$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa File: D4A6DBCA89A211EC8994F911C4F9AE02.roa (raw, json) Hash identifier: pF6jMYedRRjT+3O4HrRjdwdus5qFPa+60MQ4eC+SWyc= Subject key identifier: 69:8A:AE:16:86:A8:09:E4:C3:F2:22:81:B8:55:A1:DB:E1:51:33:ED Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa Signing time: Wed 10 May 2023 16:23:34 +0000 ROA not before: Wed 10 May 2023 16:23:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136278 IP address blocks: 103.180.46.0/24 maxlen: 24 103.180.47.0/24 maxlen: 24 2001:df2:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27709 (0x6c3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:23:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc506-9629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:39:2f:bf:64:c7:61:3a:c4:52:45:c3:4f: 53:2f:ce:7c:4f:ff:b2:16:eb:9f:e0:3e:4a:5a:38: 69:27:9d:fd:6a:4a:18:59:04:57:d8:1c:ec:a8:f1: 16:ed:37:06:14:eb:c4:75:63:e7:6c:32:b3:82:91: a8:99:eb:49:31:f8:91:eb:0e:ae:ba:d8:86:37:4c: 7d:0e:62:70:c2:43:3b:1d:97:c3:15:0f:5f:09:d5: 0d:3c:30:ae:94:2d:30:5a:ca:84:1c:32:2c:b7:51: 81:86:fc:56:9d:ea:e7:e1:aa:bf:5a:05:b9:da:94: 79:9b:57:08:98:57:59:5e:fc:d8:ee:51:4f:bf:92: 7e:f0:06:f8:4f:ed:c7:6c:b4:f6:e3:5b:a3:46:a7: 62:80:80:c8:3e:74:28:f0:14:c3:78:48:a2:57:db: 09:c0:ca:61:54:0b:bc:45:bf:0c:7d:76:0a:83:22: 85:c5:14:8b:01:ce:d4:56:f6:70:ec:bb:bd:2a:39: 25:cd:10:62:fa:09:e7:d4:a9:f3:83:8b:d3:8b:46: 89:dd:a1:89:ca:9c:db:aa:6e:cd:44:cd:f5:79:3e: 0b:94:9d:22:cf:93:49:f0:90:6d:be:c5:60:56:20: 66:70:7d:65:16:25:b0:24:cb:96:2c:e5:92:27:d7: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8A:AE:16:86:A8:09:E4:C3:F2:22:81:B8:55:A1:DB:E1:51:33:ED X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.46.0/23 IPv6: 2001:df2:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 30:a9:e6:f2:57:d2:58:db:35:7b:6d:77:0b:99:b1:7e:ff:ec: fb:e9:03:65:a4:1c:a5:8c:2f:09:88:13:a5:f6:4d:c0:77:b4: 29:6d:d6:12:a9:e1:8f:09:8a:17:90:80:84:b6:db:af:ba:29: 2b:31:7f:09:63:31:85:bb:cb:64:4e:d7:7c:1d:5a:77:56:da: 69:18:80:76:46:c9:d7:b9:58:51:19:b8:6c:b2:3e:dd:fb:51: c1:b8:ae:32:b8:1c:e4:75:c6:90:c1:08:84:d0:0a:e6:ba:49: 49:31:42:93:6c:98:b8:6e:69:f8:fb:d7:df:b6:e1:98:e8:4f: 7a:f2:92:51:72:9c:c2:05:e2:c4:0a:60:71:47:e0:7d:80:16: 2f:10:ae:04:ca:a1:60:23:e3:87:ea:61:e7:be:96:52:0d:f5: 04:06:4d:5a:97:df:3d:d2:70:73:61:5f:2d:e8:7c:c8:13:86: 93:56:51:67:88:45:c7:82:a9:6a:af:ba:b7:8d:5d:b6:03:55: 15:ae:db:4a:2a:50:68:ac:01:25:c0:1d:84:0c:64:01:d8:98: a0:93:48:5a:4b:93:96:ac:81:98:e3:66:29:08:2e:cb:c3:ea: a6:94:29:b4:85:af:82:ad:d3:4a:66:6f:e5:bb:3d:b5:d9:aa: cf:f3:7d:86 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzUwNi05NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NE5L79kx2E6xFJFw09TL858T/+yFuuf4D5KWjhpJ539akoYWQRX2BzsqPEW 7TcGFOvEdWPnbDKzgpGometJMfiR6w6uutiGN0x9DmJwwkM7HZfDFQ9fCdUNPDCu lC0wWsqEHDIst1GBhvxWnern4aq/WgW52pR5m1cImFdZXvzY7lFPv5J+8Ab4T+3H bLT241ujRqdigIDIPnQo8BTDeEiiV9sJwMphVAu8Rb8MfXYKgyKFxRSLAc7UVvZw 7Lu9KjklzRBi+gnn1Knzg4vTi0aJ3aGJypzbqm7NRM31eT4LlJ0iz5NJ8JBtvsVg ViBmcH1lFiWwJMuWLOWSJ9c/eQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGmKrhaG qAnkw/IigbhVodvhUTPtMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDRBNkRCQ0E4 OUEyMTFFQzg5OTRGOTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntC4wDwQCAAIwCQMHACABDfI9QDANBgkqhkiG9w0BAQsF AAOCAQEAMKnm8lfSWNs1e213C5mxfv/s++kDZaQcpYwvCYgTpfZNwHe0KW3WEqnh jwmKF5CAhLbbr7opKzF/CWMxhbvLZE7XfB1ad1baaRiAdkbJ17lYURm4bLI+3ftR wbiuMrgc5HXGkMEIhNAK5rpJSTFCk2yYuG5p+PvX37bhmOhPevKSUXKcwgXixApg cUfgfYAWLxCuBMqhYCPjh+ph576WUg31BAZNWpffPdJwc2FfLeh8yBOGk1ZRZ4hF x4Kpaq+6t41dtgNVFa7bSipQaKwBJcAdhAxkAdiYoJNIWkuTlqyBmONmKQguy8Pq ppQptIWvgq3TSmZv5bs9tdmqz/N9hg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org