$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA234A8ED5BB11ECA8BE4666C4F9AE02.roa File: CA234A8ED5BB11ECA8BE4666C4F9AE02.roa (raw, json) Hash identifier: 0itLkf3e52iUkS9jdnF+IOqwGtddu46fFGugrNuWRak= Subject key identifier: 37:B8:16:1C:07:B1:DB:68:C8:A7:EE:1C:F8:32:34:04:0D:39:9B:2F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B9D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA234A8ED5BB11ECA8BE4666C4F9AE02.roa Signing time: Wed 10 May 2023 16:20:32 +0000 ROA not before: Wed 10 May 2023 16:20:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135215 IP address blocks: 103.66.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27549 (0x6b9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:20:32 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc450-515e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:c7:94:8e:52:f4:8e:2b:ee:e6:f2:28:0a: 73:af:de:8d:e0:7f:df:42:75:7e:bd:69:f2:9b:62: 65:7c:10:6d:85:6f:4b:74:f6:ac:20:e2:0e:91:74: 2a:af:9b:9c:5e:49:02:a9:dd:ee:03:48:eb:f1:d9: 38:de:6e:75:b5:9e:7d:3f:e3:55:8d:31:17:05:0f: 77:7f:8e:e5:ad:87:c1:e8:1e:ab:ff:c2:26:d2:c1: 88:3d:53:c4:74:3d:10:e2:85:23:0a:42:6f:b0:62: df:b7:14:22:a4:80:ef:f6:da:3c:d5:29:d1:6b:f6: ae:90:05:1c:46:3c:db:9f:81:95:e8:cf:63:42:ff: 40:ad:0c:db:bd:2e:73:dd:d7:78:4d:f7:ba:43:9f: e0:26:9b:55:fb:61:6d:92:64:1c:52:e9:06:45:f8: be:38:c7:48:52:b4:3f:1d:b8:fd:cc:e3:a0:2f:26: 70:8a:86:44:07:7f:d7:7b:27:c9:e0:6d:06:0a:8b: 24:f9:a4:85:f5:45:3b:48:03:e0:f9:a2:f4:d5:d9: c1:df:46:69:d8:bc:70:71:e9:56:d2:c9:93:31:96: 88:8a:ad:26:51:e2:9a:20:27:be:9c:42:73:13:18: c7:c7:ec:3f:e0:39:d6:4c:6b:b7:c6:b9:ca:dd:67: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:16:1C:07:B1:DB:68:C8:A7:EE:1C:F8:32:34:04:0D:39:9B:2F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA234A8ED5BB11ECA8BE4666C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.20.0/22 Signature Algorithm: sha256WithRSAEncryption ae:8d:63:6c:34:8b:59:9d:00:b3:40:47:65:0a:7b:18:ed:ad: dd:d0:33:2c:1d:d3:63:df:fc:9f:8d:f3:56:61:87:c0:1f:74: e5:10:57:11:d2:ab:e1:23:cc:3d:4e:ed:5f:bc:b7:a0:30:f0: 65:43:01:f2:28:f3:f1:11:60:dc:0b:a3:ba:5b:e6:65:c5:c0: d2:e5:88:88:5b:0f:17:a5:00:e4:c8:68:c3:d1:07:37:2f:cc: 2c:1b:9c:f3:59:b6:75:36:dd:05:36:fc:90:10:fa:9b:0b:d2: 9f:0c:c4:ac:26:c2:26:70:1f:13:ff:50:26:a8:8f:90:c1:eb: 3d:c2:91:54:6c:ff:97:42:47:66:b5:13:ff:6c:f0:c7:a6:72: 7c:66:33:94:b6:ce:9e:1d:ff:49:62:7b:81:96:d3:10:cb:e7: 8c:11:f5:27:08:94:4a:7e:17:91:45:5e:6c:22:b1:4a:11:35: a9:44:24:91:94:11:13:bc:10:f0:45:0a:87:9a:79:04:4e:43: 3d:da:a6:78:81:8c:45:ba:0c:d7:8c:12:15:e8:ba:e7:35:91: 34:01:57:7f:bf:82:c2:79:79:09:eb:03:1b:ef:f6:bd:da:a5: 84:e0:a9:1a:ac:2f:d4:05:3e:0c:98:86:7a:b1:06:49:8c:d2: 8b:87:de:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICa50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMDMyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ1MC01MTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxjHlI5S9I4r7ubyKApzr96N4H/fQnV+vWnym2JlfBBthW9LdPasIOIOkXQq r5ucXkkCqd3uA0jr8dk43m51tZ59P+NVjTEXBQ93f47lrYfB6B6r/8Im0sGIPVPE dD0Q4oUjCkJvsGLftxQipIDv9to81SnRa/aukAUcRjzbn4GV6M9jQv9ArQzbvS5z 3dd4Tfe6Q5/gJptV+2FtkmQcUukGRfi+OMdIUrQ/Hbj9zOOgLyZwioZEB3/XeyfJ 4G0GCosk+aSF9UU7SAPg+aL01dnB30Zp2LxwcelW0smTMZaIiq0mUeKaICe+nEJz ExjHx+w/4DnWTGu3xrnK3WfzXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDe4FhwH sdtoyKfuHPgyNAQNOZsvMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0EyMzRBOEVE NUJCMTFFQ0E4QkU0NjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnQhQwDQYJKoZIhvcNAQELBQADggEBAK6NY2w0i1mdALNA R2UKexjtrd3QMywd02Pf/J+N81Zhh8AfdOUQVxHSq+EjzD1O7V+8t6Aw8GVDAfIo 8/ERYNwLo7pb5mXFwNLliIhbDxelAOTIaMPRBzcvzCwbnPNZtnU23QU2/JAQ+psL 0p8MxKwmwiZwHxP/UCaoj5DB6z3CkVRs/5dCR2a1E/9s8MemcnxmM5S2zp4d/0li e4GW0xDL54wR9ScIlEp+F5FFXmwisUoRNalEJJGUERO8EPBFCoeaeQROQz3apniB jEW6DNeMEhXouuc1kTQBV3+/gsJ5eQnrAxvv9r3apYTgqRqsL9QFPgyYhnqxBkmM 0ouH3pM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org