$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2B9C08CB41111ECA8CDB824C4F9AE02.roa File: C2B9C08CB41111ECA8CDB824C4F9AE02.roa (raw, json) Hash identifier: JshpyBIXbC5HRNwK5o/tpTga4lmaGAWFgSqL3V/YAwI= Subject key identifier: 08:0F:69:AA:2E:A8:F4:1C:A1:A6:3D:5E:9F:56:3B:43:6B:5F:3F:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7029 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2B9C08CB41111ECA8CDB824C4F9AE02.roa Signing time: Wed 10 May 2023 16:42:15 +0000 ROA not before: Wed 10 May 2023 16:42:15 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149202 IP address blocks: 103.178.249.0/24 maxlen: 24 103.188.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28713 (0x7029) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:42:15 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc966-f769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:2f:f8:dc:e4:df:61:31:e0:e7:b4:33:95: d4:80:d2:50:38:b2:45:17:77:06:fe:c0:15:34:c6: 9c:ff:92:18:af:b1:aa:5e:a6:e0:d8:2d:87:fe:a8: 09:4c:36:ad:c7:62:6a:4e:8f:80:4f:6c:a9:4c:ed: 27:08:db:5b:44:4d:60:e4:30:27:75:3a:c3:14:7a: 76:35:5f:43:dc:02:00:6c:cf:23:5c:8b:f5:22:ce: 63:b0:50:ea:29:fe:d3:56:94:01:dd:e5:59:53:38: f5:9c:38:60:df:9d:e7:ac:83:79:83:e2:7c:42:9c: e8:cd:71:bc:35:33:8b:bc:7e:b9:3d:95:19:41:86: 5b:71:ba:d9:77:c6:0c:0b:9c:95:a0:b5:02:0a:00: 3f:0b:a2:06:48:63:09:07:81:ca:0c:04:21:e3:f4: 3c:87:8c:54:e2:87:d5:fd:ff:a0:fc:9f:bb:e5:2f: 95:95:bd:e2:19:06:c8:ee:bd:40:25:18:ba:bd:e2: 48:f6:46:91:26:8a:86:17:a7:0e:50:19:50:19:cf: 04:08:1b:1b:71:ba:ff:f3:45:65:9e:ce:0b:2b:d8: f1:2f:49:ce:ab:69:3c:43:9c:de:6d:95:68:24:e6: 9b:ee:9a:75:7a:c4:6c:33:7e:e4:10:0e:4f:92:7f: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:69:AA:2E:A8:F4:1C:A1:A6:3D:5E:9F:56:3B:43:6B:5F:3F:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2B9C08CB41111ECA8CDB824C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.249.0/24 103.188.91.0/24 Signature Algorithm: sha256WithRSAEncryption 16:9a:ed:42:09:48:ce:1a:0d:91:d0:5b:b0:e7:24:37:c0:97: d2:46:49:a5:8a:64:eb:54:91:01:dd:8b:a9:f1:86:da:7a:39: 83:87:b6:93:a4:c4:58:e6:b8:66:c7:9b:1e:b3:49:b6:a7:94: 2e:62:6e:83:5f:f5:8e:3b:59:db:b6:05:dc:54:ac:d5:30:17: 0a:e7:7a:7e:15:42:d8:16:e0:bc:7b:1f:59:86:6c:3b:6f:f2: e5:48:ca:0b:8a:1c:16:8e:40:fb:f9:e1:dc:8f:0c:b1:d0:9a: 33:ee:64:12:63:eb:b0:c5:fd:56:95:7b:8a:58:0b:fb:83:11: bb:79:e4:30:3b:1e:cb:66:41:e3:be:1e:13:e1:1c:f3:1c:a0: 36:48:4e:f9:96:96:98:1c:de:8d:d2:d7:f5:ce:0c:08:51:30: 04:92:f2:4b:43:66:2f:ad:c4:9a:f1:4f:bb:da:42:e9:8c:7b: a8:e4:60:76:f5:ce:f9:cf:cc:72:c9:89:98:31:74:c8:8f:57: 27:d6:e9:65:7e:89:80:fa:90:d0:9d:18:c0:aa:2d:7c:f2:dd: 2b:52:a5:5c:0c:1f:15:d5:0a:3d:1d:4b:94:e2:6b:55:f1:6d: e7:3b:72:42:ee:b7:18:ff:6d:83:55:35:91:da:b9:97:35:b6: 9a:55:14:a3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICcCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MjE1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzk2Ni1mNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1ov+Nzk32Ex4Oe0M5XUgNJQOLJFF3cG/sAVNMac/5IYr7GqXqbg2C2H/qgJ TDatx2JqTo+AT2ypTO0nCNtbRE1g5DAndTrDFHp2NV9D3AIAbM8jXIv1Is5jsFDq Kf7TVpQB3eVZUzj1nDhg353nrIN5g+J8QpzozXG8NTOLvH65PZUZQYZbcbrZd8YM C5yVoLUCCgA/C6IGSGMJB4HKDAQh4/Q8h4xU4ofV/f+g/J+75S+Vlb3iGQbI7r1A JRi6veJI9kaRJoqGF6cOUBlQGc8ECBsbcbr/80Vlns4LK9jxL0nOq2k8Q5zebZVo JOab7pp1esRsM37kEA5Pkn91oQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAgPaaou qPQcoaY9Xp9WO0NrXz8EMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzJCOUMwOENC NDExMTFFQ0E4Q0RCODI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnsvkDBABnvFswDQYJKoZIhvcNAQELBQADggEBABaa7UIJ SM4aDZHQW7DnJDfAl9JGSaWKZOtUkQHdi6nxhtp6OYOHtpOkxFjmuGbHmx6zSban lC5iboNf9Y47Wdu2BdxUrNUwFwrnen4VQtgW4Lx7H1mGbDtv8uVIyguKHBaOQPv5 4dyPDLHQmjPuZBJj67DF/VaVe4pYC/uDEbt55DA7HstmQeO+HhPhHPMcoDZITvmW lpgc3o3S1/XODAhRMASS8ktDZi+txJrxT7vaQumMe6jkYHb1zvnPzHLJiZgxdMiP VyfW6WV+iYD6kNCdGMCqLXzy3StSpVwMHxXVCj0dS5Tia1Xxbec7ckLutxj/bYNV NZHauZc1tppVFKM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org