$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3052CDC182E11EB955AA35EC4F9AE02.roa File: C3052CDC182E11EB955AA35EC4F9AE02.roa (raw, json) Hash identifier: LSSeUuuRfpM61sNYlNejiZlmubGldy9RSNLvzh143LM= Subject key identifier: 7C:DD:56:84:CC:E5:2D:E3:38:AE:AB:C7:82:8A:34:20:0D:A6:97:81 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7301 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3052CDC182E11EB955AA35EC4F9AE02.roa Signing time: Wed 31 May 2023 06:22:07 +0000 ROA not before: Wed 31 May 2023 06:22:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135239 IP address blocks: 103.75.224.0/22 maxlen: 22 103.75.224.0/24 maxlen: 24 103.75.225.0/24 maxlen: 24 103.75.226.0/24 maxlen: 24 103.75.227.0/24 maxlen: 24 103.137.28.0/22 maxlen: 24 103.138.28.0/23 maxlen: 24 103.140.106.0/24 maxlen: 24 103.140.107.0/24 maxlen: 24 2401:420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29441 (0x7301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 06:22:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6476e78e-01b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:22:59:31:72:25:90:0a:2e:68:e2:94:d2: 6f:86:e1:10:d8:67:47:a7:ae:7c:68:78:77:86:53: fb:83:ff:5a:26:f7:15:dd:8d:f9:c7:15:53:6e:8c: a4:c8:eb:73:f8:3a:d8:af:f6:cf:56:87:f3:e1:27: 76:92:ed:36:f6:cc:e5:35:22:3a:32:b8:3b:90:b3: 08:12:c9:e4:7e:12:63:c7:aa:27:a1:90:e9:2f:fc: ea:1f:90:8b:be:aa:fe:5e:75:37:2a:e5:5b:14:6c: 30:ab:53:55:4e:11:a3:63:d9:ab:aa:3a:b2:41:b5: 38:b3:c9:4b:81:31:16:20:5e:75:81:87:3a:ae:24: 93:da:b1:f4:ab:96:cb:e7:b3:09:2d:82:ff:08:ab: d2:4e:7b:1f:77:67:98:b4:77:de:0a:3b:00:6a:fd: 90:86:b0:29:3e:e7:66:6c:85:88:bc:c7:99:fa:64: 36:0c:7a:11:b5:79:58:5f:50:b8:fc:78:34:c1:de: 8d:94:98:65:a6:38:f4:c7:5b:a2:22:2c:93:c5:b8: 02:37:b5:bf:23:a7:c6:61:fd:c1:c2:7b:91:a9:92: 58:bd:4a:d4:7d:f6:92:bf:be:74:3c:87:d6:1b:12: 5f:04:61:1c:e6:09:9e:8d:e6:1b:dc:3e:4e:6e:b4: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:56:84:CC:E5:2D:E3:38:AE:AB:C7:82:8A:34:20:0D:A6:97:81 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3052CDC182E11EB955AA35EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.224.0/22 103.137.28.0/22 103.138.28.0/23 103.140.106.0/23 IPv6: 2401:420::/32 Signature Algorithm: sha256WithRSAEncryption 36:1b:68:11:2e:03:b3:44:b8:2e:9a:49:29:4b:22:25:47:4d: ef:90:3a:fb:d3:6a:b8:e9:26:41:3b:4f:be:4d:45:f6:26:54: ec:0f:d0:c7:f8:96:60:51:6f:fa:54:e3:7a:e3:ab:24:61:43: 04:f0:01:b0:2d:bd:0c:3e:63:92:38:7d:19:3f:42:10:75:5b: a5:5c:ae:a1:99:41:b0:6f:b0:1a:91:7e:e2:5b:7a:c3:fe:7b: 7b:f2:c1:9c:81:d5:09:2b:e5:1b:39:c0:8e:bb:63:07:36:10: d6:0c:9f:b8:c5:b7:a4:81:25:72:e4:0e:4c:57:82:8d:c0:3b: aa:f9:c7:09:7c:28:0e:99:4a:f5:d1:fe:5d:04:fd:27:1d:ff: 16:df:74:8c:17:7e:ba:77:4c:43:77:e0:d7:4f:6f:e7:5b:7f: 0b:84:1d:9e:43:71:35:79:dd:19:fb:f4:33:8e:e7:9a:51:8f: f1:cc:ca:06:cc:f7:70:63:6a:a0:11:21:c0:9a:1b:18:b0:63: e1:7e:ae:18:9b:7c:e1:76:13:f7:6d:b7:80:43:0c:4a:9e:ed: cd:c9:97:55:25:f1:34:e3:cc:67:52:4c:71:70:9d:06:b8:ac: 22:e6:95:7a:07:d2:23:d1:c5:12:06:e5:a8:bb:e7:c9:2c:15: 14:33:15:d2 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICcwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTMxMDYyMjA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc2ZTc4ZS0wMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXoiWTFyJZAKLmjilNJvhuEQ2GdHp658aHh3hlP7g/9aJvcV3Y35xxVTboyk yOtz+DrYr/bPVofz4Sd2ku029szlNSI6Mrg7kLMIEsnkfhJjx6onoZDpL/zqH5CL vqr+XnU3KuVbFGwwq1NVThGjY9mrqjqyQbU4s8lLgTEWIF51gYc6riST2rH0q5bL 57MJLYL/CKvSTnsfd2eYtHfeCjsAav2QhrApPudmbIWIvMeZ+mQ2DHoRtXlYX1C4 /Hg0wd6NlJhlpjj0x1uiIiyTxbgCN7W/I6fGYf3BwnuRqZJYvUrUffaSv750PIfW GxJfBGEc5gmejeYb3D5ObrTfpQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHzdVoTM 5S3jOK6rx4KKNCANppeBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzMwNTJDREMx ODJFMTFFQjk1NUFBMzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnS+ADBAJniRwDBAFnihwDBAFnjGowDQQCAAIwBwMFACQB BCAwDQYJKoZIhvcNAQELBQADggEBADYbaBEuA7NEuC6aSSlLIiVHTe+QOvvTarjp JkE7T75NRfYmVOwP0Mf4lmBRb/pU43rjqyRhQwTwAbAtvQw+Y5I4fRk/QhB1W6Vc rqGZQbBvsBqRfuJbesP+e3vywZyB1Qkr5Rs5wI67Ywc2ENYMn7jFt6SBJXLkDkxX go3AO6r5xwl8KA6ZSvXR/l0E/Scd/xbfdIwXfrp3TEN34NdPb+dbfwuEHZ5DcTV5 3Rn79DOO55pRj/HMygbM93BjaqARIcCaGxiwY+F+rhibfOF2E/dtt4BDDEqe7c3J l1Ul8TTjzGdSTHFwnQa4rCLmlXoH0iPRxRIG5ai758ksFRQzFdI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org