$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D71BB0983C4011EB8CBEDE36C4F9AE02.roa File: D71BB0983C4011EB8CBEDE36C4F9AE02.roa (raw, json) Hash identifier: pd5G4xe7ODn/lYQ3rLs7C0mu3v/fJ4Zv7off1tMpS/s= Subject key identifier: 08:4B:A3:99:DF:AD:DC:9D:84:4C:8B:F6:FC:B9:89:E7:3D:91:C0:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7BA1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D71BB0983C4011EB8CBEDE36C4F9AE02.roa Signing time: Wed 11 Oct 2023 11:35:12 +0000 ROA not before: Wed 11 Oct 2023 11:35:12 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139493 IP address blocks: 103.144.26.0/23 maxlen: 24 2001:df3:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31649 (0x7ba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 11 11:35:12 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65268870-7125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:9f:ec:97:f4:5d:b0:d2:f1:a0:6a:42:d1: f4:8e:48:b1:66:90:30:98:c2:46:b5:20:07:e2:5a: 60:d6:ba:b9:d8:84:44:0a:5c:c5:c6:1b:d4:fb:49: 61:d8:23:ca:9c:37:0f:67:84:27:c5:83:17:5d:fb: eb:d0:2f:06:40:42:08:09:92:20:2a:99:28:c0:5e: 91:37:db:9e:e6:fc:ab:9e:d7:8d:90:69:b6:dd:b2: bb:db:2f:22:88:af:2a:27:a1:a0:69:bb:bc:2e:dc: 66:62:60:da:6d:e7:94:92:32:0b:67:f6:32:0a:5b: ac:a8:f5:f4:a2:cd:f6:ed:6e:ec:85:27:03:e5:c2: ef:f1:bb:af:57:dc:e4:d2:bc:2b:5e:f7:43:ea:9b: 8d:b2:8f:ae:de:a4:2d:bc:ff:ad:0f:94:72:ae:10: 65:bd:ca:8c:c2:bd:16:92:10:5a:a3:43:c7:5f:12: 2d:cc:89:be:ca:ff:42:f5:f4:0e:79:9f:3a:f8:07: 33:12:e1:a0:97:b0:b9:2b:a4:f3:4c:78:97:63:05: 91:74:c5:31:c6:5c:be:a6:07:53:00:34:63:95:25: f7:2d:db:21:c8:27:48:2c:6e:ec:40:ff:01:60:c0: dc:3f:cc:18:8b:af:27:a1:05:53:e4:f7:43:87:0a: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4B:A3:99:DF:AD:DC:9D:84:4C:8B:F6:FC:B9:89:E7:3D:91:C0:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D71BB0983C4011EB8CBEDE36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.26.0/23 IPv6: 2001:df3:40::/48 Signature Algorithm: sha256WithRSAEncryption 19:23:5f:1f:f7:2a:d5:82:a3:be:23:7e:b6:2b:7c:b5:f9:15: 88:9e:ca:4c:fa:6e:ae:10:90:e3:c7:16:3a:d3:28:6a:3f:88: b6:a8:e3:af:53:5f:56:d9:36:85:c7:d9:67:b8:c9:ae:2e:b7: 26:ff:0d:07:51:f9:74:4f:5e:14:4b:a2:b3:30:3b:91:fa:60: 76:41:86:07:5d:ba:0d:b9:9a:80:3e:0b:ea:89:90:1f:01:9e: fe:6b:fb:aa:9b:14:c0:4f:08:a5:02:0b:f6:af:24:80:50:a5: 37:50:dc:f5:a3:ee:a4:94:fc:8e:77:e8:3f:9d:14:dc:31:41: 90:d8:1f:83:6d:dd:ac:67:08:69:2b:2a:b4:1d:46:0e:0b:c0: d8:22:c9:f3:8b:4b:ea:38:35:11:97:d8:27:4b:24:12:99:c4: 5e:29:1e:f0:18:89:9a:87:f1:75:49:0d:e9:66:84:23:79:e3: 03:79:db:85:4e:6b:0d:29:8b:df:56:4a:a1:bb:ce:40:a5:34: 4e:fe:a0:98:7e:6c:11:68:ab:5f:1e:f0:ee:ec:6c:0e:a3:dd: fa:c4:21:21:9a:12:14:6f:27:e8:60:55:1c:6a:83:4b:98:60: 34:d7:72:b6:18:f5:9b:2a:9f:99:76:d3:bd:a9:f3:33:70:49: eb:02:9f:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICe6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMDExMTEzNTEyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI2ODg3MC03MTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5buf7Jf0XbDS8aBqQtH0jkixZpAwmMJGtSAH4lpg1rq52IREClzFxhvU+0lh 2CPKnDcPZ4QnxYMXXfvr0C8GQEIICZIgKpkowF6RN9ue5vyrnteNkGm23bK72y8i iK8qJ6Ggabu8LtxmYmDabeeUkjILZ/YyClusqPX0os327W7shScD5cLv8buvV9zk 0rwrXvdD6puNso+u3qQtvP+tD5RyrhBlvcqMwr0WkhBao0PHXxItzIm+yv9C9fQO eZ86+AczEuGgl7C5K6TzTHiXYwWRdMUxxly+pgdTADRjlSX3LdshyCdILG7sQP8B YMDcP8wYi68noQVT5PdDhwrOQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAhLo5nf rdydhEyL9vy5iec9kcBqMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDcxQkIwOTgz QzQwMTFFQjhDQkVERTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkBowDwQCAAIwCQMHACABDfMAQDANBgkqhkiG9w0BAQsF AAOCAQEAGSNfH/cq1YKjviN+tit8tfkViJ7KTPpurhCQ48cWOtMoaj+Itqjjr1Nf Vtk2hcfZZ7jJri63Jv8NB1H5dE9eFEuiszA7kfpgdkGGB126DbmagD4L6omQHwGe /mv7qpsUwE8IpQIL9q8kgFClN1Dc9aPupJT8jnfoP50U3DFBkNgfg23drGcIaSsq tB1GDgvA2CLJ84tL6jg1EZfYJ0skEpnEXike8BiJmofxdUkN6WaEI3njA3nbhU5r DSmL31ZKobvOQKU0Tv6gmH5sEWirXx7w7uxsDqPd+sQhIZoSFG8n6GBVHGqDS5hg NNdythj1myqfmXbTvanzM3BJ6wKfag== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org