$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDBFAF34DB3911EBBFBEC95EC4F9AE02.roa File: CDBFAF34DB3911EBBFBEC95EC4F9AE02.roa (raw, json) Hash identifier: aR5gslN4zPBkpOtUPFDNVCqbM9TkugeTYW/1UxhVeCc= Subject key identifier: 38:71:78:80:22:65:DD:39:1B:B4:F0:18:23:04:D1:1F:A0:58:81:DC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D2C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDBFAF34DB3911EBBFBEC95EC4F9AE02.roa Signing time: Wed 10 May 2023 16:28:01 +0000 ROA not before: Wed 10 May 2023 16:28:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137633 IP address blocks: 103.115.128.0/24 maxlen: 24 103.115.129.0/24 maxlen: 24 103.115.130.0/24 maxlen: 24 103.115.131.0/24 maxlen: 24 103.170.48.0/23 maxlen: 24 2001:df1:6240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27948 (0x6d2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:28:01 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc610-6070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:77:b6:0f:d6:67:c8:e4:56:5a:10:68:b3: 75:70:07:1f:69:bf:b0:10:54:0f:1c:7d:2e:d4:8e: b9:09:88:d1:0d:84:f7:48:8b:1c:10:b6:b4:2b:33: b9:b0:a5:b8:0d:03:ee:30:36:2f:14:c3:f3:5b:d9: b4:73:65:ce:3a:ef:13:0c:a0:3e:1a:d7:b9:e0:01: d0:a7:e4:5d:51:69:2b:50:31:25:a1:7f:f9:8a:f4: d9:6c:d8:28:22:f3:f2:b2:01:f8:91:ef:a1:8e:72: 77:a8:2b:4e:77:7b:87:c4:43:ab:c3:8d:34:cc:d7: 09:d2:1c:63:4c:da:05:02:a1:9f:08:8a:ae:1a:8f: 9e:31:54:71:a4:39:4b:35:8f:36:03:99:d0:18:8f: dc:36:84:ca:e4:3a:80:ed:89:68:b9:86:27:5f:49: 24:6b:af:03:6f:3e:92:34:72:4a:a5:dd:22:90:6a: 9b:e8:22:6a:56:e0:43:11:e6:6c:41:ef:4c:27:5a: 1a:f0:db:fb:c9:44:7d:9a:44:a2:bd:a5:1a:b4:31: 99:c8:38:76:f2:72:4d:81:39:a9:57:89:27:af:fa: 3c:3e:af:8f:ca:27:cc:12:ad:83:61:dc:d3:a7:94: 0a:8d:83:ff:9d:51:32:24:c5:ce:54:b8:7a:92:53: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:71:78:80:22:65:DD:39:1B:B4:F0:18:23:04:D1:1F:A0:58:81:DC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDBFAF34DB3911EBBFBEC95EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.128.0/22 103.170.48.0/23 IPv6: 2001:df1:6240::/48 Signature Algorithm: sha256WithRSAEncryption 62:a2:89:9f:79:58:bd:55:29:d8:a3:33:98:d4:c9:b1:3c:fc: e9:e8:aa:65:02:22:27:da:43:be:b7:a0:57:71:4c:ca:3a:e7: 16:e1:cd:44:11:5e:9b:96:e3:b9:cf:08:c9:52:47:10:f6:8a: 3e:bd:3b:7a:17:78:80:2c:4e:0a:ad:cd:e3:72:89:dc:89:a7: ab:63:41:e6:f1:fe:be:00:56:3a:1a:5b:60:19:03:86:f1:7b: 11:ce:82:45:7a:f6:ef:5e:de:e0:08:51:ab:9b:6d:83:1c:52: e6:82:97:da:fd:6b:86:f2:f9:67:2a:27:9d:ff:a2:1c:e8:17: 73:fd:b3:0c:7a:57:2d:d5:b4:1d:0e:5c:8c:4c:8f:26:18:6e: d7:25:97:79:46:ec:f5:cf:9f:69:4d:fd:d1:bd:c9:b9:58:5c: ab:e2:17:f1:e7:c7:1d:cd:00:70:85:61:ec:36:98:0a:f4:68: b5:42:04:7e:fb:10:43:e7:b8:0d:12:28:54:57:51:35:ee:78: ef:9d:c0:97:11:1b:3a:92:36:5a:97:8e:f4:25:b9:ee:5b:ec: b1:f3:52:91:1a:2c:80:18:5c:1b:15:16:ca:b9:ae:c1:a8:5f: 5a:09:09:41:30:41:66:93:f1:26:f0:8b:8f:cf:cb:7d:49:dd: b4:80:fa:44 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyODAxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzYxMC02MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX53tg/WZ8jkVloQaLN1cAcfab+wEFQPHH0u1I65CYjRDYT3SIscELa0KzO5 sKW4DQPuMDYvFMPzW9m0c2XOOu8TDKA+Gte54AHQp+RdUWkrUDEloX/5ivTZbNgo IvPysgH4ke+hjnJ3qCtOd3uHxEOrw400zNcJ0hxjTNoFAqGfCIquGo+eMVRxpDlL NY82A5nQGI/cNoTK5DqA7YlouYYnX0kka68Dbz6SNHJKpd0ikGqb6CJqVuBDEeZs Qe9MJ1oa8Nv7yUR9mkSivaUatDGZyDh28nJNgTmpV4knr/o8Pq+PyifMEq2DYdzT p5QKjYP/nVEyJMXOVLh6klP46QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDhxeIAi Zd05G7TwGCME0R+gWIHcMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0RCRkFGMzRE QjM5MTFFQkJGQkVDOTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnc4ADBAFnqjAwDwQCAAIwCQMHACABDfFiQDANBgkqhkiG 9w0BAQsFAAOCAQEAYqKJn3lYvVUp2KMzmNTJsTz86eiqZQIiJ9pDvregV3FMyjrn FuHNRBFem5bjuc8IyVJHEPaKPr07ehd4gCxOCq3N43KJ3Imnq2NB5vH+vgBWOhpb YBkDhvF7Ec6CRXr2717e4AhRq5ttgxxS5oKX2v1rhvL5Zyonnf+iHOgXc/2zDHpX LdW0HQ5cjEyPJhhu1yWXeUbs9c+faU390b3JuVhcq+IX8efHHc0AcIVh7DaYCvRo tUIEfvsQQ+e4DRIoVFdRNe54753AlxEbOpI2WpeO9CW57lvssfNSkRosgBhcGxUW yrmuwahfWgkJQTBBZpPxJvCLj8/LfUndtID6RA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org