:35:ac:27:ee: b4:72:4e:15:d6:61:22:33:21:50:2d:ea:f9:9a:b6:b9:fa:fa: 8e:59:fc:a0:c3:25:a1:61:6f:91:2e:7b:dc:85:d3:b3:0e:23: 35:34:a3:e9:44:5e:98:b2:ec:fe:27:f0:0a:8f:14:08:36:f9: a2:99:04:5a:2d:39:89:94:23:51:31:9e:82:df:7f:85:3d:f6: af:f9:c6:5f:6b:53:35:33:d7:c6:02:d8:cd:91:70:e8:d1:c9: c6:3e:98:16:bf:6a:1e:bc:05:63:40:61:ec:21:74:52:d7:8c: 0e:f4:13:95:cb:7d:71:d5:21:2d:f7:07:41:d0:a5:fd:7e:2c: 3e:55:71:c4:98:f3:19:32:f5:62:2d:18:f3:2c:a8:47:c3:48: 17:c2:b4:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICeLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODI4MTAwNzQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVjNzFlYy1lNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5+cqPlSw3QlrS47d8n2QGB42S8GUqhsC7YJxMB4JzNaNmI/eNxwqoU0TT5n IqxJ+YzGedp6P+CXPtbvvuCYGDw4Lw/Q/4GyqQQgd3+Hxnfnkx+fY78trh1O6/XP OSyBZjYkNWExj7Uq6zpWDs4fADeelWLM+PDIcHNcg0vuN2iaQLXfxERVz441I3Xk dNhEPvY3TUgrF0jevaArFPKoqYdqimlPc9gmswX/v3XpGEKtsY+XI2Nn5nY6BAoo yWlqWfT050aQlUnhe+UVAukoPAP74BHSFaU+oF99j5VsHZ/NaOtvsoWU86pQPetO CuDH5sG68SX9Iz2fxEjrOMVYHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIu4QxQW SFxqDrNI3B1n4giGog2GMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjhENjA5OEU0 NThBMTFFRUE2Mjk5NzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnNq0wDQYJKoZIhvcNAQELBQADggEBADhzbY63HaIL/D4K /K4pgRfU1IUAEZ8YgfeesD8dWKhsMZdN+V2kMZqqkdlPoBBSmOmEYpx97smAYTK7 LHd9JEEMa4cH7Sj0z/z5Sd8Qh7WiLKOPCQQigipCRFu1/KUI8ODZZy6XbrB6Nawn 7rRyThXWYSIzIVAt6vmatrn6+o5Z/KDDJaFhb5Eue9yF07MOIzU0o+lEXpiy7P4n 8AqPFAg2+aKZBFotOYmUI1ExnoLff4U99q/5xl9rUzUz18YC2M2RcOjRycY+mBa/ ah68BWNAYewhdFLXjA70E5XLfXHVIS33B0HQpf1+LD5VccSY8xky9WItGPMsqEfD SBfCtJk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org