$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa File: C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa (raw, json) Hash identifier: hZ9pbh4/x4MMdrh6nU/rSdv4Eic8R4ke3RKPtZ4u7Qc= Subject key identifier: CD:E8:75:F8:29:7C:3F:A5:59:90:B2:BE:4A:6B:9F:A3:B7:BD:B6:29 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E4F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa Signing time: Wed 10 May 2023 16:33:28 +0000 ROA not before: Wed 10 May 2023 16:33:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140203 IP address blocks: 103.155.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28239 (0x6e4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc758-bf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:5b:a6:e6:11:ac:97:23:cc:06:73:0e:62: ea:f8:53:62:75:50:a8:b6:ef:7e:e2:23:7d:52:fc: b6:ce:74:e3:3f:c4:b9:7a:6c:77:a6:30:c7:ce:f0: 7a:56:df:d5:3b:bc:d2:33:0d:52:3f:49:b2:a1:98: 86:8c:23:90:d0:e0:5a:97:a1:00:d6:50:19:42:35: 87:02:51:0f:cb:18:65:40:5d:5e:8a:d4:c5:7c:fb: 09:c4:b1:19:00:2b:13:8c:fa:0e:24:70:be:a1:89: 1c:d1:c7:81:ea:ba:8f:28:21:cf:f4:67:e9:83:61: be:be:e5:1e:2d:1f:65:40:50:4e:88:5c:5c:43:af: cf:a6:71:71:9c:dc:95:51:a3:f0:07:d6:c8:71:96: 21:48:49:cb:a6:ec:5b:d4:98:03:7f:0e:a0:64:c3: 87:30:ec:c1:7a:84:01:43:38:f7:7a:c5:b8:4a:2e: 81:5d:b9:f0:22:74:0c:9f:51:16:69:a9:b3:2f:58: af:57:5f:f6:0d:df:9a:2c:ea:27:a7:79:a9:d1:84: 80:78:2b:fd:e3:b5:8c:cc:0f:fe:72:a8:9c:39:08: 55:1a:06:3f:52:70:63:68:42:cc:40:e9:fa:03:7a: ef:ae:6f:0f:51:af:d8:36:bc:5b:b5:71:b2:f9:19: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:75:F8:29:7C:3F:A5:59:90:B2:BE:4A:6B:9F:A3:B7:BD:B6:29 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7FAEE7CFE1E11EAB49F5939C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.220.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b5:f9:ac:5b:c9:18:aa:e8:d7:9b:5c:c7:49:e3:3f:3b:3c: 1e:7f:9c:c7:e4:af:5d:a7:b0:7a:a9:21:27:af:f3:1e:94:9a: c4:a8:6b:55:08:ab:82:7f:7e:3f:56:74:56:68:4d:cd:e2:dc: 8f:2b:bc:57:fe:2d:f0:19:de:b3:e7:cd:f4:f9:e1:d5:48:04: 8d:f2:99:d1:93:dc:9f:24:d9:ec:e0:73:96:a9:cf:bc:87:93: 4c:a1:c9:15:9b:88:c3:00:7f:09:15:22:1d:40:36:f3:b4:a6: ef:d2:7b:c3:a2:54:53:af:a7:47:8f:5b:db:36:c2:e4:05:1c: 91:84:7c:1a:d5:d3:c9:85:cc:84:5b:d9:16:90:88:07:16:17: 45:07:c9:57:8c:d2:da:f9:b6:66:43:ac:e3:91:50:d4:34:64: b0:f1:27:63:7d:57:ae:d9:ea:6f:21:55:02:8d:2d:6c:ec:13: 01:b5:20:a6:0f:2f:e1:87:56:be:d4:0e:7d:91:ea:67:90:97: fa:cc:9e:26:27:38:24:57:6f:07:ec:e6:2c:67:f3:7b:6c:12: 2f:2e:85:5e:48:28:7d:0f:8f:b4:da:7e:40:30:47:0e:d9:2e: 1c:24:d7:91:b5:61:b1:c9:ee:f8:64:a1:2d:36:71:fe:53:b0: c1:b6:16:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc1OC1iZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiRbpuYRrJcjzAZzDmLq+FNidVCotu9+4iN9Uvy2znTjP8S5emx3pjDHzvB6 Vt/VO7zSMw1SP0myoZiGjCOQ0OBal6EA1lAZQjWHAlEPyxhlQF1eitTFfPsJxLEZ ACsTjPoOJHC+oYkc0ceB6rqPKCHP9Gfpg2G+vuUeLR9lQFBOiFxcQ6/PpnFxnNyV UaPwB9bIcZYhSEnLpuxb1JgDfw6gZMOHMOzBeoQBQzj3esW4Si6BXbnwInQMn1EW aamzL1ivV1/2Dd+aLOonp3mp0YSAeCv947WMzA/+cqicOQhVGgY/UnBjaELMQOn6 A3rvrm8PUa/YNrxbtXGy+RklawIDAQABo4IClTCCApEwHQYDVR0OBBYEFM3odfgp fD+lWZCyvkprn6O3vbYpMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzdGQUVFN0NG RTFFMTFFQUI0OUY1OTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnm9wwDQYJKoZIhvcNAQELBQADggEBAFG1+axbyRiq6Neb XMdJ4z87PB5/nMfkr12nsHqpISev8x6UmsSoa1UIq4J/fj9WdFZoTc3i3I8rvFf+ LfAZ3rPnzfT54dVIBI3ymdGT3J8k2ezgc5apz7yHk0yhyRWbiMMAfwkVIh1ANvO0 pu/Se8OiVFOvp0ePW9s2wuQFHJGEfBrV08mFzIRb2RaQiAcWF0UHyVeM0tr5tmZD rOORUNQ0ZLDxJ2N9V67Z6m8hVQKNLWzsEwG1IKYPL+GHVr7UDn2R6meQl/rMniYn OCRXbwfs5ixn83tsEi8uhV5IKH0Pj7TafkAwRw7ZLhwk15G1YbHJ7vhkoS02cf5T sMG2FhI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org