$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D84E9714D0C511EA8D4FF06BC4F9AE02.roa File: D84E9714D0C511EA8D4FF06BC4F9AE02.roa (raw, json) Hash identifier: cp8sb8ae4OCKmvwc15aZtjANTth7w6VCMSQm/hH1G5k= Subject key identifier: 24:D0:A1:D0:25:31:0F:B8:AF:B1:73:82:44:15:17:C7:B8:D9:E1:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 72B7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D84E9714D0C511EA8D4FF06BC4F9AE02.roa Signing time: Thu 25 May 2023 11:42:10 +0000 ROA not before: Thu 25 May 2023 11:42:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135752 IP address blocks: 103.73.188.0/22 maxlen: 24 2001:df4:5c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29367 (0x72b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 25 11:42:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646f4991-4392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:9c:76:2b:57:9e:e4:67:ea:82:6d:88:4a: b7:79:91:6f:c4:d3:cc:16:21:79:82:52:26:b4:89: d2:ef:6b:90:1c:f4:65:1a:7e:32:c1:a2:96:86:3f: be:4a:87:67:0e:44:a3:a2:7b:f1:87:f0:f5:50:45: b3:ee:5e:44:d8:ca:94:be:1b:c9:9c:4a:21:0b:04: 67:bb:06:26:f6:f2:72:2c:ab:36:6b:87:39:94:d7: 51:eb:6f:c0:b4:f0:a8:b9:1f:f7:a4:bd:a1:03:2a: b4:21:4e:ef:e0:c6:b8:9f:8d:e5:ac:46:31:f6:da: c0:db:11:ae:df:9c:c9:22:f1:df:1b:87:6e:47:bf: 78:d4:4c:62:7a:a1:55:7f:d1:17:2a:38:e4:d8:bd: 05:21:3e:54:60:ee:e9:76:16:3e:c2:e8:7a:07:45: 94:ea:33:f2:39:5b:10:82:4a:ee:57:f6:2f:c6:3b: a6:d8:38:11:23:4c:6d:ed:e1:ef:05:f5:4e:7c:8d: f6:db:d0:74:1f:ae:ad:df:0c:39:bb:9e:a2:47:7d: f4:58:e1:e0:c3:66:dc:19:c0:43:1a:35:87:35:87: cc:21:d2:3f:d6:08:3e:0e:4e:55:58:ad:e9:c4:f8: 04:ee:76:d9:5e:74:68:94:14:a0:0a:a6:21:00:e1: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:A1:D0:25:31:0F:B8:AF:B1:73:82:44:15:17:C7:B8:D9:E1:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D84E9714D0C511EA8D4FF06BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.188.0/22 IPv6: 2001:df4:5c80::/48 Signature Algorithm: sha256WithRSAEncryption 69:bd:c8:4d:3b:b9:94:f3:0a:9f:d8:6b:a5:93:f1:c8:c3:4c: d1:c7:84:f5:f8:c0:cb:16:8b:21:e2:79:4b:8f:a8:b5:a2:fb: ce:02:e1:32:e7:e0:b7:52:6c:fc:62:23:04:00:c0:d0:10:ff: ba:78:d0:4c:f0:74:ac:dd:0b:a3:9b:f1:39:da:c2:05:f0:6d: 4c:97:ba:f3:08:a4:96:5a:94:b8:25:f4:f9:97:c2:81:5d:8c: bc:e2:ec:6f:b8:bf:ac:5d:7c:98:30:81:b8:c8:49:19:a3:ee: 01:09:7a:cd:1f:5c:c2:24:41:a5:ca:3b:9f:00:c1:6e:3f:4e: 9e:87:4a:00:4d:37:7f:e5:46:29:f7:c1:72:2b:ab:ab:8b:7d: d6:65:5d:1c:df:3a:09:00:10:e5:e5:45:d6:f0:ba:ef:a9:58: 32:13:c3:85:57:dc:62:08:63:f1:df:8d:cc:79:29:dd:ac:7c: 88:15:5b:5a:93:ea:83:27:96:bd:a8:f5:55:56:c4:c2:9f:ed: b4:ad:e9:af:9c:4f:4e:0c:56:74:71:26:97:ad:53:dc:de:1a: c9:c2:08:b6:82:0f:0e:c9:27:32:31:c8:bc:90:b5:17:4d:d3: 5e:52:21:52:15:a9:98:02:f1:ce:48:ad:0f:e1:50:77:58:aa: 96:86:22:81 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTI1MTE0MjEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZmNDk5MS00MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KCcditXnuRn6oJtiEq3eZFvxNPMFiF5glImtInS72uQHPRlGn4ywaKWhj++ SodnDkSjonvxh/D1UEWz7l5E2MqUvhvJnEohCwRnuwYm9vJyLKs2a4c5lNdR62/A tPCouR/3pL2hAyq0IU7v4Ma4n43lrEYx9trA2xGu35zJIvHfG4duR7941ExieqFV f9EXKjjk2L0FIT5UYO7pdhY+wuh6B0WU6jPyOVsQgkruV/Yvxjum2DgRI0xt7eHv BfVOfI3229B0H66t3ww5u56iR330WOHgw2bcGcBDGjWHNYfMIdI/1gg+Dk5VWK3p xPgE7nbZXnRolBSgCqYhAOHkRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCTQodAl MQ+4r7FzgkQVF8e42eGAMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDg0RTk3MTRE MEM1MTFFQThENEZGMDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnSbwwDwQCAAIwCQMHACABDfRcgDANBgkqhkiG9w0BAQsF AAOCAQEAab3ITTu5lPMKn9hrpZPxyMNM0ceE9fjAyxaLIeJ5S4+otaL7zgLhMufg t1Js/GIjBADA0BD/unjQTPB0rN0Lo5vxOdrCBfBtTJe68wikllqUuCX0+ZfCgV2M vOLsb7i/rF18mDCBuMhJGaPuAQl6zR9cwiRBpco7nwDBbj9OnodKAE03f+VGKffB ciurq4t91mVdHN86CQAQ5eVF1vC676lYMhPDhVfcYghj8d+NzHkp3ax8iBVbWpPq gyeWvaj1VVbEwp/ttK3pr5xPTgxWdHEml61T3N4aycIItoIPDsknMjHIvJC1F03T XlIhUhWpmALxzkitD+FQd1iqloYigQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org