$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D53E5AE27A7E11EBBB1BDE0AC4F9AE02.roa File: D53E5AE27A7E11EBBB1BDE0AC4F9AE02.roa (raw, json) Hash identifier: U/BC1kZRxCfOGZaez/+fL4+o8RUmXjVbgSLR84cVUcU= Subject key identifier: 84:CF:11:E8:A0:55:24:29:47:BE:C3:77:4E:7D:94:C5:04:E3:B1:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7DE5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D53E5AE27A7E11EBBB1BDE0AC4F9AE02.roa Signing time: Fri 17 Nov 2023 06:41:25 +0000 ROA not before: Fri 17 Nov 2023 06:41:25 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133648 IP address blocks: 43.231.56.0/22 maxlen: 24 103.44.18.0/24 maxlen: 24 103.50.148.0/24 maxlen: 24 103.50.150.0/23 maxlen: 24 103.79.168.0/22 maxlen: 24 103.79.248.0/22 maxlen: 24 103.95.164.0/22 maxlen: 24 103.163.62.0/23 maxlen: 24 103.167.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32229 (0x7de5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 17 06:41:25 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65570b15-fa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:b0:cb:bb:38:5b:1f:7b:6a:e0:48:86:30: f6:cc:09:ce:e5:a2:98:75:bd:3d:8e:8f:5f:06:25: df:7e:a3:15:00:47:72:9c:c4:1a:3e:3b:69:48:30: 94:10:26:7b:cc:7b:ef:2f:2a:90:af:44:fb:97:25: 58:58:79:29:03:6a:f3:5b:b9:e0:dc:cb:8d:35:0c: 4d:9b:50:fd:d8:37:4e:54:82:64:7c:77:80:b8:ec: c7:37:5a:d5:c7:bf:05:86:f8:e7:a7:89:99:57:13: 8f:92:64:56:22:ec:b2:ec:95:55:92:b0:14:c4:51: 25:41:6a:76:29:50:ed:ad:3f:9e:4f:ef:b2:90:60: a1:1a:12:7f:53:d9:21:a1:de:b4:c2:84:9c:72:14: 2d:dd:23:0d:6e:54:29:8d:7d:3f:7a:a9:e2:9e:c7: a9:81:5f:73:0b:e3:43:68:96:30:84:be:4b:16:2b: 92:18:45:ff:a9:47:ff:69:aa:cd:87:bc:0b:2f:f4: 6b:f3:77:c9:1b:1f:c9:99:8f:24:51:ba:86:34:63: c9:4b:c4:17:30:9c:92:17:cf:c7:5e:ba:78:bc:54: bf:7d:3a:bd:97:a7:d1:2b:fa:f2:d8:eb:3b:76:a8: bb:2b:8b:32:64:20:f4:2c:77:1e:37:cd:00:0d:5a: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CF:11:E8:A0:55:24:29:47:BE:C3:77:4E:7D:94:C5:04:E3:B1:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D53E5AE27A7E11EBBB1BDE0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.56.0/22 103.44.18.0/24 103.50.148.0/24 103.50.150.0/23 103.79.168.0/22 103.79.248.0/22 103.95.164.0/22 103.163.62.0/23 103.167.98.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:15:96:11:4f:7e:42:23:2d:92:46:a6:2d:da:ef:aa:4c:51: dd:e8:48:5d:99:f0:aa:0f:45:7f:ae:30:21:4e:7e:a4:f9:f6: c8:42:59:22:d3:04:cc:44:51:e9:a5:a4:91:f1:29:86:3f:0c: 85:94:f8:92:38:cb:92:53:ec:67:1a:a3:a9:cd:a2:c9:e5:fe: 78:32:99:c8:36:1e:8e:be:ca:9e:63:58:09:d5:e5:28:52:1d: f3:76:5a:57:bc:27:89:f6:a4:88:f0:dd:84:a1:fa:1d:f7:13: a5:b5:4f:73:68:af:fa:f4:0c:a3:fc:f1:49:3e:c5:ae:0f:b7: f3:78:56:c7:36:1a:c8:17:3d:00:28:60:b7:6e:51:05:6c:a0: ad:3c:a8:df:af:29:63:15:85:63:f6:4b:86:6e:7f:2d:75:8c: c4:1a:a3:b1:90:9c:fe:e8:09:65:5b:e9:5e:7f:1a:76:3b:c7: 7f:48:73:b2:34:95:bb:fd:19:1f:a5:bf:7d:ee:a0:f4:c9:45: 42:48:87:bf:8d:3e:f0:2e:f5:2e:9f:61:8a:10:4c:16:fc:9e: 01:8c:d4:82:3a:27:5b:8c:29:08:ff:42:9e:dd:3a:ce:92:4d: 19:2a:5d:1e:e3:58:70:b7:62:65:78:32:ec:c4:fa:bf:58:77: ef:b6:89:63 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICfeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTE3MDY0MTI1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU3MGIxNS1mYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJOwy7s4Wx97auBIhjD2zAnO5aKYdb09jo9fBiXffqMVAEdynMQaPjtpSDCU ECZ7zHvvLyqQr0T7lyVYWHkpA2rzW7ng3MuNNQxNm1D92DdOVIJkfHeAuOzHN1rV x78Fhvjnp4mZVxOPkmRWIuyy7JVVkrAUxFElQWp2KVDtrT+eT++ykGChGhJ/U9kh od60woScchQt3SMNblQpjX0/eqninsepgV9zC+NDaJYwhL5LFiuSGEX/qUf/aarN h7wLL/Rr83fJGx/JmY8kUbqGNGPJS8QXMJySF8/HXrp4vFS/fTq9l6fRK/ry2Os7 dqi7K4syZCD0LHceN80ADVr9twIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFITPEeig VSQpR77Dd059lMUE47EgMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDUzRTVBRTI3 QTdFMTFFQkJCMUJERTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAIr5zgDBABnLBIDBABnMpQDBAFnMpYDBAJnT6gDBAJnT/gD BAJnX6QDBAFnoz4DBAFnp2IwDQYJKoZIhvcNAQELBQADggEBAG4VlhFPfkIjLZJG pi3a76pMUd3oSF2Z8KoPRX+uMCFOfqT59shCWSLTBMxEUemlpJHxKYY/DIWU+JI4 y5JT7Gcao6nNosnl/ngymcg2Ho6+yp5jWAnV5ShSHfN2Wle8J4n2pIjw3YSh+h33 E6W1T3Nor/r0DKP88Uk+xa4Pt/N4Vsc2GsgXPQAoYLduUQVsoK08qN+vKWMVhWP2 S4Zufy11jMQao7GQnP7oCWVb6V5/GnY7x39Ic7I0lbv9GR+lv33uoPTJRUJIh7+N PvAu9S6fYYoQTBb8ngGM1II6J1uMKQj/Qp7dOs6STRkqXR7jWHC3YmV4MuzE+r9Y d++2iWM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org