$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C98F0432CA1111EDB3F28B42C4F9AE02.roa File: C98F0432CA1111EDB3F28B42C4F9AE02.roa (raw, json) Hash identifier: M5XDwPxDVsxM/nkXI7Q7pTX5sTqeaW/eWipFsIX1mno= Subject key identifier: 6F:15:8F:F0:C9:2D:88:A9:44:7F:28:C2:B5:E7:4B:FE:DD:D1:1F:B1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 70C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C98F0432CA1111EDB3F28B42C4F9AE02.roa Signing time: Wed 10 May 2023 16:45:06 +0000 ROA not before: Wed 10 May 2023 16:45:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150044 IP address blocks: 103.89.44.0/24 maxlen: 24 103.89.45.0/24 maxlen: 24 103.178.248.0/24 maxlen: 24 103.190.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28868 (0x70c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:45:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca12-f6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:08:ea:4b:7b:96:e4:d4:c8:ae:73:04:5d:fa: 86:af:44:d8:7b:db:06:e1:74:1d:52:1b:59:ad:81: 71:ac:c8:ac:e9:0c:c0:b7:8e:f0:c2:37:66:ab:53: 6d:d3:6a:6a:d5:76:1c:ef:24:dd:03:cb:4b:52:b7: a4:7a:66:8a:64:a8:03:ec:02:21:58:a3:bb:84:94: 64:3c:05:7a:db:bf:58:b0:c2:c5:f5:ea:28:70:bf: de:6f:20:0a:cf:a3:2e:b8:fa:e5:36:ec:d9:16:79: 06:1d:a3:ed:87:44:46:47:9c:09:df:3a:61:20:93: f6:7d:c8:df:7c:ef:f1:8a:ce:70:39:7d:aa:a0:08: 24:af:20:c6:8d:70:fc:3a:46:ad:34:4b:31:88:d2: d1:ca:20:c8:69:4f:6a:47:03:a8:ec:fa:16:4b:96: a7:18:57:60:20:20:f9:36:07:fb:a8:72:a7:6b:3b: 47:e9:1e:7f:3c:5e:c5:f0:8d:86:59:b3:a1:b9:72: 01:19:c3:4b:ca:1a:33:58:41:f1:b1:7f:94:14:c8: d0:9e:93:ee:9c:85:e2:3f:eb:78:18:ef:45:76:97: d0:44:73:ea:84:47:cc:ea:be:c4:56:a1:24:5d:c0: 5f:7d:de:e9:49:b0:0e:5c:4d:b9:d6:37:48:a6:ca: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:15:8F:F0:C9:2D:88:A9:44:7F:28:C2:B5:E7:4B:FE:DD:D1:1F:B1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C98F0432CA1111EDB3F28B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.44.0/23 103.178.248.0/24 103.190.95.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a0:b0:cb:5a:eb:ed:fd:95:99:51:ed:92:3e:8e:d8:21:ac: 78:cc:29:89:c5:b1:bc:5d:05:d8:72:49:8b:c5:49:f7:c8:cc: 24:27:9e:14:a6:d7:8d:af:75:38:fd:b7:fa:ed:32:02:db:64: 55:f5:8d:57:3c:1c:b5:22:6d:fa:47:13:12:45:58:4e:f1:fe: b0:12:f5:07:2f:4d:35:5a:f2:de:c7:63:e7:79:b6:7e:65:57: 74:13:ff:45:23:26:66:12:44:81:b6:90:12:cd:e6:c0:22:b8: d8:ed:cc:14:5b:85:d4:1b:24:a2:9e:f9:55:ec:63:95:2e:b3: 11:29:a9:52:2b:91:9d:ec:41:13:3e:ae:ba:cd:ae:98:10:07: a5:76:c9:75:fe:48:a2:aa:0f:2b:c6:b4:14:7e:05:83:0f:01: 49:1a:a9:6f:c2:4d:c1:77:47:e6:49:c2:d3:87:c5:37:41:5e: 36:b0:12:63:8d:c5:80:4f:8d:2f:db:23:80:bf:14:23:5f:9b: 90:13:71:8c:88:7a:92:fc:8e:ad:77:02:56:1b:2d:1e:77:a6: 2c:7b:eb:ad:cc:ba:3c:2a:64:d4:05:51:d6:b6:f2:67:e7:79: ca:f4:7b:a5:65:4a:ee:2e:81:9c:69:3a:05:1a:07:d5:1f:2f: 43:fc:90:3e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICcMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NTA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2ExMi1mNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wjqS3uW5NTIrnMEXfqGr0TYe9sG4XQdUhtZrYFxrMis6QzAt47wwjdmq1Nt 02pq1XYc7yTdA8tLUrekemaKZKgD7AIhWKO7hJRkPAV6279YsMLF9eoocL/ebyAK z6MuuPrlNuzZFnkGHaPth0RGR5wJ3zphIJP2fcjffO/xis5wOX2qoAgkryDGjXD8 OkatNEsxiNLRyiDIaU9qRwOo7PoWS5anGFdgICD5Ngf7qHKnaztH6R5/PF7F8I2G WbOhuXIBGcNLyhozWEHxsX+UFMjQnpPunIXiP+t4GO9FdpfQRHPqhEfM6r7EVqEk XcBffd7pSbAOXE251jdIpsr5dQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFG8Vj/DJ LYipRH8owrXnS/7d0R+xMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzk4RjA0MzJD QTExMTFFREIzRjI4QjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnWSwDBABnsvgDBABnvl8wDQYJKoZIhvcNAQELBQADggEB AI6gsMta6+39lZlR7ZI+jtghrHjMKYnFsbxdBdhySYvFSffIzCQnnhSm142vdTj9 t/rtMgLbZFX1jVc8HLUibfpHExJFWE7x/rAS9QcvTTVa8t7HY+d5tn5lV3QT/0Uj JmYSRIG2kBLN5sAiuNjtzBRbhdQbJKKe+VXsY5UusxEpqVIrkZ3sQRM+rrrNrpgQ B6V2yXX+SKKqDyvGtBR+BYMPAUkaqW/CTcF3R+ZJwtOHxTdBXjawEmONxYBPjS/b I4C/FCNfm5ATcYyIepL8jq13AlYbLR53pix7663MujwqZNQFUda28mfnecr0e6Vl Su4ugZxpOgUaB9UfL0P8kD4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org