$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D812A0A256A911EEAA166974C4F9AE02.roa File: D812A0A256A911EEAA166974C4F9AE02.roa (raw, json) Hash identifier: oMt/9t/cbxC6n8D4DSyzGyeLuyeAPpiPmfTDxLVoWlY= Subject key identifier: E8:46:FA:62:43:16:82:36:5E:C7:14:13:D6:D8:42:D9:BE:10:12:CF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A59 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D812A0A256A911EEAA166974C4F9AE02.roa Signing time: Tue 19 Sep 2023 05:03:17 +0000 ROA not before: Tue 19 Sep 2023 05:03:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141567 IP address blocks: 103.170.148.0/23 maxlen: 23 103.171.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31321 (0x7a59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 19 05:03:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65092b95-2f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:fe:40:70:82:e7:28:a6:eb:c7:cf:f1:f9: df:25:90:48:60:29:59:79:f0:c4:31:04:ca:f6:5a: f2:93:dc:de:c2:7a:31:94:75:20:d5:05:c7:e7:03: c1:8a:69:c7:e6:74:72:7b:88:b3:f2:38:79:35:f7: a0:0a:2f:ca:d7:0b:71:02:87:34:9c:dd:c3:e2:a8: f6:82:d8:0f:5c:84:d4:2a:96:2b:2e:93:b7:c4:b5: b8:30:9e:b5:2e:65:8b:13:24:ba:d1:92:9c:47:95: 0e:af:b9:10:d2:b7:1a:f0:4a:41:3c:d5:ff:b4:20: bc:d4:7f:de:eb:5e:33:9c:94:22:76:6b:b4:fc:15: 98:1b:5d:3c:c2:24:cd:e4:df:ed:aa:70:a5:35:4b: 5f:01:bb:07:f2:0b:31:a7:12:f5:61:cd:37:b5:e5: c1:03:cc:75:db:b3:3d:7b:c1:36:ef:93:74:f0:d2: 33:c4:fe:a3:4a:71:f6:f8:18:3f:71:61:83:dc:c3: fe:6f:d6:cf:db:48:dc:c3:4c:40:85:28:9f:7e:8d: 14:53:35:14:0f:fd:c8:fa:83:f0:7a:78:08:da:f5: 11:22:14:b1:44:07:6e:e0:3b:95:f5:4a:fa:87:d0: 29:b3:c8:15:dd:77:32:ab:e8:96:4c:a4:74:72:93: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:FA:62:43:16:82:36:5E:C7:14:13:D6:D8:42:D9:BE:10:12:CF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D812A0A256A911EEAA166974C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.148.0/23 103.171.109.0/24 Signature Algorithm: sha256WithRSAEncryption a3:4e:dd:4e:1d:6d:ed:ee:80:19:31:c1:0e:18:c3:f2:c0:a4: 2e:51:0e:24:3b:2c:5d:9a:ab:d2:4e:64:8b:47:e1:ad:e5:38: 5e:74:eb:53:4f:00:63:a9:ef:b9:d4:69:e5:1b:c8:df:9f:8a: 2b:79:88:a3:40:31:ed:52:2c:46:65:0e:f7:f9:67:f1:b1:f3: 50:de:ea:26:05:33:1e:bf:a9:a0:3d:d3:0d:e9:da:8f:75:fb: f7:6b:f7:0d:6a:5a:79:70:5c:f6:31:0e:b4:c7:fb:26:98:41: 7d:36:6f:9b:47:43:0c:c4:b7:62:1f:fb:f3:ea:16:67:58:54: e9:a9:3b:08:4c:ee:97:7b:66:70:04:41:6f:bc:b1:24:0b:c8: a9:4d:33:10:1d:d3:ca:75:96:6c:86:c0:96:0b:b2:08:91:4d: 63:41:b0:88:a5:f8:ba:9b:a3:2d:18:61:d5:46:36:d5:22:4a: b6:14:51:84:45:81:59:55:3f:07:c6:2f:3f:1b:01:7d:b7:5b: 68:ff:1c:d8:a8:82:13:ea:21:67:60:62:f1:11:7f:c7:c8:f2: 51:05:1a:3b:49:9e:21:74:1b:71:ff:fa:71:76:4d:6a:30:70: 4a:ad:4d:00:74:e1:4d:2b:ae:e3:c0:a2:96:b1:69:75:5b:a6: 5b:27:d4:48 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICelkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTE5MDUwMzE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA5MmI5NS0yZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCb+QHCC5yim68fP8fnfJZBIYClZefDEMQTK9lryk9zewnoxlHUg1QXH5wPB imnH5nRye4iz8jh5NfegCi/K1wtxAoc0nN3D4qj2gtgPXITUKpYrLpO3xLW4MJ61 LmWLEyS60ZKcR5UOr7kQ0rca8EpBPNX/tCC81H/e614znJQidmu0/BWYG108wiTN 5N/tqnClNUtfAbsH8gsxpxL1Yc03teXBA8x127M9e8E275N08NIzxP6jSnH2+Bg/ cWGD3MP+b9bP20jcw0xAhSiffo0UUzUUD/3I+oPwengI2vURIhSxRAdu4DuV9Ur6 h9Aps8gV3Xcyq+iWTKR0cpMGLQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOhG+mJD FoI2XscUE9bYQtm+EBLPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDgxMkEwQTI1 NkE5MTFFRUFBMTY2OTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnqpQDBABnq20wDQYJKoZIhvcNAQELBQADggEBAKNO3U4d be3ugBkxwQ4Yw/LApC5RDiQ7LF2aq9JOZItH4a3lOF5061NPAGOp77nUaeUbyN+f iit5iKNAMe1SLEZlDvf5Z/Gx81De6iYFMx6/qaA90w3p2o91+/dr9w1qWnlwXPYx DrTH+yaYQX02b5tHQwzEt2If+/PqFmdYVOmpOwhM7pd7ZnAEQW+8sSQLyKlNMxAd 08p1lmyGwJYLsgiRTWNBsIil+Lqboy0YYdVGNtUiSrYUUYRFgVlVPwfGLz8bAX23 W2j/HNioghPqIWdgYvERf8fI8lEFGjtJniF0G3H/+nF2TWowcEqtTQB04U0rruPA opaxaXVbplsn1Eg= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:38 2024 by rpki-client on console-fra.rpki-client.org