$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEBA82AE770C11EEAFBD2D3AC4F9AE02.roa File: BEBA82AE770C11EEAFBD2D3AC4F9AE02.roa (raw, json) Hash identifier: nrxUzS9mAMxqqbS4hp9+DGbd/yAXSnGbx1635WNQ4zE= Subject key identifier: CA:CC:AC:D8:18:81:8D:1E:CF:BD:4C:A8:04:47:EC:53:38:C1:1B:54 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7CC0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEBA82AE770C11EEAFBD2D3AC4F9AE02.roa Signing time: Mon 30 Oct 2023 10:15:58 +0000 ROA not before: Mon 30 Oct 2023 10:15:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151753 IP address blocks: 103.250.98.0/23 maxlen: 24 2001:df3:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31936 (0x7cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 30 10:15:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=653f825e-5d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:4e:38:93:ec:a7:e5:46:68:a2:c4:bb:93: 3b:35:19:32:b7:cc:71:35:4c:b3:a0:a6:54:a2:e2: 61:2b:05:49:46:c5:0a:ff:75:e0:03:e2:f3:8f:d8: d2:2d:b7:4c:02:a3:86:a1:89:28:a7:21:62:16:69: 22:77:06:2a:71:1e:4a:f6:15:1b:34:27:98:d5:67: d1:ad:5a:c2:95:fc:4e:7d:0c:ea:2b:a9:ce:9e:2a: 09:44:8d:7a:b2:22:b5:80:20:33:4d:95:bf:8b:82: 2e:3b:1f:b2:7c:fe:2c:cd:a8:4a:58:19:b9:6e:06: 38:98:d7:d4:8a:4e:be:68:0c:31:62:20:0b:d7:d0: 2a:d8:b7:c0:b2:64:04:cd:bb:0d:75:0f:6e:ff:c7: ea:d4:27:61:be:e7:bf:42:71:ee:62:35:f5:e5:e0: d7:d7:72:fa:3b:13:38:73:18:87:74:32:ec:c8:8b: c8:23:4d:e9:fc:57:b0:39:e0:80:ac:b0:20:b4:99: 2b:f2:a5:08:f8:b8:5e:00:49:fe:e0:28:b4:d3:8b: d4:1b:f1:42:e3:16:85:14:1e:45:57:06:51:4f:65: 16:32:2e:c7:22:6b:20:2e:7d:3d:0e:a8:79:15:3c: ff:fe:4f:61:4c:ab:fd:0d:0d:52:a5:18:43:fb:0b: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CC:AC:D8:18:81:8D:1E:CF:BD:4C:A8:04:47:EC:53:38:C1:1B:54 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEBA82AE770C11EEAFBD2D3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.98.0/23 IPv6: 2001:df3:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:30:b4:3d:b2:89:15:fd:23:2a:38:08:06:4c:b0:a9:cb:81: 0e:c7:98:92:5e:32:b8:0f:9e:8b:a9:87:98:da:f5:dd:ee:77: 99:5f:2d:7f:ad:ad:ac:4c:eb:fa:d6:9e:91:60:f2:9c:a3:56: 7d:6f:e6:a2:a3:e8:5d:7f:ad:78:5d:9a:5c:dd:64:d2:35:da: 7b:c3:fe:70:11:dc:c0:c3:13:54:41:7b:b2:34:2b:ad:39:64: d7:0f:e5:fd:a6:0f:5c:73:f0:f0:a6:14:93:bf:5b:d7:8e:c9: 14:cd:77:3c:d7:4d:7b:98:ee:9c:e7:a6:9c:39:4e:61:2c:44: 8f:d3:55:57:e3:37:09:67:68:96:76:3b:db:ed:35:62:c0:dd: 77:7f:17:ad:78:cd:c4:be:20:39:aa:dc:9e:75:3a:ed:e4:9b: 63:67:32:08:94:77:48:54:e6:c6:ea:57:c7:17:d3:f8:68:61: 9f:be:28:b6:fb:68:59:d5:8e:46:ac:b6:94:c5:f8:82:5c:09: 4c:27:07:77:d6:20:15:c2:7d:86:cd:2b:c3:50:de:e2:09:c5: 9b:4b:6b:42:71:d5:71:71:1a:bb:68:9b:69:a3:dd:dd:e0:1b: 8c:37:32:c6:ff:16:c0:fa:90:af:f5:ac:22:e7:8e:11:62:4e: 39:76:5b:44 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICfMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDMwMTAxNTU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNmODI1ZS01ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9hOOJPsp+VGaKLEu5M7NRkyt8xxNUyzoKZUouJhKwVJRsUK/3XgA+Lzj9jS LbdMAqOGoYkopyFiFmkidwYqcR5K9hUbNCeY1WfRrVrClfxOfQzqK6nOnioJRI16 siK1gCAzTZW/i4IuOx+yfP4szahKWBm5bgY4mNfUik6+aAwxYiAL19Aq2LfAsmQE zbsNdQ9u/8fq1Cdhvue/QnHuYjX15eDX13L6OxM4cxiHdDLsyIvII03p/FewOeCA rLAgtJkr8qUI+LheAEn+4Ci004vUG/FC4xaFFB5FVwZRT2UWMi7HImsgLn09Dqh5 FTz//k9hTKv9DQ1SpRhD+wvugwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMrMrNgY gY0ez71MqARH7FM4wRtUMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkVCQTgyQUU3 NzBDMTFFRUFGQkQyRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn+mIwDwQCAAIwCQMHACABDfMQwDANBgkqhkiG9w0BAQsF AAOCAQEACDC0PbKJFf0jKjgIBkywqcuBDseYkl4yuA+ei6mHmNr13e53mV8tf62t rEzr+taekWDynKNWfW/moqPoXX+teF2aXN1k0jXae8P+cBHcwMMTVEF7sjQrrTlk 1w/l/aYPXHPw8KYUk79b147JFM13PNdNe5junOemnDlOYSxEj9NVV+M3CWdolnY7 2+01YsDdd38XrXjNxL4gOarcnnU67eSbY2cyCJR3SFTmxupXxxfT+Ghhn74otvto WdWORqy2lMX4glwJTCcHd9YgFcJ9hs0rw1De4gnFm0trQnHVcXEau2ibaaPd3eAb jDcyxv8WwPqQr/WsIueOEWJOOXZbRA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org