$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa File: BA2B4C7E789B11EEBD606376C4F9AE02.roa (raw, json) Hash identifier: 5K/mbmtT4U8FL9cMdiXfgINik4UBGVKkV8MSYSFV8JU= Subject key identifier: 8D:7E:F8:F1:C6:92:91:0E:EA:2A:21:08:69:C1:CB:1D:FB:9B:A0:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CF0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa Signing time: Wed 01 Nov 2023 09:47:53 +0000 ROA not before: Wed 01 Nov 2023 09:47:53 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151164 IP address blocks: 103.115.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31984 (0x7cf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 1 09:47:53 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65421ec9-e8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:8d:08:42:ea:92:81:86:09:e9:77:51:5b: c5:1a:3c:54:21:41:00:ae:87:3b:e2:f2:89:ea:12: b8:6d:fb:3a:c6:d7:b5:7c:a4:df:bf:3c:73:19:46: 3e:66:4e:ac:3d:fb:e9:5c:07:a3:f2:36:30:e6:18: d5:92:80:3d:1b:1d:83:9f:f4:b9:44:9d:92:ea:f2: ce:c9:e6:7f:6a:47:3b:99:ab:85:1c:b6:7a:ab:9d: 77:1a:e9:97:f4:3a:f2:b3:db:c3:16:92:93:82:b4: ec:97:73:65:76:5a:85:69:4e:a5:2f:68:60:5f:ee: 6c:a2:2a:ff:42:f4:b6:ed:0d:f1:c7:08:2c:21:5e: 57:f3:2c:7a:c4:c5:00:67:86:5f:9f:c6:0b:f6:0f: ae:36:35:07:f2:1a:76:67:74:d1:fe:6f:4a:41:83: c4:fb:c3:b3:ea:a4:27:0a:50:e2:b6:0f:95:11:7c: ee:e1:07:3a:3a:74:90:02:5f:58:ac:a7:c8:a7:0b: aa:7f:84:f6:8e:91:13:68:db:e1:8c:1d:91:4e:1e: 76:e3:04:e4:67:43:b1:01:e0:f8:3a:b2:1c:fe:75: 55:60:bc:a4:0e:8b:4a:8d:e9:c2:85:4d:76:cf:e6: 2c:f6:15:5b:d7:b1:35:90:a1:9f:1a:f4:29:8c:a2: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:F8:F1:C6:92:91:0E:EA:2A:21:08:69:C1:CB:1D:FB:9B:A0:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.236.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:10:12:16:1b:aa:33:a5:7d:39:2d:c1:39:c8:df:2a:e8:ee: 05:46:c0:45:01:7a:fa:0a:f7:d4:32:94:1e:3d:e7:11:07:3e: a0:f4:78:5b:28:29:1e:6a:4e:6d:5a:09:8c:c6:fe:3e:b0:00: f5:21:35:fd:64:63:96:59:00:21:28:c4:a4:69:0e:43:f1:5c: 14:90:ae:50:5d:81:b7:0c:46:f9:6d:54:ea:f6:69:7e:be:9c: 14:26:2f:6b:a6:71:98:9a:5b:86:1c:cf:6e:35:36:5a:26:d1: 0d:e0:40:6f:69:94:b6:39:24:ec:ad:e6:7e:f3:98:da:07:c0: a3:81:81:00:08:c6:98:c2:89:73:61:6b:a7:a8:21:c4:8a:0a: da:0a:3b:4b:4e:2b:e1:3d:34:f9:c1:7e:18:27:70:55:d0:1c: cb:ae:11:75:aa:2d:7e:64:b9:18:1e:81:83:70:6e:2e:99:52: 78:68:0e:83:28:df:00:6e:71:11:4f:93:1f:46:21:2d:26:29: 73:d0:44:f7:f6:a1:26:db:06:33:84:40:fa:f7:38:72:e9:42: 00:12:13:cf:39:c1:26:30:f8:3b:a1:1b:6e:8a:17:35:cc:11: f5:5f:2c:77:4b:de:c2:7b:88:e0:2c:97:39:90:5a:19:75:29: 46:3e:8d:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICfPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTAxMDk0NzUzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQyMWVjOS1lOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmONCELqkoGGCel3UVvFGjxUIUEAroc74vKJ6hK4bfs6xte1fKTfvzxzGUY+ Zk6sPfvpXAej8jYw5hjVkoA9Gx2Dn/S5RJ2S6vLOyeZ/akc7mauFHLZ6q513GumX 9Drys9vDFpKTgrTsl3NldlqFaU6lL2hgX+5soir/QvS27Q3xxwgsIV5X8yx6xMUA Z4Zfn8YL9g+uNjUH8hp2Z3TR/m9KQYPE+8Oz6qQnClDitg+VEXzu4Qc6OnSQAl9Y rKfIpwuqf4T2jpETaNvhjB2RTh524wTkZ0OxAeD4OrIc/nVVYLykDotKjenChU12 z+Ys9hVb17E1kKGfGvQpjKJLWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI1++PHG kpEO6iohCGnByx37m6AlMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkEyQjRDN0U3 ODlCMTFFRUJENjA2Mzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnc+wwDQYJKoZIhvcNAQELBQADggEBAD4QEhYbqjOlfTkt wTnI3yro7gVGwEUBevoK99QylB495xEHPqD0eFsoKR5qTm1aCYzG/j6wAPUhNf1k Y5ZZACEoxKRpDkPxXBSQrlBdgbcMRvltVOr2aX6+nBQmL2umcZiaW4Ycz241Nlom 0Q3gQG9plLY5JOyt5n7zmNoHwKOBgQAIxpjCiXNha6eoIcSKCtoKO0tOK+E9NPnB fhgncFXQHMuuEXWqLX5kuRgegYNwbi6ZUnhoDoMo3wBucRFPkx9GIS0mKXPQRPf2 oSbbBjOEQPr3OHLpQgASE885wSYw+DuhG26KFzXMEfVfLHdL3sJ7iOAslzmQWhl1 KUY+jbI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org