$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CFC43CBA984411EBBB3EA46BC4F9AE02.roa File: CFC43CBA984411EBBB3EA46BC4F9AE02.roa (raw, json) Hash identifier: SIWIaN219JcPQ9Nd3xpZQ4AIBnE82XfbpsMxq13Cswk= Subject key identifier: 08:9C:FF:74:96:5F:70:BD:1B:DC:EE:CC:38:94:15:50:7C:84:62:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6ACE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CFC43CBA984411EBBB3EA46BC4F9AE02.roa Signing time: Wed 10 May 2023 16:16:35 +0000 ROA not before: Wed 10 May 2023 16:16:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133971 IP address blocks: 103.50.219.0/24 maxlen: 24 103.91.218.0/24 maxlen: 24 103.171.10.0/23 maxlen: 24 2404:fc40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27342 (0x6ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:16:35 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc362-2e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:51:e6:e6:c6:96:63:ed:52:3e:40:99:80: 3c:f8:31:71:25:4f:bc:e8:d9:57:ae:00:d4:d0:6d: 7d:a7:85:be:e9:57:35:41:39:a7:08:9b:8c:42:93: 93:f1:bd:0c:c5:37:1d:a1:d6:91:96:fb:8f:a6:51: c9:44:9b:bf:e5:fb:d2:c3:7d:31:57:29:3d:e5:d3: be:f7:f7:2b:3d:4e:4d:d8:e7:8c:ef:3e:56:ad:c4: 66:43:26:c6:45:cb:c1:45:be:cc:5a:dd:3f:0a:46: e9:47:e7:04:1a:79:0a:b9:8a:7d:07:b6:81:72:9d: 08:60:45:3c:1e:9e:b2:fc:77:63:ee:6d:46:6e:8c: ae:33:cc:74:3b:01:b6:10:32:22:0f:86:79:a0:c0: f1:47:65:95:37:c9:95:30:c1:88:fc:70:1e:18:81: e1:ac:03:12:9e:87:3a:1f:cb:73:d8:a4:15:2b:a1: 0e:78:f3:2a:6e:35:7d:1e:a7:e2:f3:ce:b7:2f:f2: 22:f8:46:2d:b5:80:cc:b7:fa:02:70:12:ba:5e:ee: 9a:cf:ce:3b:17:e5:81:d1:cf:05:c0:67:00:51:3c: 8a:a7:50:90:55:78:bf:82:da:bd:5f:5a:9b:7a:02: 98:be:dc:79:41:31:db:79:f0:ce:8c:88:71:5a:d1: c2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:FF:74:96:5F:70:BD:1B:DC:EE:CC:38:94:15:50:7C:84:62:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CFC43CBA984411EBBB3EA46BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.50.219.0/24 103.91.218.0/24 103.171.10.0/23 IPv6: 2404:fc40::/32 Signature Algorithm: sha256WithRSAEncryption 42:31:76:0b:4b:05:68:d2:7d:5b:61:b1:a9:56:69:6a:0c:60: 1a:ef:5e:f2:21:2f:bd:61:84:dd:97:a4:7d:97:28:a6:ef:97: 75:80:d3:56:56:b2:ab:2c:44:d5:5f:d9:fc:de:7e:a1:10:fb: e2:07:92:82:a1:07:e7:44:69:a3:72:d5:31:12:18:0a:f4:ba: a9:10:e0:b1:b9:7b:49:f8:e8:b1:ad:a3:7c:2e:32:ee:82:bd: 25:39:63:4d:d9:f0:ce:b3:a0:3f:ce:03:9a:87:9d:93:38:db: 00:4f:5f:76:38:56:7f:4b:a7:c0:0f:4e:ee:57:b7:25:69:25: 33:6e:8f:eb:09:41:10:27:e4:f2:53:e6:7d:b8:51:11:6b:fc: 6a:13:f6:10:08:2d:c4:11:af:f3:ec:9d:2b:85:de:32:97:41: cd:e6:a0:05:48:6e:fb:0d:5a:38:76:49:8f:42:cb:5d:dd:ad: e7:9c:cf:26:d3:28:31:95:3b:da:3b:80:c3:68:9c:22:42:60: d8:52:4d:74:85:16:b8:22:38:cf:ed:91:fb:1c:d2:d2:15:b4: e5:d9:6f:ba:4a:61:19:72:e2:c6:ef:2f:25:28:08:89:ad:a6: 3f:0f:01:91:20:b5:84:fe:e5:7f:85:86:99:0d:91:e9:aa:30: b2:80:42:d5 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICas4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzM2Mi0yZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFNR5ubGlmPtUj5AmYA8+DFxJU+86NlXrgDU0G19p4W+6Vc1QTmnCJuMQpOT 8b0MxTcdodaRlvuPplHJRJu/5fvSw30xVyk95dO+9/crPU5N2OeM7z5WrcRmQybG RcvBRb7MWt0/CkbpR+cEGnkKuYp9B7aBcp0IYEU8Hp6y/Hdj7m1GboyuM8x0OwG2 EDIiD4Z5oMDxR2WVN8mVMMGI/HAeGIHhrAMSnoc6H8tz2KQVK6EOePMqbjV9Hqfi 8863L/Ii+EYttYDMt/oCcBK6Xu6az847F+WB0c8FwGcAUTyKp1CQVXi/gtq9X1qb egKYvtx5QTHbefDOjIhxWtHCdQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAic/3SW X3C9G9zuzDiUFVB8hGL7MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0ZDNDNDQkE5 ODQ0MTFFQkJCM0VBNDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnMtsDBABnW9oDBAFnqwowDQQCAAIwBwMFACQE/EAwDQYJ KoZIhvcNAQELBQADggEBAEIxdgtLBWjSfVthsalWaWoMYBrvXvIhL71hhN2XpH2X KKbvl3WA01ZWsqssRNVf2fzefqEQ++IHkoKhB+dEaaNy1TESGAr0uqkQ4LG5e0n4 6LGto3wuMu6CvSU5Y03Z8M6zoD/OA5qHnZM42wBPX3Y4Vn9Lp8APTu5XtyVpJTNu j+sJQRAn5PJT5n24URFr/GoT9hAILcQRr/PsnSuF3jKXQc3moAVIbvsNWjh2SY9C y13dreeczybTKDGVO9o7gMNonCJCYNhSTXSFFrgiOM/tkfsc0tIVtOXZb7pKYRly 4sbvLyUoCImtpj8PAZEgtYT+5X+FhpkNkemqMLKAQtU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org