$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa File: C67219F6D4D111EBBFFECF71C4F9AE02.roa (raw, json) Hash identifier: 1/CEga179UbpubLp0kegsHisD4PJwjHqIIoKDqP8MDg= Subject key identifier: 0A:3B:6A:C4:CB:A0:53:28:F6:1E:8D:FC:3E:ED:9A:EB:49:79:48:D6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F5A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:23 +0000 ROA not before: Wed 10 May 2023 16:38:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142466 IP address blocks: 103.168.222.0/23 maxlen: 24 2001:df6:df80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28506 (0x6f5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc87f-9222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:c5:38:93:6d:9a:0c:35:e1:73:bb:34:74: ba:d1:48:33:ec:0e:82:77:e3:f4:41:3c:14:1e:03: cc:ef:4c:e7:87:57:64:92:e0:ec:46:f5:54:f4:2a: 95:31:e9:9f:c2:19:d6:3c:99:b3:c3:13:4e:a2:46: fd:d8:c6:ee:47:cf:d4:81:e7:95:b8:7c:88:88:46: 20:d5:5a:2e:1d:d7:b9:2a:b5:ac:98:62:d3:f4:b4: 57:ce:1f:30:02:aa:c7:a6:ec:19:03:11:63:1e:20: 5d:06:50:80:0a:16:1d:77:5f:75:67:7a:96:06:84: 5c:af:3f:d4:4b:67:4f:68:c2:2a:e6:14:a3:ef:db: ba:75:39:f7:c2:66:d5:7b:1c:65:17:96:b4:24:4f: 59:82:a6:e8:3e:71:da:07:5e:50:f9:bf:59:c2:54: 7b:47:0b:3e:c0:bc:e1:de:df:84:74:c8:c1:f2:6d: b6:0d:ae:43:32:10:fd:be:95:b2:a2:3e:bd:2a:55: c8:96:74:11:93:fb:51:de:24:5e:d9:db:14:e2:6b: f6:3c:2f:81:99:75:a7:19:df:be:dc:af:2e:de:3f: ff:2d:7a:25:5f:7d:66:23:ef:41:a3:a4:b8:7e:0e: 2f:e9:f9:09:a4:a5:aa:70:cd:3f:52:7f:46:dc:f6: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3B:6A:C4:CB:A0:53:28:F6:1E:8D:FC:3E:ED:9A:EB:49:79:48:D6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.222.0/23 IPv6: 2001:df6:df80::/48 Signature Algorithm: sha256WithRSAEncryption 33:14:af:86:e7:bc:d4:a2:13:28:f1:37:02:ea:9a:2d:d4:cf: 15:0f:67:db:cb:40:74:e6:3f:6e:40:8f:9e:45:2f:30:eb:8c: 78:00:e4:4a:4b:62:97:93:f6:df:f8:ca:35:3f:30:4f:46:ec: 7e:1f:38:5d:7a:61:1e:bf:18:21:26:cb:f2:3f:b8:04:48:13: 29:3a:a2:5b:a0:c7:57:6d:db:43:7c:d3:3c:ff:8b:b4:d8:ce: 6a:74:1b:e5:3f:2e:81:2f:72:04:77:8b:8f:18:3f:b1:52:87: e7:71:db:7b:fd:c6:f7:58:12:3a:c4:c1:2b:fb:64:25:75:db: ad:9c:9f:de:60:9a:c6:3d:e0:bb:11:6f:f9:88:90:e5:0a:c3: e7:2d:07:06:5a:c8:ba:99:8d:a6:eb:d8:dd:c0:33:a5:6c:de: 19:b1:6c:a9:29:d8:66:9e:ee:33:cf:22:25:b5:98:84:cb:7b: 35:dc:e4:5b:2c:d9:5f:6f:54:32:8c:db:99:6a:3e:25:d3:a2: 9d:08:ca:38:b9:7c:8e:34:3d:8b:7f:8b:cd:07:7f:cf:4d:18: db:1e:18:e1:f2:ec:9f:42:c5:d7:73:a8:4e:30:82:62:c6:34: ac:70:d6:c8:39:0c:40:41:e1:34:8b:03:46:59:68:7d:b7:19: a6:2a:0c:03 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICb1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg3Zi05MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDDFOJNtmgw14XO7NHS60Ugz7A6Cd+P0QTwUHgPM70znh1dkkuDsRvVU9CqV MemfwhnWPJmzwxNOokb92MbuR8/UgeeVuHyIiEYg1VouHde5KrWsmGLT9LRXzh8w AqrHpuwZAxFjHiBdBlCAChYdd191Z3qWBoRcrz/US2dPaMIq5hSj79u6dTn3wmbV exxlF5a0JE9ZgqboPnHaB15Q+b9ZwlR7Rws+wLzh3t+EdMjB8m22Da5DMhD9vpWy oj69KlXIlnQRk/tR3iRe2dsU4mv2PC+BmXWnGd++3K8u3j//LXolX31mI+9Bo6S4 fg4v6fkJpKWqcM0/Un9G3PYa7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAo7asTL oFMo9h6N/D7tmutJeUjWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzY3MjE5RjZE NEQxMTFFQkJGRkVDRjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqN4wDwQCAAIwCQMHACABDfbfgDANBgkqhkiG9w0BAQsF AAOCAQEAMxSvhue81KITKPE3AuqaLdTPFQ9n28tAdOY/bkCPnkUvMOuMeADkSkti l5P23/jKNT8wT0bsfh84XXphHr8YISbL8j+4BEgTKTqiW6DHV23bQ3zTPP+LtNjO anQb5T8ugS9yBHeLjxg/sVKH53Hbe/3G91gSOsTBK/tkJXXbrZyf3mCaxj3guxFv +YiQ5QrD5y0HBlrIupmNpuvY3cAzpWzeGbFsqSnYZp7uM88iJbWYhMt7NdzkWyzZ X29UMozbmWo+JdOinQjKOLl8jjQ9i3+LzQd/z00Y2x4Y4fLsn0LF13OoTjCCYsY0 rHDWyDkMQEHhNIsDRllofbcZpioMAw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org