$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA15B24925011EDBC31547AC4F9AE02.roa File: BCA15B24925011EDBC31547AC4F9AE02.roa (raw, json) Hash identifier: uCJ9TifoPZk8krkyrHf+0NJs+qWAYCtAdfPOSLJM7go= Subject key identifier: 1F:73:FA:62:12:C8:39:52:E6:2B:0E:FF:B2:71:B7:09:AF:E9:43:0F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 76A4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA15B24925011EDBC31547AC4F9AE02.roa Signing time: Tue 01 Aug 2023 05:01:05 +0000 ROA not before: Tue 01 Aug 2023 05:01:05 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142449 IP address blocks: 103.170.64.0/24 maxlen: 24 103.170.65.0/24 maxlen: 24 2001:df7:1080::/48 maxlen: 48 2406:ecc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30372 (0x76a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 1 05:01:05 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64c89191-d84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c6:62:4b:39:51:68:17:c8:5f:e6:83:86:4f: 5e:c8:47:bb:cd:c1:9a:66:1b:ad:7c:c4:94:e6:aa: ba:76:f3:1c:a2:bf:7d:0a:9f:4d:06:a5:0a:94:4d: e5:41:8f:10:bf:05:39:b0:d3:74:b4:28:1a:7c:45: 33:55:a0:85:67:bc:a9:e6:2b:64:3f:63:95:b0:4d: d7:fe:91:53:a2:ad:b8:15:0f:46:2d:cb:88:fd:d1: 34:d3:e2:ad:c3:3e:d3:6c:3c:85:c0:ff:d8:2c:c1: 8a:83:5a:29:0f:42:ea:61:2e:2e:1c:fe:3f:b1:9d: 0d:a4:fc:9f:9c:95:3e:59:84:f9:f9:04:2f:f2:57: 8a:d9:73:18:91:39:1c:bb:19:c3:3b:73:cd:41:a7: 71:b8:71:84:99:51:e4:ce:db:52:59:ff:67:eb:e4: a3:09:aa:66:46:3d:68:b3:c1:17:86:44:d3:3a:da: 5a:27:64:01:f4:43:6c:05:9c:dd:d0:9a:14:07:bf: 89:2a:a1:53:06:82:86:99:69:1d:06:d3:58:74:d8: 5e:9a:fc:b7:75:20:1c:04:5b:d8:09:79:90:b7:66: 76:09:e0:67:85:5a:d9:41:09:0a:c1:c0:de:f3:77: 2b:6d:ac:6e:7b:eb:42:39:6b:48:4a:4c:ab:36:ce: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:73:FA:62:12:C8:39:52:E6:2B:0E:FF:B2:71:B7:09:AF:E9:43:0F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCA15B24925011EDBC31547AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.64.0/23 IPv6: 2001:df7:1080::/48 2406:ecc0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:7d:da:f1:9d:fc:b5:0a:35:d0:0d:99:0a:bf:99:36:af:e9: 8b:50:cf:e2:16:44:ad:fb:f1:63:30:80:1d:e9:4d:41:fe:26: c1:25:2b:ee:8a:60:27:7d:c9:4f:66:a0:a8:8b:a9:03:70:c0: a8:36:a6:36:a5:6c:97:f6:5c:bd:73:0b:c3:94:ef:1b:e6:f3: 6e:8f:17:3d:aa:72:0c:a1:48:b2:22:d4:33:0c:fa:4e:f7:c5: c8:8a:a5:93:f3:f7:83:b8:f4:de:92:e4:6a:08:46:83:de:01: 0e:2f:e0:28:7d:bc:a4:b3:f7:4d:27:6f:d5:d9:61:52:99:ac: 66:b3:b5:ae:cb:f0:97:9e:3b:ab:40:ee:e3:80:59:f4:e4:22: af:dd:ce:54:ac:ea:5e:f8:9d:71:a8:df:4a:f6:18:80:f1:18: 73:41:cd:88:93:c4:2e:25:b7:26:90:f3:7f:66:a2:5a:51:00: ec:53:71:33:80:40:ce:e2:c6:e1:f0:d8:c4:99:57:c3:bf:c3: 2c:fb:bb:bd:ee:d4:8c:4a:5e:f2:4e:4b:00:5a:15:af:cb:f4: 12:83:08:be:4e:c5:55:65:9d:20:c4:ce:b9:ea:c8:a1:d1:f9: 06:39:92:a0:2f:64:c0:59:95:50:46:a6:08:1d:c4:24:f3:6b: b1:64:35:aa -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICdqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODAxMDUwMTA1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4OTE5MS1kODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cZiSzlRaBfIX+aDhk9eyEe7zcGaZhutfMSU5qq6dvMcor99Cp9NBqUKlE3l QY8QvwU5sNN0tCgafEUzVaCFZ7yp5itkP2OVsE3X/pFToq24FQ9GLcuI/dE00+Kt wz7TbDyFwP/YLMGKg1opD0LqYS4uHP4/sZ0NpPyfnJU+WYT5+QQv8leK2XMYkTkc uxnDO3PNQadxuHGEmVHkzttSWf9n6+SjCapmRj1os8EXhkTTOtpaJ2QB9ENsBZzd 0JoUB7+JKqFTBoKGmWkdBtNYdNhemvy3dSAcBFvYCXmQt2Z2CeBnhVrZQQkKwcDe 83crbaxue+tCOWtISkyrNs6IKwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFB9z+mIS yDlS5isO/7Jxtwmv6UMPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkNBMTVCMjQ5 MjUwMTFFREJDMzE1NDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnqkAwFgQCAAIwEAMHACABDfcQgAMFACQG7MAwDQYJKoZI hvcNAQELBQADggEBAG192vGd/LUKNdANmQq/mTav6YtQz+IWRK378WMwgB3pTUH+ JsElK+6KYCd9yU9moKiLqQNwwKg2pjalbJf2XL1zC8OU7xvm826PFz2qcgyhSLIi 1DMM+k73xciKpZPz94O49N6S5GoIRoPeAQ4v4Ch9vKSz900nb9XZYVKZrGazta7L 8JeeO6tA7uOAWfTkIq/dzlSs6l74nXGo30r2GIDxGHNBzYiTxC4ltyaQ839molpR AOxTcTOAQM7ixuHw2MSZV8O/wyz7u73u1IxKXvJOSwBaFa/L9BKDCL5OxVVlnSDE zrnqyKHR+QY5kqAvZMBZlVBGpggdxCTza7FkNao= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org