$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa File: D2E077B82AE811EE941D9B2AC4F9AE02.roa (raw, json) Hash identifier: ljRkoAnRv13qZ4V8CtUOB+v2lWL0tGW9Vsh/ztFbR3A= Subject key identifier: 3A:22:A9:0E:96:C6:2B:32:20:86:6D:E9:9F:92:92:06:0F:B2:2B:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7637 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa Signing time: Tue 25 Jul 2023 12:43:16 +0000 ROA not before: Tue 25 Jul 2023 12:43:16 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149272 IP address blocks: 103.181.102.0/24 maxlen: 24 103.181.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30263 (0x7637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 25 12:43:16 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64bfc363-5d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:84:6f:b6:f0:b6:28:76:b3:c2:ff:11:70: a8:fe:58:bc:c8:cb:62:91:2e:1f:cb:a6:e1:1e:cc: 63:2d:48:3d:6f:b0:f3:14:70:b0:45:e7:59:2c:33: 71:d1:6a:a6:f3:ad:7e:5e:b7:46:c7:db:1a:2c:86: 5e:37:18:5d:05:4a:07:55:a2:a4:f9:3c:06:74:a0: d8:64:19:56:3e:74:c7:a8:cb:46:4c:76:0a:c2:c1: 95:fd:2b:be:9e:df:68:12:3f:05:e1:86:f5:da:3e: 67:dd:61:08:9a:3f:ce:59:e2:03:65:85:aa:35:bf: ac:e1:79:5d:49:5c:43:e7:13:27:49:35:b6:0c:bc: 9d:29:24:d8:ff:e3:49:bf:3e:29:cb:e0:4d:05:d9: af:4d:2f:44:f2:db:77:b9:fc:98:6e:11:f7:b4:73: 30:20:59:62:d7:ad:a0:d1:2d:3e:8b:c3:0b:a6:3d: 89:27:cb:e5:87:77:ad:57:cf:4a:c6:d3:c8:01:de: fb:a5:20:ad:ae:05:95:12:d8:91:35:8e:23:82:1b: 23:e0:92:df:ae:f3:27:6f:57:74:38:3b:eb:af:80: 78:bd:68:1f:50:51:83:fe:90:33:a1:27:63:fb:00: d8:74:be:a2:db:a9:68:b3:ed:07:90:3b:48:f4:0c: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:A9:0E:96:C6:2B:32:20:86:6D:E9:9F:92:92:06:0F:B2:2B:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E077B82AE811EE941D9B2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.102.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:42:e3:89:d5:26:ae:29:16:50:0f:60:a7:56:d0:d3:86:65: d7:32:03:d8:dc:23:45:c8:3a:26:76:19:51:1a:cc:13:e6:9e: c0:b2:0c:74:49:bd:8d:13:75:dd:6b:d0:89:9d:18:96:74:7e: c6:e3:e8:e4:68:5b:ea:9a:6a:d9:0b:9c:51:b6:33:d3:70:23: 6a:1f:62:e2:26:3a:51:f2:3c:d8:38:48:9b:6d:e1:73:5a:2a: 00:fa:31:22:a4:4b:7f:cb:05:28:5c:3f:cd:78:30:76:de:bc: be:6f:d7:98:4d:62:c4:af:f0:98:c4:ea:2d:7a:21:69:cc:29: 39:95:b7:de:7f:9b:f3:31:65:1f:2b:4d:7e:65:b6:9a:b0:79: bb:14:34:49:95:82:9e:c4:80:6d:36:24:9a:39:41:fa:6e:03: f0:b5:c2:5b:76:ca:46:96:bc:f3:45:91:45:60:d0:be:f0:b9: 0f:35:5e:a8:0a:9e:8d:b2:e1:f8:72:ae:bb:c0:cb:19:7e:89: 64:52:bb:56:a3:cf:a3:e6:9f:a9:d5:c0:4c:ae:59:1b:11:a5: ba:b6:d6:2b:4e:77:52:a0:d2:19:8d:4d:ff:b8:ba:e3:9a:d1: 74:c3:85:8f:9b:c7:4f:fe:e6:a4:73:8c:65:39:30:bf:9d:b6: 1f:8d:39:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICdjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzI1MTI0MzE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGJmYzM2My01ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkuEb7bwtih2s8L/EXCo/li8yMtikS4fy6bhHsxjLUg9b7DzFHCwRedZLDNx 0Wqm861+XrdGx9saLIZeNxhdBUoHVaKk+TwGdKDYZBlWPnTHqMtGTHYKwsGV/Su+ nt9oEj8F4Yb12j5n3WEImj/OWeIDZYWqNb+s4XldSVxD5xMnSTW2DLydKSTY/+NJ vz4py+BNBdmvTS9E8tt3ufyYbhH3tHMwIFli162g0S0+i8MLpj2JJ8vlh3etV89K xtPIAd77pSCtrgWVEtiRNY4jghsj4JLfrvMnb1d0ODvrr4B4vWgfUFGD/pAzoSdj +wDYdL6i26los+0HkDtI9Ax5CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDoiqQ6W xisyIIZt6Z+SkgYPsitBMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDJFMDc3Qjgy QUU4MTFFRTk0MUQ5QjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntWYwDQYJKoZIhvcNAQELBQADggEBAH9C44nVJq4pFlAP YKdW0NOGZdcyA9jcI0XIOiZ2GVEazBPmnsCyDHRJvY0Tdd1r0ImdGJZ0fsbj6ORo W+qaatkLnFG2M9NwI2ofYuImOlHyPNg4SJtt4XNaKgD6MSKkS3/LBShcP814MHbe vL5v15hNYsSv8JjE6i16IWnMKTmVt95/m/MxZR8rTX5ltpqwebsUNEmVgp7EgG02 JJo5QfpuA/C1wlt2ykaWvPNFkUVg0L7wuQ81XqgKno2y4fhyrrvAyxl+iWRSu1aj z6Pmn6nVwEyuWRsRpbq21itOd1Kg0hmNTf+4uuOa0XTDhY+bx0/+5qRzjGU5ML+d th+NOQg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org