$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA4C8A3AD11911ECB6115370C4F9AE02.roa File: CA4C8A3AD11911ECB6115370C4F9AE02.roa (raw, json) Hash identifier: zLmAXagIrrV5DJjKqSFgTuKF/2zzmCzw0shcAYnlZ9o= Subject key identifier: D0:68:61:EF:F2:41:67:79:2C:23:EE:B7:0B:DA:FE:E4:F0:5E:FC:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D65 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA4C8A3AD11911ECB6115370C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:09 +0000 ROA not before: Wed 10 May 2023 16:29:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138263 IP address blocks: 103.124.156.0/23 maxlen: 24 103.132.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28005 (0x6d65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc654-ec54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:7a:b0:23:56:e8:88:1a:2b:2f:78:bb:78: c0:96:1b:82:25:be:f5:14:83:4e:ca:fc:10:26:4c: c2:df:05:e9:3d:ea:d3:36:f7:f1:25:da:1e:6a:26: 8f:16:9c:e4:fb:77:e0:c8:5c:0f:0d:c8:1f:ef:bb: af:b4:9b:c3:4c:cd:de:c4:e9:2e:22:77:01:83:a2: 39:8e:86:d0:6e:3b:ad:39:67:79:6a:d6:78:06:56: 01:ec:55:ee:16:62:f1:82:e4:44:a8:bc:e8:ee:96: 2e:83:90:29:c6:d1:a1:ee:45:73:a3:51:a8:9e:4e: e6:4e:19:2c:75:02:ac:43:bc:56:7e:33:ef:5d:eb: c7:7a:9c:91:e7:7e:cb:54:02:e4:33:2f:4b:ac:5d: c0:6b:69:64:d8:8b:d7:ec:fc:7f:70:b9:9a:a5:7f: 4d:54:49:6b:80:09:43:1d:a0:bd:a7:48:50:8f:fd: 69:18:46:84:c2:10:9d:a2:00:0a:3c:08:b9:12:79: 84:92:d8:ba:83:86:b3:75:db:0f:ef:2f:95:c7:8e: 75:38:a3:e4:ef:0d:13:89:54:23:c1:d2:10:e0:7e: 78:0e:cc:33:0c:17:ba:80:7e:03:f9:ff:5e:65:fc: c5:de:99:6c:0f:2f:fe:b2:e8:cd:b2:d3:49:87:c3: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:61:EF:F2:41:67:79:2C:23:EE:B7:0B:DA:FE:E4:F0:5E:FC:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA4C8A3AD11911ECB6115370C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.156.0/23 103.132.203.0/24 Signature Algorithm: sha256WithRSAEncryption 85:0b:41:38:3f:7b:10:a7:80:b3:49:a7:59:aa:0e:16:03:ae: e0:a5:15:a5:b4:93:e5:af:54:bc:fb:46:60:cc:07:eb:94:d5: 6c:f4:7e:d0:d0:de:d8:43:73:e7:40:d6:4b:52:6b:ed:19:45: 87:5e:bb:91:de:12:bd:21:fb:3d:15:b0:70:59:5c:5e:bc:bf: f1:3c:3c:73:17:ec:28:be:ba:6f:c9:70:8d:91:d3:a6:9c:6a: c1:a6:2d:f2:c1:1e:9a:0c:a4:ed:f5:42:63:80:73:7b:60:11: f3:8b:d3:c5:72:63:b0:39:1b:3f:92:15:82:15:37:b3:46:c8: c3:a1:ca:0b:fd:75:c0:20:3e:01:86:3b:c0:ff:5e:a3:bc:d5: 36:bb:87:72:bc:62:14:61:ed:b2:46:4b:8a:55:d6:7b:e3:93: eb:ff:6f:87:02:93:68:3d:d6:08:19:39:ea:46:58:49:e4:20: 11:7b:9a:54:3f:97:9c:a4:6c:98:f2:26:e8:62:e4:d1:86:cc: 06:be:be:13:20:09:73:65:d0:6a:8a:52:c4:6a:21:29:68:e0: fa:7d:dc:79:8a:f6:36:c1:70:f6:9c:c4:65:e2:46:9e:24:53: 60:3a:26:c5:24:59:fb:b3:6e:bf:10:8f:cc:e4:28:46:df:e4: 64:4c:4b:2e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICbWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY1NC1lYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zF6sCNW6IgaKy94u3jAlhuCJb71FINOyvwQJkzC3wXpPerTNvfxJdoeaiaP Fpzk+3fgyFwPDcgf77uvtJvDTM3exOkuIncBg6I5jobQbjutOWd5atZ4BlYB7FXu FmLxguREqLzo7pYug5ApxtGh7kVzo1Gonk7mThksdQKsQ7xWfjPvXevHepyR537L VALkMy9LrF3Aa2lk2IvX7Px/cLmapX9NVElrgAlDHaC9p0hQj/1pGEaEwhCdogAK PAi5EnmEkti6g4azddsP7y+Vx451OKPk7w0TiVQjwdIQ4H54DswzDBe6gH4D+f9e ZfzF3plsDy/+sujNstNJh8OzEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNBoYe/y QWd5LCPutwva/uTwXvwgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0E0QzhBM0FE MTE5MTFFQ0I2MTE1MzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnfJwDBABnhMswDQYJKoZIhvcNAQELBQADggEBAIULQTg/ exCngLNJp1mqDhYDruClFaW0k+WvVLz7RmDMB+uU1Wz0ftDQ3thDc+dA1ktSa+0Z RYdeu5HeEr0h+z0VsHBZXF68v/E8PHMX7Ci+um/JcI2R06acasGmLfLBHpoMpO31 QmOAc3tgEfOL08VyY7A5Gz+SFYIVN7NGyMOhygv9dcAgPgGGO8D/XqO81Ta7h3K8 YhRh7bJGS4pV1nvjk+v/b4cCk2g91ggZOepGWEnkIBF7mlQ/l5ykbJjyJuhi5NGG zAa+vhMgCXNl0GqKUsRqISlo4Pp93HmK9jbBcPacxGXiRp4kU2A6JsUkWfuzbr8Q j8zkKEbf5GRMSy4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org