$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5F94B7CB6FB11EC882BBC0EC4F9AE02.roa File: C5F94B7CB6FB11EC882BBC0EC4F9AE02.roa (raw, json) Hash identifier: fFY39f0RPKZGO48T+Vg2a+vSe3KZIGn7ScRZ60pPvVQ= Subject key identifier: 52:A0:05:E2:DB:D8:65:F8:12:C0:F4:E4:33:F9:C3:42:0C:48:6C:C0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CB9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5F94B7CB6FB11EC882BBC0EC4F9AE02.roa Signing time: Wed 10 May 2023 16:25:55 +0000 ROA not before: Wed 10 May 2023 16:25:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136712 IP address blocks: 103.103.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27833 (0x6cb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:25:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc593-4de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:a9:eb:01:9e:6a:f8:e8:9e:8c:07:61:da: c7:e6:f0:d8:ae:35:0c:4c:75:21:d0:2f:ff:79:fd: 03:c5:df:02:08:db:60:4b:97:0d:6e:0d:8d:61:65: ab:d3:2d:da:5f:a2:b6:2a:ff:89:88:a9:27:67:5e: 05:53:09:0c:fd:14:70:7b:01:ee:a6:c6:55:3b:da: e4:fc:f8:dc:43:d4:d8:4d:73:a0:d7:5d:a4:5f:25: 59:d9:55:70:de:0e:a6:e0:b3:50:1b:f0:3d:cd:41: 74:e4:47:fe:a6:31:48:e0:a5:89:17:f3:ba:3b:a4: 52:19:34:ab:2b:7a:be:14:28:28:8e:92:8f:48:be: 2f:af:96:60:47:38:28:71:e1:3b:b7:c4:ad:c6:f8: bb:ea:86:5d:0f:b4:14:b8:d8:1a:78:e4:56:19:13: 69:28:80:96:87:83:72:f6:c6:05:14:0e:22:56:b6: ff:a8:c0:be:8f:b3:07:2a:05:d8:24:f7:62:c9:70: b7:1f:94:04:78:c4:77:78:8f:8a:6b:f5:de:9a:9f: 7f:22:47:8a:b2:69:65:02:c0:6a:85:60:3b:e9:0c: 99:50:8b:cd:be:c6:7e:e8:ee:cf:cb:3a:ee:a8:92: 34:20:55:a5:9f:88:dd:33:24:7c:35:24:63:43:36: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A0:05:E2:DB:D8:65:F8:12:C0:F4:E4:33:F9:C3:42:0C:48:6C:C0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5F94B7CB6FB11EC882BBC0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:04:56:6a:cc:66:10:42:c9:f7:ea:bd:81:26:12:4b:d9:00: fd:d6:06:9e:7f:96:88:74:24:f1:21:c6:95:32:2f:88:fd:e6: 57:11:d4:24:24:bd:de:d1:e4:d5:57:7d:e3:79:9f:41:91:28: 5d:76:93:30:83:c1:9e:87:c5:58:09:39:90:60:08:f4:33:0e: bc:b8:8c:0d:ec:a1:a2:6f:49:0b:ed:c7:25:18:5d:0d:06:1e: db:4b:80:04:61:e8:36:b3:9e:ff:0a:cc:e3:fb:20:53:8a:97: dd:1b:9b:3d:b2:1b:ba:58:5c:cf:73:b1:a5:b8:a8:26:c0:64: a3:4e:e0:9b:ae:ce:1e:5e:3c:2b:e4:7a:3b:03:3f:db:f8:93: 29:41:76:5d:da:c2:6f:c7:b9:13:d0:fa:bc:72:06:68:f3:e3: 12:89:6d:36:9f:59:60:56:ac:79:3b:4a:ff:9c:a4:40:70:fb: 35:ca:dd:e9:ae:9f:98:1f:ec:c9:a5:2e:58:d3:fe:76:63:1d: b0:fb:c9:2f:92:f1:d8:ca:d2:5d:9a:ab:ec:57:c3:d3:60:3a: 7d:06:a1:79:a8:e4:79:a7:de:f3:c3:c2:fb:e5:c4:3e:dd:4e: c9:e8:7a:f5:42:73:ac:a4:e2:0f:13:f7:fa:8d:e2:81:df:45: 08:7c:bf:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNTU1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU5My00ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrCp6wGeavjonowHYdrH5vDYrjUMTHUh0C//ef0Dxd8CCNtgS5cNbg2NYWWr 0y3aX6K2Kv+JiKknZ14FUwkM/RRwewHupsZVO9rk/PjcQ9TYTXOg112kXyVZ2VVw 3g6m4LNQG/A9zUF05Ef+pjFI4KWJF/O6O6RSGTSrK3q+FCgojpKPSL4vr5ZgRzgo ceE7t8Stxvi76oZdD7QUuNgaeORWGRNpKICWh4Ny9sYFFA4iVrb/qMC+j7MHKgXY JPdiyXC3H5QEeMR3eI+Ka/Xemp9/IkeKsmllAsBqhWA76QyZUIvNvsZ+6O7Pyzru qJI0IFWln4jdMyR8NSRjQzaQOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFKgBeLb 2GX4EsD05DP5w0IMSGzAMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzVGOTRCN0NC NkZCMTFFQzg4MkJCQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZ6AwDQYJKoZIhvcNAQELBQADggEBAB0EVmrMZhBCyffq vYEmEkvZAP3WBp5/loh0JPEhxpUyL4j95lcR1CQkvd7R5NVXfeN5n0GRKF12kzCD wZ6HxVgJOZBgCPQzDry4jA3soaJvSQvtxyUYXQ0GHttLgARh6Daznv8KzOP7IFOK l90bmz2yG7pYXM9zsaW4qCbAZKNO4Juuzh5ePCvkejsDP9v4kylBdl3awm/HuRPQ +rxyBmjz4xKJbTafWWBWrHk7Sv+cpEBw+zXK3emun5gf7MmlLljT/nZjHbD7yS+S 8djK0l2aq+xXw9NgOn0GoXmo5Hmn3vPDwvvlxD7dTsnoevVCc6yk4g8T9/qN4oHf RQh8v7I= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org