$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa File: D8DD3FAAF72611EAAECC253FC4F9AE02.roa (raw, json) Hash identifier: gXwwm3j40TS1aOJ8PSNUc7v1RwdrpjxH6tpce0NQSvE= Subject key identifier: AA:76:71:62:AD:F8:A7:56:D1:78:A1:F7:29:8B:CD:7B:F4:AF:91:E8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 728A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa Signing time: Mon 22 May 2023 12:22:10 +0000 ROA not before: Mon 22 May 2023 12:22:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139572 IP address blocks: 103.111.158.0/23 maxlen: 24 103.127.100.0/22 maxlen: 24 103.144.114.0/23 maxlen: 24 2001:df2:1bc0::/48 maxlen: 48 2001:df2:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29322 (0x728a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 22 12:22:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=646b5e71-26b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:98:ad:62:dd:bc:07:1c:0e:41:8d:84:c4: 55:4f:56:b8:8a:62:b5:24:0a:39:7a:a8:50:f4:4d: 59:5b:a3:c8:af:d1:1b:c5:1d:32:0e:47:a2:0d:7c: 3f:54:80:e7:d2:10:ff:b7:d5:a0:71:e0:ca:6d:85: e9:18:12:97:c3:72:00:79:43:af:c8:c1:7d:ab:ce: d3:78:6d:2c:bf:74:55:87:d9:66:cc:24:4c:cf:79: 6e:ac:cf:96:5e:1f:b9:68:ca:99:30:74:1c:3e:01: 80:04:65:1e:89:15:6c:59:3a:5d:77:6e:15:a5:f1: a5:dc:65:67:16:e0:ca:c7:8d:8b:be:56:0c:fb:41: d2:58:d2:84:06:31:9f:93:2e:12:be:3c:15:1f:86: 15:cf:66:60:6c:1e:71:c8:99:fc:1d:93:dd:c7:26: d7:6a:c6:4e:ae:7f:0b:eb:c3:96:81:33:b5:89:74: d2:23:ff:26:86:92:e7:b2:b5:6a:be:90:5b:4c:70: 70:dd:7d:00:21:63:82:f8:75:65:95:f3:80:ed:67: 81:90:6f:9d:6a:44:29:af:a1:54:47:83:38:eb:7a: 3a:a5:d8:be:a3:5f:20:3b:f1:f3:6f:40:15:36:76: 96:37:f5:f4:2b:01:22:8b:f1:91:83:3c:b6:88:30: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:71:62:AD:F8:A7:56:D1:78:A1:F7:29:8B:CD:7B:F4:AF:91:E8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.158.0/23 103.127.100.0/22 103.144.114.0/23 IPv6: 2001:df2:1bc0::/48 2001:df2:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 72:1d:92:35:8c:ac:35:cd:37:27:fc:84:e5:54:7e:c1:32:06: d8:37:e0:d9:04:d9:98:03:36:1e:2a:d7:76:5b:e4:2a:b0:b8: 87:c9:19:03:c4:b2:7b:b0:c9:71:3f:08:4b:1f:df:ab:5b:15: 2d:3c:ca:05:9e:55:5c:38:56:b8:4f:5b:f0:1b:17:78:82:fb: 7f:28:bf:67:3a:42:4f:56:04:22:7e:36:f2:17:88:fd:2f:02: 83:a0:6e:99:50:b9:ed:57:f5:cf:dd:ac:08:e4:2e:60:83:66: b2:e6:d6:be:2d:f2:e6:fa:18:4b:79:84:c2:b1:a2:e3:b5:36: aa:e3:1d:6f:7d:70:16:f8:a8:96:bd:d6:d8:52:40:62:23:6a: 6a:9c:6c:7c:14:a1:56:71:c8:95:6a:87:0d:e3:45:5e:6c:bc: 3c:5b:48:16:47:cf:f4:91:43:e2:e7:bc:76:99:6b:6e:bb:7b: 83:f3:4e:cb:ea:58:1b:2a:bd:5a:fc:a8:ec:6b:6f:d6:11:e4: 6e:9b:51:19:23:88:a5:45:55:4d:fb:e4:1a:21:db:de:ea:a7: 86:eb:2b:d0:8c:1c:90:0b:36:f4:d0:7c:5c:e0:f7:fc:36:e2: df:c4:81:68:d2:5a:c3:c3:b4:40:a2:ba:02:83:c0:4e:81:10: 18:ef:65:95 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICcoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTIyMTIyMjEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZiNWU3MS0yNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dmYrWLdvAccDkGNhMRVT1a4imK1JAo5eqhQ9E1ZW6PIr9EbxR0yDkeiDXw/ VIDn0hD/t9WgceDKbYXpGBKXw3IAeUOvyMF9q87TeG0sv3RVh9lmzCRMz3lurM+W Xh+5aMqZMHQcPgGABGUeiRVsWTpdd24VpfGl3GVnFuDKx42LvlYM+0HSWNKEBjGf ky4SvjwVH4YVz2ZgbB5xyJn8HZPdxybXasZOrn8L68OWgTO1iXTSI/8mhpLnsrVq vpBbTHBw3X0AIWOC+HVllfOA7WeBkG+dakQpr6FUR4M463o6pdi+o18gO/Hzb0AV NnaWN/X0KwEii/GRgzy2iDCuWQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKp2cWKt +KdW0Xih9ymLzXv0r5HoMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDhERDNGQUFG NzI2MTFFQUFFQ0MyNTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBAFnb54DBAJnf2QDBAFnkHIwGAQCAAIwEgMHACABDfIbwAMH ACABDfJxwDANBgkqhkiG9w0BAQsFAAOCAQEAch2SNYysNc03J/yE5VR+wTIG2Dfg 2QTZmAM2HirXdlvkKrC4h8kZA8Sye7DJcT8ISx/fq1sVLTzKBZ5VXDhWuE9b8BsX eIL7fyi/ZzpCT1YEIn428heI/S8Cg6BumVC57Vf1z92sCOQuYINmsubWvi3y5voY S3mEwrGi47U2quMdb31wFviolr3W2FJAYiNqapxsfBShVnHIlWqHDeNFXmy8PFtI FkfP9JFD4ue8dplrbrt7g/NOy+pYGyq9Wvyo7Gtv1hHkbptRGSOIpUVVTfvkGiHb 3uqnhusr0IwckAs29NB8XOD3/Dbi38SBaNJaw8O0QKK6AoPAToEQGO9llQ== -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:35 2024 by rpki-client on console-ams.rpki-client.org