$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa File: C4C9165A3EEE11EB99B2332AC4F9AE02.roa (raw, json) Hash identifier: 0Uacd8XU/+p1Iq6T/sdyU4KPSSmf+ud3hMZVWgIK6L4= Subject key identifier: 14:B2:6D:2A:1E:C4:03:2C:68:1C:69:53:32:88:6D:F1:9B:B7:DD:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 753D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa Signing time: Mon 10 Jul 2023 04:51:27 +0000 ROA not before: Mon 10 Jul 2023 04:51:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141300 IP address blocks: 103.160.108.0/23 maxlen: 24 2001:df2:9dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30013 (0x753d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 10 04:51:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64ab8e4f-2e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:a7:a9:6d:6d:dd:89:25:f8:f5:76:b3:da: 47:66:75:64:7a:b6:ed:46:f8:56:24:62:5e:b8:fb: f8:ba:d2:52:7f:34:ef:83:d4:6d:d9:5f:53:b5:57: 9c:76:22:60:63:9e:c0:a7:1a:eb:b9:ed:5b:98:4f: 39:88:d3:a3:b8:ec:ef:0f:da:9e:09:50:6c:8f:64: a7:77:7c:b6:0f:fb:c2:c2:21:d3:f9:df:cc:87:71: 6f:4c:c7:4f:84:81:77:fc:ac:ef:74:a0:20:b7:62: c0:f4:9c:aa:0f:63:ac:f0:78:d1:d3:47:8a:41:0e: 6b:0b:6a:b6:36:e7:61:76:e7:ea:fc:12:e2:95:79: 1f:05:fa:7a:3d:a9:5e:7a:4e:1d:29:9e:a5:72:6b: 72:dc:bb:85:d4:fd:a4:bb:c9:5d:b5:21:6b:d1:9f: c8:d7:af:2f:7e:cf:38:b2:d5:2e:8d:a9:59:08:58: 19:88:46:61:d2:93:91:d5:03:3c:7f:07:5e:06:f1: 20:f7:fb:e3:15:d7:e5:94:ac:e6:3a:86:9a:f0:54: 09:aa:4b:92:16:e5:44:53:87:7f:5c:22:e3:d5:b5: 01:67:da:a3:9e:c7:46:b4:30:4c:0a:dd:c3:12:5a: d2:c9:4a:af:e5:ef:f9:f7:d3:9b:67:0c:0c:de:0c: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B2:6D:2A:1E:C4:03:2C:68:1C:69:53:32:88:6D:F1:9B:B7:DD:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.108.0/23 IPv6: 2001:df2:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption 85:45:2d:20:e7:31:f3:99:cf:a1:23:79:80:3e:87:39:55:d1: 5c:68:51:22:09:d8:60:83:b4:9c:ea:fc:55:4f:10:6a:37:68: 5d:b5:68:7c:d8:0f:1e:cb:c9:0e:61:2d:82:73:d1:f7:7f:52: 2d:ff:f5:fa:b9:d1:5a:16:a1:c1:92:58:39:c2:66:8e:4e:7a: d0:1e:2a:09:81:b9:fc:be:98:fd:4b:ef:a1:05:40:0b:0d:6a: 85:24:ff:2a:50:3b:19:bf:d7:f6:5d:e4:29:d0:69:f0:9d:51: ac:ea:6c:7a:65:76:b1:ef:c8:b1:73:b7:f5:c2:81:0b:6a:3f: 8a:16:48:b3:e9:5d:31:7c:85:9a:1b:67:67:fd:1d:7c:33:71: c3:8e:d0:9d:ff:c9:cd:87:5a:d4:35:4c:18:34:2a:d1:78:2e: f6:03:6e:06:d4:1d:00:00:90:f0:1e:f4:c1:ff:07:93:fd:ce: 62:8f:f8:13:a3:ec:40:8d:7c:36:b3:11:2a:7a:56:43:89:1f: 67:e1:7c:d1:96:db:ac:25:a6:c3:25:9e:47:6a:fe:c8:8d:93: 1c:e8:6c:46:94:fd:8b:95:9a:dc:ed:4d:9f:a0:d4:b7:6e:2b: 0c:a5:26:9c:5d:bf:87:97:da:2e:ea:c2:ce:55:85:4a:ea:35: b5:16:8a:26 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzEwMDQ1MTI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFiOGU0Zi0yZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUanqW1t3Ykl+PV2s9pHZnVkerbtRvhWJGJeuPv4utJSfzTvg9Rt2V9TtVec diJgY57Apxrrue1bmE85iNOjuOzvD9qeCVBsj2Snd3y2D/vCwiHT+d/Mh3FvTMdP hIF3/KzvdKAgt2LA9JyqD2Os8HjR00eKQQ5rC2q2Nudhdufq/BLilXkfBfp6Pale ek4dKZ6lcmty3LuF1P2ku8ldtSFr0Z/I168vfs84stUujalZCFgZiEZh0pOR1QM8 fwdeBvEg9/vjFdfllKzmOoaa8FQJqkuSFuVEU4d/XCLj1bUBZ9qjnsdGtDBMCt3D ElrSyUqv5e/599ObZwwM3gzBmwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBSybSoe xAMsaBxpUzKIbfGbt91FMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzRDOTE2NUEz RUVFMTFFQjk5QjIzMzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoGwwDwQCAAIwCQMHACABDfKdwDANBgkqhkiG9w0BAQsF AAOCAQEAhUUtIOcx85nPoSN5gD6HOVXRXGhRIgnYYIO0nOr8VU8QajdoXbVofNgP HsvJDmEtgnPR939SLf/1+rnRWhahwZJYOcJmjk560B4qCYG5/L6Y/UvvoQVACw1q hST/KlA7Gb/X9l3kKdBp8J1RrOpsemV2se/IsXO39cKBC2o/ihZIs+ldMXyFmhtn Z/0dfDNxw47Qnf/JzYda1DVMGDQq0Xgu9gNuBtQdAACQ8B70wf8Hk/3OYo/4E6Ps QI18NrMRKnpWQ4kfZ+F80ZbbrCWmwyWeR2r+yI2THOhsRpT9i5Wa3O1Nn6DUt24r DKUmnF2/h5faLurCzlWFSuo1tRaKJg== -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:35 2024 by rpki-client on console-fra.rpki-client.org