$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa File: C84244C28F6411EEBED78B33C4F9AE02.roa (raw, json) Hash identifier: OVqqrjXrsv5DSlUNJEEmZiJV+9KpjlY1L/9lhzDJwYY= Subject key identifier: 01:CB:BB:DF:02:94:67:92:36:9E:B9:A3:92:B5:BE:38:75:2E:CE:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7F1B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa Signing time: Thu 30 Nov 2023 09:54:43 +0000 ROA not before: Thu 30 Nov 2023 09:54:43 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134019 IP address blocks: 45.65.48.0/22 maxlen: 24 103.41.56.0/24 maxlen: 24 103.54.140.0/23 maxlen: 24 103.198.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32539 (0x7f1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 30 09:54:43 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65685be3-ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:72:b9:d6:ce:ab:f1:69:f7:cf:f1:2f:95: 1b:4a:d3:61:77:fe:60:53:c9:10:8b:fc:f6:c9:18: a0:36:68:54:4f:a2:20:18:10:53:34:4d:91:cc:70: bc:54:83:27:e9:80:4e:1a:ed:f8:05:a7:a7:02:bb: e9:d8:0b:77:af:f0:92:23:3c:9e:1c:2a:2f:9a:bd: e9:19:84:eb:0b:a1:12:9b:6b:7e:38:bb:23:bd:7c: 7b:b8:c5:33:9e:5d:d3:46:e3:17:b2:d1:3e:1b:29: ba:5c:1b:6d:cc:0c:93:df:ed:18:54:06:a8:c9:5b: ce:aa:bd:c4:4f:f0:08:8b:da:07:a1:91:a1:cc:46: a8:91:1c:b6:92:c9:9e:94:8c:29:82:63:8f:5a:fe: 3d:d7:df:df:2a:10:40:5b:f3:dd:61:90:d4:00:ae: c9:75:44:c3:6f:99:90:1a:a0:66:0e:7c:46:e2:c1: 3c:7e:fb:d7:5f:1e:6b:23:0f:9f:4a:54:e9:ef:9c: e1:3e:92:7a:64:5e:f3:8b:ef:7c:72:3c:6d:43:84: 01:6b:61:ac:7b:cf:34:5f:32:f1:5d:ad:36:d6:43: cb:a1:59:30:72:cd:8a:a1:cb:b4:4f:16:ca:c1:0a: 15:5a:c6:6f:66:46:1b:16:e2:ec:9a:22:8a:2f:87: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CB:BB:DF:02:94:67:92:36:9E:B9:A3:92:B5:BE:38:75:2E:CE:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C84244C28F6411EEBED78B33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.65.48.0/22 103.41.56.0/24 103.54.140.0/23 103.198.34.0/23 Signature Algorithm: sha256WithRSAEncryption 81:33:98:c8:2f:da:db:5b:44:23:88:d6:82:53:27:46:41:4f: ca:58:8f:3e:a6:61:36:5c:15:ba:21:90:e7:0f:42:ec:e5:c8: 0e:a0:ad:a4:85:44:48:18:2b:3a:92:2d:ec:29:76:f0:4c:66: a8:1f:05:c5:93:cf:c7:2c:ff:1c:7c:f8:af:e1:63:66:6d:4a: c4:fd:6c:15:05:15:9e:7f:5e:a3:19:b6:1c:ee:e9:6b:95:e0: d7:2b:93:fa:94:ae:f1:4a:79:9c:eb:4e:9e:72:72:57:88:0a: 50:14:fe:72:66:c3:49:ac:8e:56:f0:23:63:90:10:b7:46:19: 44:4a:ec:45:c4:52:7b:58:e1:51:87:eb:70:c9:e1:70:a6:ec: ff:84:73:8c:02:b1:2e:74:ed:ca:e5:80:96:af:35:23:34:58: a6:88:a4:09:05:c9:08:2d:5c:17:1c:36:c8:30:b1:bc:62:de: 95:e7:00:93:1b:ec:58:a4:59:11:51:71:99:90:bc:e8:51:23: fe:de:46:93:32:91:08:7a:d1:56:a0:b5:75:ab:14:68:c0:d5: 52:b9:e1:fb:4c:c0:70:78:42:cd:53:dc:7c:14:0e:8f:87:1e: 7c:62:a5:8e:12:c1:82:27:cf:e5:d8:05:0a:a5:f8:b1:4d:1b: 21:0d:16:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICfxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTMwMDk1NDQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4NWJlMy1lY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUtyudbOq/Fp98/xL5UbStNhd/5gU8kQi/z2yRigNmhUT6IgGBBTNE2RzHC8 VIMn6YBOGu34BaenArvp2At3r/CSIzyeHCovmr3pGYTrC6ESm2t+OLsjvXx7uMUz nl3TRuMXstE+Gym6XBttzAyT3+0YVAaoyVvOqr3ET/AIi9oHoZGhzEaokRy2ksme lIwpgmOPWv4919/fKhBAW/PdYZDUAK7JdUTDb5mQGqBmDnxG4sE8fvvXXx5rIw+f SlTp75zhPpJ6ZF7zi+98cjxtQ4QBa2Gse880XzLxXa021kPLoVkwcs2Kocu0TxbK wQoVWsZvZkYbFuLsmiKKL4dhTQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFAHLu98C lGeSNp65o5K1vjh1Ls6NMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzg0MjQ0QzI4 RjY0MTFFRUJFRDc4QjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAItQTADBABnKTgDBAFnNowDBAFnxiIwDQYJKoZIhvcNAQEL BQADggEBAIEzmMgv2ttbRCOI1oJTJ0ZBT8pYjz6mYTZcFbohkOcPQuzlyA6graSF REgYKzqSLewpdvBMZqgfBcWTz8cs/xx8+K/hY2ZtSsT9bBUFFZ5/XqMZthzu6WuV 4Ncrk/qUrvFKeZzrTp5ycleIClAU/nJmw0msjlbwI2OQELdGGURK7EXEUntY4VGH 63DJ4XCm7P+Ec4wCsS507crlgJavNSM0WKaIpAkFyQgtXBccNsgwsbxi3pXnAJMb 7FikWRFRcZmQvOhRI/7eRpMykQh60VagtXWrFGjA1VK54ftMwHB4Qs1T3HwUDo+H HnxipY4SwYInz+XYBQql+LFNGyENFkk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org