$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1006174800F11EB9CAAC67BC4F9AE02.roa File: C1006174800F11EB9CAAC67BC4F9AE02.roa (raw, json) Hash identifier: eF43r9wr5VnraqxfqXBQOVFZewQLnuZyJWNE4ZYbIRU= Subject key identifier: AF:E8:5A:02:7B:FC:ED:CB:77:86:43:2B:0B:AF:53:E5:4B:5B:0A:D4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DF4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1006174800F11EB9CAAC67BC4F9AE02.roa Signing time: Wed 10 May 2023 16:31:50 +0000 ROA not before: Wed 10 May 2023 16:31:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139538 IP address blocks: 103.59.88.0/24 maxlen: 24 103.105.96.0/23 maxlen: 24 103.153.12.0/24 maxlen: 24 103.165.102.0/23 maxlen: 24 103.170.158.0/23 maxlen: 24 103.190.8.0/23 maxlen: 24 2001:df2:26c0::/48 maxlen: 48 2001:df6:6580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28148 (0x6df4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:31:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6f5-daba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:ec:e1:65:7d:74:48:14:9a:e2:24:9c:5e: bb:c3:45:55:90:2e:ee:8a:3c:2f:74:b6:2c:44:53: 5b:81:ab:74:c8:2c:20:ec:0a:de:a5:ee:1c:fb:b5: cc:9f:92:25:d8:17:8e:9d:27:e1:6a:ed:ac:89:a6: 93:7c:59:84:7f:f1:30:2d:1c:aa:28:6a:c8:d0:79: 5c:9c:d7:5c:20:3c:d9:51:9e:27:db:3d:5a:35:5e: c2:81:66:b0:23:cc:dd:7a:36:10:60:6e:29:71:6e: 89:df:c7:62:ee:71:7c:25:9f:94:99:b8:ec:7c:ab: 42:67:73:01:0c:a2:f0:fb:12:b5:6d:df:ca:8e:f5: 92:07:da:35:6a:42:ca:45:5c:5c:a2:3e:40:d6:8c: 81:12:4b:51:17:7b:06:7c:67:1c:b0:88:d5:c3:98: e5:32:fe:76:e7:23:ed:af:7e:ae:b8:14:37:6e:8c: 9e:81:05:07:73:f8:4c:ef:a9:a2:e5:5f:3d:e9:3e: 45:a9:ab:0d:ad:a4:70:c0:ca:67:04:40:3b:ad:1a: 0d:c9:58:7b:cd:63:c7:12:ac:eb:9e:85:16:5a:01: d3:6f:b1:32:40:be:79:1b:53:ca:e0:d4:2a:20:8b: 1c:cb:c1:a3:1e:09:36:f6:1c:18:e5:6c:f5:2d:03: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:5A:02:7B:FC:ED:CB:77:86:43:2B:0B:AF:53:E5:4B:5B:0A:D4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1006174800F11EB9CAAC67BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.88.0/24 103.105.96.0/23 103.153.12.0/24 103.165.102.0/23 103.170.158.0/23 103.190.8.0/23 IPv6: 2001:df2:26c0::/48 2001:df6:6580::/48 Signature Algorithm: sha256WithRSAEncryption 6f:99:96:f9:6d:8c:a8:7a:3b:66:43:03:84:e4:c3:1a:a2:cf: 5f:d1:90:6e:54:ee:fa:ac:6d:af:7f:1e:37:44:1d:57:e2:26: 65:2f:61:0c:a7:84:2a:75:5f:9c:a0:02:36:0f:fe:72:8f:1f: 46:ac:28:d2:c8:5b:30:6b:4a:7f:05:8d:f3:0a:2c:2f:a7:4d: 7d:af:5a:0e:6a:72:57:3e:74:99:9d:3f:81:9b:82:58:db:7a: 5e:4b:e4:c4:9d:29:b8:73:62:bc:1d:54:1a:84:00:c1:38:c4: a5:03:65:93:9b:82:12:4b:07:a9:2a:82:cd:68:7a:26:03:90: d3:b0:03:0b:03:8c:a9:47:b7:83:5c:a2:5f:18:f5:b1:9c:21: 1b:6c:60:cd:94:d0:5e:7a:a6:1d:49:a0:be:e5:39:0c:22:eb: 6d:73:47:6e:9d:a9:65:bd:cd:8f:0b:20:8e:c6:f5:24:48:5d: 36:69:0b:8e:93:78:c4:4e:4e:f5:c2:df:6f:5a:ef:11:a4:dc: dd:9f:68:ef:d1:30:0c:d2:cb:20:8f:ba:f3:ea:b5:7d:f7:d5: 4a:e0:c7:02:3b:1e:af:61:99:34:20:31:b2:c0:30:37:52:24: f9:01:f6:6e:e6:59:03:1a:24:f0:70:f2:a5:3b:f1:8c:6a:55: 69:38:c3:ae -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICbfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMTUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZmNS1kYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUbs4WV9dEgUmuIknF67w0VVkC7uijwvdLYsRFNbgat0yCwg7Arepe4c+7XM n5Il2BeOnSfhau2siaaTfFmEf/EwLRyqKGrI0HlcnNdcIDzZUZ4n2z1aNV7CgWaw I8zdejYQYG4pcW6J38di7nF8JZ+UmbjsfKtCZ3MBDKLw+xK1bd/KjvWSB9o1akLK RVxcoj5A1oyBEktRF3sGfGccsIjVw5jlMv525yPtr36uuBQ3boyegQUHc/hM76mi 5V896T5FqasNraRwwMpnBEA7rRoNyVh7zWPHEqzrnoUWWgHTb7EyQL55G1PK4NQq IIscy8GjHgk29hwY5Wz1LQN+TwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFK/oWgJ7 /O3Ld4ZDKwuvU+VLWwrUMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzEwMDYxNzQ4 MDBGMTFFQjlDQUFDNjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMCoEAgABMCQDBABnO1gDBAFnaWADBABnmQwDBAFnpWYDBAFnqp4DBAFnvggw GAQCAAIwEgMHACABDfImwAMHACABDfZlgDANBgkqhkiG9w0BAQsFAAOCAQEAb5mW +W2MqHo7ZkMDhOTDGqLPX9GQblTu+qxtr38eN0QdV+ImZS9hDKeEKnVfnKACNg/+ co8fRqwo0shbMGtKfwWN8wosL6dNfa9aDmpyVz50mZ0/gZuCWNt6XkvkxJ0puHNi vB1UGoQAwTjEpQNlk5uCEksHqSqCzWh6JgOQ07ADCwOMqUe3g1yiXxj1sZwhG2xg zZTQXnqmHUmgvuU5DCLrbXNHbp2pZb3Njwsgjsb1JEhdNmkLjpN4xE5O9cLfb1rv EaTc3Z9o79EwDNLLII+68+q1fffVSuDHAjser2GZNCAxssAwN1Ik+QH2buZZAxok 8HDypTvxjGpVaTjDrg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org