$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C37863F2FAF611EDAC2A1A50C4F9AE02.roa File: C37863F2FAF611EDAC2A1A50C4F9AE02.roa (raw, json) Hash identifier: rbxKm2SojmxGLjCftKgNqjuuolqQnAN53t5pQ5dqC/E= Subject key identifier: 53:FC:0B:30:E8:2A:20:1D:A3:B1:A2:F8:50:52:80:F5:22:13:CD:63 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 72BA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C37863F2FAF611EDAC2A1A50C4F9AE02.roa Signing time: Thu 25 May 2023 12:22:07 +0000 ROA not before: Thu 25 May 2023 12:22:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133717 IP address blocks: 103.41.236.0/22 maxlen: 24 111.125.214.0/23 maxlen: 24 111.125.238.0/23 maxlen: 24 111.125.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29370 (0x72ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 25 12:22:07 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646f52ef-0d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:78:80:ac:a1:88:9d:bb:d2:f8:49:40:ba: 33:00:d8:77:08:49:d3:7c:19:0b:0d:ac:05:64:0d: 58:09:43:bc:be:70:3b:23:09:37:4f:fe:0f:fd:05: 2c:26:7a:12:38:0e:a5:e0:7b:c8:5a:85:84:49:a1: 35:43:df:a9:b3:7a:3b:e9:25:a4:f9:6a:49:80:61: 37:db:93:e2:bb:7b:c6:67:c5:e0:fc:a5:7b:33:ca: 57:b6:44:d6:72:4e:ed:6d:d4:c2:bd:a3:74:11:d5: 95:28:28:58:da:8e:68:6a:70:a9:94:46:1f:dc:26: 4c:d9:52:6d:32:16:8c:3f:62:28:8b:ad:35:01:26: 87:db:ac:d8:25:9e:ee:e8:76:77:ee:bc:5d:94:bd: 33:d3:74:ea:69:ee:8f:89:d3:83:5c:8f:e2:30:fd: 08:b5:c5:c6:f5:39:2a:bd:f3:7c:c8:fd:ed:88:30: 4b:05:02:b1:e4:ad:a4:21:25:b1:10:d1:ab:34:4e: 7e:a8:79:22:1f:aa:18:91:eb:e4:78:6f:88:65:e0: 54:3a:e1:64:66:79:86:61:62:59:6e:2a:38:15:2a: 45:ad:26:bb:e4:bd:fa:52:a7:09:d4:8e:54:23:d1: 40:f9:dc:a5:ba:11:b1:c1:bb:81:7a:f8:2f:90:ac: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FC:0B:30:E8:2A:20:1D:A3:B1:A2:F8:50:52:80:F5:22:13:CD:63 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C37863F2FAF611EDAC2A1A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.41.236.0/22 111.125.214.0/23 111.125.238.0/23 111.125.246.0/23 Signature Algorithm: sha256WithRSAEncryption 50:c6:02:f4:0a:26:53:4b:b3:06:06:f5:87:7f:a7:6e:32:ea: a5:fd:23:71:a7:1f:8d:2b:e8:31:fa:3f:80:10:a7:6d:cb:b5: 3e:55:a0:27:be:f5:4c:75:df:f4:66:43:1c:83:ca:7e:61:24: f9:63:2e:2f:c0:60:6e:49:45:7a:31:eb:46:55:19:71:d5:00: 1e:73:4e:ea:ce:84:ee:c6:0f:3c:fb:b8:a6:24:fe:8f:b5:49: 69:e8:2d:e9:39:2c:4e:51:4c:b8:5b:27:f7:62:b3:ef:d5:3d: 19:6f:fb:c2:b1:d6:29:b3:4c:58:df:8b:4a:b2:30:9b:25:c0: 5a:cc:75:5b:50:8f:6f:db:69:7e:07:ee:34:4e:7a:8d:5d:50: d6:3e:6b:81:ce:67:10:39:b1:8e:94:33:b4:cc:20:a6:e9:67: 28:5b:ea:07:df:b2:be:2c:c5:dc:3d:0b:10:39:9f:e6:92:5d: 14:d2:3c:11:83:a3:2f:54:e8:3a:66:9a:73:8c:b4:51:d4:34: 56:64:ac:e3:8d:b0:5a:84:35:d1:0d:92:23:8b:6b:c9:8e:cb: 42:b5:6f:7c:36:53:73:56:6a:c8:c2:f1:0c:61:3f:de:4c:36: fa:af:98:2f:c7:df:84:de:04:ec:1f:50:5b:a3:e5:b3:6d:1d: db:b9:a1:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICcrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTI1MTIyMjA3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZmNTJlZi0wZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJF4gKyhiJ270vhJQLozANh3CEnTfBkLDawFZA1YCUO8vnA7Iwk3T/4P/QUs JnoSOA6l4HvIWoWESaE1Q9+ps3o76SWk+WpJgGE325Piu3vGZ8Xg/KV7M8pXtkTW ck7tbdTCvaN0EdWVKChY2o5oanCplEYf3CZM2VJtMhaMP2Ioi601ASaH26zYJZ7u 6HZ37rxdlL0z03Tqae6PidODXI/iMP0ItcXG9TkqvfN8yP3tiDBLBQKx5K2kISWx ENGrNE5+qHkiH6oYkevkeG+IZeBUOuFkZnmGYWJZbio4FSpFrSa75L36UqcJ1I5U I9FA+dyluhGxwbuBevgvkKxzkQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFP8CzDo KiAdo7Gi+FBSgPUiE81jMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzM3ODYzRjJG QUY2MTFFREFDMkExQTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnKewDBAFvfdYDBAFvfe4DBAFvffYwDQYJKoZIhvcNAQEL BQADggEBAFDGAvQKJlNLswYG9Yd/p24y6qX9I3GnH40r6DH6P4AQp23LtT5VoCe+ 9Ux13/RmQxyDyn5hJPljLi/AYG5JRXox60ZVGXHVAB5zTurOhO7GDzz7uKYk/o+1 SWnoLek5LE5RTLhbJ/dis+/VPRlv+8Kx1imzTFjfi0qyMJslwFrMdVtQj2/baX4H 7jROeo1dUNY+a4HOZxA5sY6UM7TMIKbpZyhb6gffsr4sxdw9CxA5n+aSXRTSPBGD oy9U6DpmmnOMtFHUNFZkrOONsFqENdENkiOLa8mOy0K1b3w2U3NWasjC8QxhP95M NvqvmC/H34TeBOwfUFuj5bNtHdu5oZQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org