$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa File: CADAF78636B511EEB24C0246C4F9AE02.roa (raw, json) Hash identifier: IlM3FMja912cQwWkN1SC24h8f4G2AOdEoYv4U6MzLfM= Subject key identifier: F3:1B:D1:4F:35:06:45:06:7D:E9:27:3E:0A:AE:C7:59:28:30:C3:65 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 773B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa Signing time: Wed 09 Aug 2023 13:16:18 +0000 ROA not before: Wed 09 Aug 2023 13:16:18 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138247 IP address blocks: 103.127.160.0/24 maxlen: 24 2001:df7:6d00::/49 maxlen: 49 2001:df7:6d00:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30523 (0x773b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 9 13:16:18 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64d391a2-bf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:a1:0c:e1:c6:f1:4f:d4:d4:26:09:92:92: 7b:25:68:9c:71:12:23:78:d7:87:31:4b:24:4e:d9: 55:2f:2f:4e:e2:21:bc:77:b4:a7:c5:22:73:e5:45: dd:f3:e2:fe:bc:0f:68:7f:30:f9:d2:04:bb:b8:fa: 98:37:a1:f4:73:b9:7a:d9:03:20:56:8b:c0:b6:7a: 3b:07:90:dc:8a:c3:ed:cb:3b:bc:c5:a5:53:03:bd: 34:fa:f7:7a:2d:61:7f:1d:c3:0a:bb:85:64:7f:77: 4c:da:49:fc:08:c6:f4:f2:3c:1c:7c:b5:2d:8f:1b: a9:18:db:7f:22:67:63:3b:ee:e5:c0:f7:ad:31:40: 0c:9b:90:aa:b5:90:fa:cf:c5:80:37:98:3f:a3:f6: 9f:da:17:b4:e5:84:c8:af:8b:a0:fa:00:c6:1a:6c: 0b:6b:ff:58:e1:34:be:a4:fa:95:0d:4c:77:a5:39: 29:79:fb:6f:2c:f2:69:b4:97:84:3a:de:f1:73:ac: a5:0a:df:82:b1:92:5e:d3:27:4c:06:38:57:03:ff: 24:37:f4:1c:ab:48:cc:9c:ac:18:87:0f:39:8c:86: 9d:ca:47:25:da:3c:e8:54:99:3f:4d:87:13:14:01: af:ec:48:67:dc:ec:bd:85:73:e9:9e:0a:f9:8d:88: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:D1:4F:35:06:45:06:7D:E9:27:3E:0A:AE:C7:59:28:30:C3:65 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.160.0/24 IPv6: 2001:df7:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 01:af:7d:4d:75:71:dd:55:88:de:d9:85:d4:db:80:14:e5:ba: 73:8e:5c:5b:9b:fc:c9:87:3e:03:b4:66:2c:57:60:1e:32:68: 46:46:a2:11:f8:5f:25:fb:10:3a:7c:28:fd:f7:c4:87:c8:9a: 2e:02:c9:b0:97:5b:e7:48:7d:71:98:5e:21:d0:a4:24:78:ac: f1:d5:22:ba:d8:8b:ba:4c:0d:48:8b:06:9a:c4:84:19:2c:c3: ed:b9:19:33:03:b0:6b:76:75:2c:0a:c0:52:f2:b7:d5:3b:89: 8c:bf:30:8f:bd:a6:c5:49:f7:40:fe:e2:ab:5f:17:d8:09:07: 9d:a7:32:93:7b:62:8d:3e:30:0b:d0:60:b1:e6:de:3d:72:e1: 23:4f:37:6f:84:2c:cd:37:c2:09:9a:f2:e5:b1:39:2c:29:05: 58:42:0e:4a:5e:18:54:3d:50:65:47:53:6d:b4:a8:7d:ce:90: 9f:87:75:20:e5:29:f4:fc:b9:15:77:a3:23:d4:9d:db:41:34: 82:07:e6:03:c8:b2:1b:ee:5d:1b:60:74:43:13:19:a8:7f:8f: 8d:b8:3c:57:0b:f2:8d:2a:19:8b:6d:c6:ec:96:fc:bf:8c:e4: 8d:5d:ef:54:96:4b:85:e3:9b:ed:e2:80:de:90:80:e4:4d:4a: 92:b9:55:ef -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICdzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwODA5MTMxNjE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQzOTFhMi1iZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBuhDOHG8U/U1CYJkpJ7JWiccRIjeNeHMUskTtlVLy9O4iG8d7SnxSJz5UXd 8+L+vA9ofzD50gS7uPqYN6H0c7l62QMgVovAtno7B5DcisPtyzu8xaVTA700+vd6 LWF/HcMKu4Vkf3dM2kn8CMb08jwcfLUtjxupGNt/ImdjO+7lwPetMUAMm5CqtZD6 z8WAN5g/o/af2he05YTIr4ug+gDGGmwLa/9Y4TS+pPqVDUx3pTkpeftvLPJptJeE Ot7xc6ylCt+CsZJe0ydMBjhXA/8kN/Qcq0jMnKwYhw85jIadykcl2jzoVJk/TYcT FAGv7Ehn3Oy9hXPpngr5jYg6CQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPMb0U81 BkUGfeknPgqux1koMMNlMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0FEQUY3ODYz NkI1MTFFRUIyNEMwMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnf6AwDwQCAAIwCQMHACABDfdtADANBgkqhkiG9w0BAQsF AAOCAQEAAa99TXVx3VWI3tmF1NuAFOW6c45cW5v8yYc+A7RmLFdgHjJoRkaiEfhf JfsQOnwo/ffEh8iaLgLJsJdb50h9cZheIdCkJHis8dUiutiLukwNSIsGmsSEGSzD 7bkZMwOwa3Z1LArAUvK31TuJjL8wj72mxUn3QP7iq18X2AkHnacyk3tijT4wC9Bg sebePXLhI083b4QszTfCCZry5bE5LCkFWEIOSl4YVD1QZUdTbbSofc6Qn4d1IOUp 9Py5FXejI9Sd20E0ggfmA8iyG+5dG2B0QxMZqH+Pjbg8VwvyjSoZi23G7Jb8v4zk jV3vVJZLheOb7eKA3pCA5E1KkrlV7w== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org