$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C715314EBFA111EB9BE9D51BC4F9AE02.roa File: C715314EBFA111EB9BE9D51BC4F9AE02.roa (raw, json) Hash identifier: d5SIBXoXKt90dV41jyF4CtcGv8P7lP0Fav4wcSDGkAs= Subject key identifier: 72:A0:29:6C:71:25:7D:DF:6A:33:DA:BC:33:3B:66:3C:6A:A1:C7:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D27 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C715314EBFA111EB9BE9D51BC4F9AE02.roa Signing time: Wed 10 May 2023 16:27:56 +0000 ROA not before: Wed 10 May 2023 16:27:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137625 IP address blocks: 103.119.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27943 (0x6d27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc60b-51fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:b2:69:27:fd:f1:c5:d9:42:ad:b8:10:32: dd:29:2f:db:ca:1d:44:92:c5:26:13:4c:b4:b6:4e: 01:b8:d4:d1:42:fb:bc:0b:28:a5:6b:90:5a:85:a9: 37:15:81:0b:98:eb:c3:52:4b:aa:aa:10:f9:b3:56: 04:c4:51:26:08:6b:40:50:51:99:46:52:b7:2d:55: ba:5a:d1:49:18:a3:a5:a8:d1:b0:aa:cf:be:22:2a: 67:2e:cd:70:4c:54:9a:97:88:31:ae:11:63:ec:b5: 00:d9:43:74:16:dc:12:ac:b8:d8:39:63:c3:b0:4c: 52:d6:3b:15:82:03:81:e8:33:ed:99:4d:61:96:1e: c8:b2:0c:ae:db:9b:68:8c:f6:35:cf:46:fe:5a:78: 52:3d:67:11:92:03:b4:18:4f:1d:54:88:58:7f:7e: 5f:f9:1d:cd:54:95:60:80:23:8c:51:1a:7a:bd:a6: 41:93:5b:12:76:b3:0f:b7:5c:4d:35:2b:d0:bb:af: fa:fb:0a:01:c2:08:1e:c9:f0:2f:9b:2b:ed:97:e1: cd:8b:31:3d:9c:eb:2f:6f:74:bd:97:c3:c2:2c:f4: 19:0c:78:d1:f1:42:5e:5b:cc:98:83:7e:25:99:3f: e5:35:3e:45:d5:2e:85:8c:57:3f:bb:c0:3a:a5:9f: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A0:29:6C:71:25:7D:DF:6A:33:DA:BC:33:3B:66:3C:6A:A1:C7:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C715314EBFA111EB9BE9D51BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.252.0/24 Signature Algorithm: sha256WithRSAEncryption b7:2c:50:50:d0:85:c9:34:67:33:89:dc:b7:a3:c2:cd:06:0b: 52:8b:36:35:a0:4a:45:f9:ae:cf:12:93:6b:e8:0e:80:88:a0: 77:38:e0:9f:bd:e8:1f:50:cf:71:08:a2:57:ef:08:86:4b:ad: a1:85:65:b6:8e:e2:1a:9e:cc:ae:d3:5b:c9:cd:63:9b:5d:08: 2f:bb:2d:32:87:47:1e:fb:03:18:ef:e7:fe:01:f5:a1:7b:02: 75:ef:7d:25:37:41:95:87:c9:bf:2a:49:e3:e6:57:85:d2:fd: 25:5a:45:4d:32:1e:29:b5:ce:5e:c4:b2:91:32:b6:f3:9a:ff: c8:30:de:9d:d8:1e:24:09:98:a9:2f:8a:0d:19:29:6c:e1:21: 01:4a:69:c1:84:1c:2b:03:8e:7e:fd:30:5c:21:02:2c:f2:5f: ab:35:8a:bc:3d:92:b3:5f:a5:4b:22:29:1e:0e:27:99:22:ef: 86:30:a7:69:0a:f4:ee:0d:73:44:fd:96:cb:ca:d9:0d:53:aa: f5:89:bb:67:6e:da:dd:2e:07:ea:28:54:bf:00:0d:da:98:92: 4f:74:13:84:a9:a5:78:f0:2c:8d:67:00:4f:ff:91:c0:fa:8c: ab:90:0d:ba:2d:e6:eb:1a:d5:14:07:2f:11:d9:50:bd:4a:0f: ab:42:b4:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzYwYi01MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRGyaSf98cXZQq24EDLdKS/byh1EksUmE0y0tk4BuNTRQvu8Cyila5Bahak3 FYELmOvDUkuqqhD5s1YExFEmCGtAUFGZRlK3LVW6WtFJGKOlqNGwqs++IipnLs1w TFSal4gxrhFj7LUA2UN0FtwSrLjYOWPDsExS1jsVggOB6DPtmU1hlh7Isgyu25to jPY1z0b+WnhSPWcRkgO0GE8dVIhYf35f+R3NVJVggCOMURp6vaZBk1sSdrMPt1xN NSvQu6/6+woBwggeyfAvmyvtl+HNizE9nOsvb3S9l8PCLPQZDHjR8UJeW8yYg34l mT/lNT5F1S6FjFc/u8A6pZ/DcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHKgKWxx JX3fajPavDM7ZjxqocdqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzcxNTMxNEVC RkExMTFFQjlCRTlENTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnd/wwDQYJKoZIhvcNAQELBQADggEBALcsUFDQhck0ZzOJ 3Lejws0GC1KLNjWgSkX5rs8Sk2voDoCIoHc44J+96B9Qz3EIolfvCIZLraGFZbaO 4hqezK7TW8nNY5tdCC+7LTKHRx77Axjv5/4B9aF7AnXvfSU3QZWHyb8qSePmV4XS /SVaRU0yHim1zl7EspEytvOa/8gw3p3YHiQJmKkvig0ZKWzhIQFKacGEHCsDjn79 MFwhAizyX6s1irw9krNfpUsiKR4OJ5ki74Ywp2kK9O4Nc0T9lsvK2Q1TqvWJu2du 2t0uB+ooVL8ADdqYkk90E4SppXjwLI1nAE//kcD6jKuQDbot5usa1RQHLxHZUL1K D6tCtIk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org