$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa File: C663F2BC43A511EB8DC4923AC4F9AE02.roa (raw, json) Hash identifier: TcPW/WKGZHChBHr9zlge3xpYhxBOyUXvip42f07AXeQ= Subject key identifier: 10:0A:87:01:C5:09:A7:05:1D:AB:DD:F8:55:04:98:A2:7C:C1:DC:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EA6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa Signing time: Wed 10 May 2023 16:35:02 +0000 ROA not before: Wed 10 May 2023 16:35:02 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141476 IP address blocks: 103.160.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28326 (0x6ea6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:02 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7b5-c607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:90:49:36:88:74:c1:0a:19:0d:12:eb:71: 04:e4:36:2f:cd:37:b1:a4:db:b4:84:2a:ea:0e:f5: bf:7e:5b:1d:8c:3b:8b:e0:fd:c2:ed:09:c8:e8:16: ee:55:74:e0:d1:b4:bf:d2:07:31:92:3e:bd:c3:c2: e2:40:0a:c4:b3:0b:f0:c6:15:34:a3:62:9d:bd:68: 71:8f:f4:e4:2c:26:bd:90:dd:43:12:e6:1c:fb:83: 74:a1:93:77:3f:21:0a:03:a3:6c:f4:3d:67:30:76: cf:6a:58:62:35:25:53:a7:cc:27:0f:2b:d0:33:07: d7:4d:4f:89:a5:ec:d2:39:2c:d6:24:ac:1e:27:ae: 5f:9b:ff:0e:92:fa:dc:40:b4:73:fa:1c:65:6b:f6: 0f:d4:76:88:20:d4:d0:32:ed:8e:63:55:66:e8:07: 96:8d:b3:b1:fa:d3:34:b3:f6:0f:c8:b1:26:d9:26: be:8b:33:9b:8b:d3:d8:b3:a4:a9:83:17:60:44:29: 98:17:b0:0d:64:4c:3c:02:87:10:87:69:bb:86:ca: 36:26:37:3a:b0:8e:26:fe:cf:d3:fa:f3:0d:ea:c6: 10:87:89:ab:37:05:79:84:9b:ed:e0:e6:6b:a4:7b: 74:55:50:c9:0f:e5:0f:e0:37:6d:47:b8:30:7b:71: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:87:01:C5:09:A7:05:1D:AB:DD:F8:55:04:98:A2:7C:C1:DC:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C663F2BC43A511EB8DC4923AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.190.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:45:e8:e2:f4:7f:02:98:c7:0e:71:aa:e2:18:52:14:70:98: 50:66:51:55:95:7e:dc:89:15:de:7c:da:52:e1:20:1a:0a:bf: 5e:ff:58:ad:8d:5a:11:4f:35:47:d4:a5:2d:83:2b:37:66:c8: a9:f9:d7:e0:df:14:b7:a1:be:9e:a7:e5:85:b6:68:cd:59:a6: b6:be:b7:5e:6e:f5:b0:a4:50:4b:74:b7:32:00:05:0e:a4:9d: cc:97:f1:bf:92:b1:ab:d2:6b:0d:f2:cf:d8:bc:5a:7a:bb:03: d6:b8:f9:89:cd:07:06:19:06:3e:3a:7a:3a:95:ff:23:00:25: 13:c4:df:50:9d:2a:5e:e5:19:be:92:b9:98:67:af:e2:c0:55: 44:ef:49:37:45:42:2b:1f:32:b1:97:b3:98:8c:33:16:f4:c5: d9:8b:3f:59:8c:fa:6a:dc:18:53:78:81:2c:1d:78:a1:1f:eb: 84:6d:36:d0:ab:d9:f0:8c:ed:16:89:59:37:e0:ca:fe:9f:97: 6c:d1:d9:4d:e9:c6:67:0e:a1:b5:09:03:bb:95:29:96:f7:79: b6:e5:21:7d:e0:fd:a4:ac:0f:a3:5a:8c:fd:1d:95:f0:c5:c8: 2c:99:aa:56:78:7a:a9:61:eb:9e:ed:d7:d5:06:88:0c:df:3f: dd:aa:56:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdiNS1jNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTaQSTaIdMEKGQ0S63EE5DYvzTexpNu0hCrqDvW/flsdjDuL4P3C7QnI6Bbu VXTg0bS/0gcxkj69w8LiQArEswvwxhU0o2KdvWhxj/TkLCa9kN1DEuYc+4N0oZN3 PyEKA6Ns9D1nMHbPalhiNSVTp8wnDyvQMwfXTU+JpezSOSzWJKweJ65fm/8Okvrc QLRz+hxla/YP1HaIINTQMu2OY1Vm6AeWjbOx+tM0s/YPyLEm2Sa+izObi9PYs6Sp gxdgRCmYF7ANZEw8AocQh2m7hso2Jjc6sI4m/s/T+vMN6sYQh4mrNwV5hJvt4OZr pHt0VVDJD+UP4DdtR7gwe3EixQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBAKhwHF CacFHavd+FUEmKJ8wdyyMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzY2M0YyQkM0 M0E1MTFFQjhEQzQ5MjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoL4wDQYJKoZIhvcNAQELBQADggEBAD1F6OL0fwKYxw5x quIYUhRwmFBmUVWVftyJFd582lLhIBoKv17/WK2NWhFPNUfUpS2DKzdmyKn51+Df FLehvp6n5YW2aM1Zpra+t15u9bCkUEt0tzIABQ6kncyX8b+SsavSaw3yz9i8Wnq7 A9a4+YnNBwYZBj46ejqV/yMAJRPE31CdKl7lGb6SuZhnr+LAVUTvSTdFQisfMrGX s5iMMxb0xdmLP1mM+mrcGFN4gSwdeKEf64RtNtCr2fCM7RaJWTfgyv6fl2zR2U3p xmcOobUJA7uVKZb3ebblIX3g/aSsD6NajP0dlfDFyCyZqlZ4eqlh657t19UGiAzf P92qVnM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org