$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9089282893611EE8C6B6A51C4F9AE02.roa File: C9089282893611EE8C6B6A51C4F9AE02.roa (raw, json) Hash identifier: I2v7u/dh7u5329yncEoejKVJW+peQifGkVNTWl2hSpw= Subject key identifier: 5C:E5:3E:AB:23:66:94:F0:49:13:DD:B6:35:C3:F3:50:6E:C4:D6:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 801A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9089282893611EE8C6B6A51C4F9AE02.roa Signing time: Mon 18 Dec 2023 10:42:59 +0000 ROA not before: Mon 18 Dec 2023 10:42:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151691 IP address blocks: 203.145.42.0/23 maxlen: 24 2401:50a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32794 (0x801a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 18 10:42:59 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65802233-b679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:db:7d:ba:11:d6:06:c1:92:6b:6f:56:21: d3:ee:7d:2c:1c:6c:dc:b0:5b:82:de:bf:0a:43:d9: 93:80:70:16:f9:e3:78:8d:bb:e6:38:4c:63:69:23: ff:30:7c:dd:65:87:71:ae:fe:06:dc:12:95:b0:c5: 4c:3e:2b:22:1e:06:5c:ed:3f:81:2c:ac:01:5d:50: 7f:ed:4e:b0:bd:aa:cc:56:47:15:61:93:a0:48:a5: fa:65:3e:3b:fa:30:06:ef:dd:94:bb:52:20:34:e1: 47:d9:2d:8e:ce:fd:f0:c8:8b:5c:06:b7:39:6b:b1: e5:55:bf:12:91:ad:14:bc:65:4a:ae:b6:0d:39:82: df:9f:52:a8:cc:bd:a9:95:01:e8:83:b5:2b:2e:2e: 39:3c:b0:73:d9:c1:52:c1:9c:1d:28:f8:59:62:0b: c6:d6:ed:a2:7b:b7:84:82:c5:2b:37:9a:2b:0b:7c: 6b:4d:44:47:6f:f4:c2:c3:5d:50:65:37:fb:28:62: fe:32:d5:0a:b6:c7:34:34:f8:d5:42:5c:45:ae:b8: 8f:d8:17:03:06:48:9e:65:26:c2:14:16:d5:f7:16: e7:fb:ad:1e:83:45:56:c9:83:a3:f7:a4:05:e5:3a: ce:79:db:38:bf:95:b6:65:53:b1:90:63:1f:15:3f: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:3E:AB:23:66:94:F0:49:13:DD:B6:35:C3:F3:50:6E:C4:D6:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C9089282893611EE8C6B6A51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.42.0/23 IPv6: 2401:50a0::/32 Signature Algorithm: sha256WithRSAEncryption 61:4c:57:cc:a8:ba:51:15:3b:df:41:23:d0:77:a3:10:e8:60: 78:26:2d:0d:b5:14:0d:6a:ce:fb:0d:32:ef:fa:ab:b2:e2:b7: cb:4b:0e:63:3d:16:85:ec:69:69:43:0a:d1:0a:3b:7b:bb:90: 38:5a:6a:48:3e:10:f6:f0:79:d4:81:bf:ac:cf:2f:be:ad:c1: 3c:77:b8:f3:1b:e4:0f:e8:4e:bc:b4:0a:20:43:d5:0e:e6:76: 6f:75:43:8b:8f:84:fa:0b:1e:4d:5d:f4:81:30:00:f9:27:9f: 6a:12:6d:99:83:4c:4d:96:e7:6c:69:95:dd:9e:e1:82:9c:09: 5e:14:5c:56:55:47:e6:67:f9:c2:ce:c1:fe:c8:0a:77:52:79: 1b:28:c5:5b:ed:eb:a8:4f:a7:e9:1a:be:91:d1:d0:7d:20:d9: c0:c5:cd:82:85:a7:4d:d8:18:31:66:af:4a:2c:da:cd:ba:9e: b2:bb:b0:29:33:6c:68:94:dc:5f:a5:02:89:b2:8c:7f:07:a5: a0:08:18:00:ad:54:b9:4b:a6:c1:eb:73:03:c6:4e:3e:1e:47: c4:70:d2:6e:15:eb:e0:2c:a6:84:6b:ca:38:26:fd:57:4f:b3: a8:fc:39:98:4f:77:e7:d5:b8:c4:ef:98:ec:35:36:66:c6:41: bf:5e:de:04 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAIAaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTIzMTIxODEwNDI1OVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU4MDIyMzMtYjY3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANY02326EdYGwZJrb1Yh0+59LBxs3LBbgt6/CkPZk4BwFvnjeI275jhMY2kj /zB83WWHca7+BtwSlbDFTD4rIh4GXO0/gSysAV1Qf+1OsL2qzFZHFWGToEil+mU+ O/owBu/dlLtSIDThR9ktjs798MiLXAa3OWux5VW/EpGtFLxlSq62DTmC359SqMy9 qZUB6IO1Ky4uOTywc9nBUsGcHSj4WWILxtbtonu3hILFKzeaKwt8a01ER2/0wsNd UGU3+yhi/jLVCrbHNDT41UJcRa64j9gXAwZInmUmwhQW1fcW5/utHoNFVsmDo/ek BeU6znnbOL+VtmVTsZBjHxU/vhECAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRc5T6r I2aU8EkT3bY1w/NQbsTWTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M5MDg5Mjgy ODkzNjExRUU4QzZCNkE1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBy5EqMA0EAgACMAcDBQAkAVCgMA0GCSqGSIb3DQEBCwUA A4IBAQBhTFfMqLpRFTvfQSPQd6MQ6GB4Ji0NtRQNas77DTLv+quy4rfLSw5jPRaF 7GlpQwrRCjt7u5A4WmpIPhD28HnUgb+szy++rcE8d7jzG+QP6E68tAogQ9UO5nZv dUOLj4T6Cx5NXfSBMAD5J59qEm2Zg0xNludsaZXdnuGCnAleFFxWVUfmZ/nCzsH+ yAp3UnkbKMVb7euoT6fpGr6R0dB9INnAxc2ChadN2BgxZq9KLNrNup6yu7ApM2xo lNxfpQKJsox/B6WgCBgArVS5S6bB63MDxk4+HkfEcNJuFevgLKaEa8o4Jv1XT7Oo /DmYT3fn1bjE75jsNTZmxkG/Xt4E -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org