$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7687A84BDD011EA9702FC12C4F9AE02.roa File: D7687A84BDD011EA9702FC12C4F9AE02.roa (raw, json) Hash identifier: RsoP6ayU4gV7QbxcHpLVAy3IJtznyu4cFCF+0dQUpqo= Subject key identifier: 5B:9D:93:42:1B:A3:71:A6:90:DD:B1:84:BF:76:88:13:E0:B4:72:AE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CFC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7687A84BDD011EA9702FC12C4F9AE02.roa Signing time: Wed 10 May 2023 16:27:08 +0000 ROA not before: Wed 10 May 2023 16:27:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137158 IP address blocks: 103.108.51.0/24 maxlen: 24 103.151.70.0/24 maxlen: 24 2001:df1:7e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27900 (0x6cfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:27:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc5dc-e12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:48:7d:11:22:d1:98:3d:d0:3f:a9:2a:1a: 80:30:7a:03:54:04:4f:c9:b1:a9:bc:52:cc:01:ed: e9:5e:34:2d:55:ec:03:44:af:73:57:6f:ac:4c:0a: 75:40:28:6a:c8:0c:a8:72:d1:9c:2e:bd:ef:5c:33: 7d:e0:77:86:c1:0a:a2:19:0f:86:38:64:3f:3e:7f: ef:74:2e:28:9f:f6:0a:08:6f:46:9d:79:ea:ed:e9: fc:2e:b9:7a:f8:29:5a:c5:9b:de:f1:df:53:ec:e2: 80:16:c0:97:ba:da:35:76:c3:7d:f6:f1:b1:b9:d1: b5:a7:74:b7:69:6e:a4:55:dd:38:a2:ca:2b:33:cf: 74:71:70:f6:fc:e8:7d:5c:8c:2e:44:c4:69:f3:ba: 4b:21:6d:11:4d:d9:a0:9a:2d:70:4f:ae:b5:69:52: d0:d8:94:2e:5f:7c:7f:76:d4:70:9a:25:0f:92:ee: 95:d6:b4:3d:86:4e:40:4f:08:14:38:98:62:6a:1f: a2:19:c5:7b:bf:f0:dd:f0:94:5d:68:02:9a:90:57: e6:f5:0f:dc:d3:81:0b:a5:79:e1:b8:bb:66:6e:88: ba:09:a4:25:62:91:dd:1e:44:a7:6d:e0:58:f5:7f: 5f:b7:cd:eb:6c:dc:53:1f:ec:54:3c:53:53:19:5d: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:93:42:1B:A3:71:A6:90:DD:B1:84:BF:76:88:13:E0:B4:72:AE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7687A84BDD011EA9702FC12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.51.0/24 103.151.70.0/24 IPv6: 2001:df1:7e40::/48 Signature Algorithm: sha256WithRSAEncryption 36:1a:2f:5d:69:0c:42:34:1a:f4:36:fc:bd:40:1c:b1:84:7b: 58:c4:03:1a:60:f6:3a:a3:a3:c3:10:8a:cc:27:9d:eb:9b:61: 80:e8:b3:f3:30:31:84:52:cd:fd:c0:f1:1e:83:d8:c9:6c:29: 2f:10:a4:b1:88:59:12:b1:92:f5:2e:65:c5:c0:63:19:61:5d: 8c:c6:04:90:d6:ed:b0:bd:13:52:a4:cf:0a:c8:50:08:fb:e9: e1:27:8b:9e:79:37:f5:45:6d:2d:2c:26:ab:98:69:f4:bb:e5: e2:d6:38:78:68:c8:40:58:cf:7c:23:bb:bf:e4:d4:39:60:29: 6d:33:29:1d:d3:6d:8a:0d:4b:5e:df:e5:dc:9a:b8:50:c8:9f: 0f:0e:9c:fd:94:ac:d4:3d:eb:2b:53:01:ec:79:97:65:aa:de: 47:f3:08:5e:f7:e6:7e:ea:c1:ac:6b:82:e0:6b:1a:dc:a5:8c: ec:88:d6:dc:33:ab:d0:f4:47:6f:26:c7:0b:40:ec:ee:a1:80: 16:4a:97:03:10:82:39:9a:5d:92:fd:20:8f:0b:10:de:2a:ae: 5c:82:36:d3:d0:78:9c:44:4f:0a:21:71:2f:66:b3:40:26:40: 2f:17:7a:ee:09:27:c3:3c:e0:de:e0:7b:ab:24:01:73:dd:69: 66:26:e5:48 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICbPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNzA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzVkYy1lMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhlIfREi0Zg90D+pKhqAMHoDVARPybGpvFLMAe3pXjQtVewDRK9zV2+sTAp1 QChqyAyoctGcLr3vXDN94HeGwQqiGQ+GOGQ/Pn/vdC4on/YKCG9GnXnq7en8Lrl6 +ClaxZve8d9T7OKAFsCXuto1dsN99vGxudG1p3S3aW6kVd04osorM890cXD2/Oh9 XIwuRMRp87pLIW0RTdmgmi1wT661aVLQ2JQuX3x/dtRwmiUPku6V1rQ9hk5ATwgU OJhiah+iGcV7v/Dd8JRdaAKakFfm9Q/c04ELpXnhuLtmboi6CaQlYpHdHkSnbeBY 9X9ft83rbNxTH+xUPFNTGV0XZQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFudk0Ib o3GmkN2xhL92iBPgtHKuMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDc2ODdBODRC REQwMTFFQTk3MDJGQzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnbDMDBABnl0YwDwQCAAIwCQMHACABDfF+QDANBgkqhkiG 9w0BAQsFAAOCAQEANhovXWkMQjQa9Db8vUAcsYR7WMQDGmD2OqOjwxCKzCed65th gOiz8zAxhFLN/cDxHoPYyWwpLxCksYhZErGS9S5lxcBjGWFdjMYEkNbtsL0TUqTP CshQCPvp4SeLnnk39UVtLSwmq5hp9Lvl4tY4eGjIQFjPfCO7v+TUOWApbTMpHdNt ig1LXt/l3Jq4UMifDw6c/ZSs1D3rK1MB7HmXZareR/MIXvfmfurBrGuC4Gsa3KWM 7IjW3DOr0PRHbybHC0Ds7qGAFkqXAxCCOZpdkv0gjwsQ3iquXII209B4nERPCiFx L2azQCZALxd67gknwzzg3uB7qyQBc91pZiblSA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org