$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa File: D9A988BA28A611EBAB193C69C4F9AE02.roa (raw, json) Hash identifier: q4PDIWjWNRoW1w8nwYa3URsynd+lkbnQTPV7xvV7crU= Subject key identifier: C8:0E:CD:F5:72:86:03:E3:BA:76:7D:07:AF:BE:54:1D:F4:DA:62:90 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71A8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa Signing time: Wed 10 May 2023 16:49:21 +0000 ROA not before: Wed 10 May 2023 16:49:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55757 IP address blocks: 103.243.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29096 (0x71a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb10-250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ba:7b:64:7f:ca:79:72:0d:47:4e:b3:fc:29: 2e:a2:eb:4a:e7:0d:59:ac:6c:61:dd:f2:79:8c:e0: df:ed:32:c8:52:11:4a:72:06:4b:09:fe:ed:e8:90: 39:5f:3e:02:45:84:21:c9:38:9b:10:bb:77:9f:59: 5d:97:b8:b6:7f:dc:4e:c9:3c:59:21:41:12:5f:12: 08:f2:f7:68:66:fe:2a:7c:fd:9e:97:5e:7c:7f:bf: 65:50:3f:ca:92:96:c3:14:01:50:8a:0c:c8:da:d5: c6:be:51:7f:81:06:ad:55:e3:df:5a:9c:75:c3:1e: dd:95:9d:99:ef:c0:70:e2:20:12:85:a5:0e:eb:50: b5:b4:6e:b7:28:50:7b:33:3e:01:df:9b:b1:b5:ed: c3:a2:d1:28:bb:08:39:05:ec:77:bb:1b:77:cc:14: 8e:db:f1:7e:7b:53:f8:b2:db:9b:59:f0:f8:0c:0b: db:b4:ff:e2:e0:fd:d9:2a:e8:de:91:ff:f2:f1:e7: a3:9e:ea:17:11:fc:12:45:6a:79:3a:43:9a:fa:ad: fc:53:a7:0e:3a:32:63:16:09:62:7c:f6:de:6a:be: a9:50:04:62:25:ce:28:38:28:ff:87:a3:20:13:06: 59:a0:8f:51:7c:04:75:56:16:cd:05:b0:8c:72:18: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:CD:F5:72:86:03:E3:BA:76:7D:07:AF:BE:54:1D:F4:DA:62:90 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.28.0/24 Signature Algorithm: sha256WithRSAEncryption 59:db:a9:98:1b:6f:91:e7:43:8e:d5:bc:48:65:a1:49:83:d1: f5:74:5d:4b:8f:dc:14:38:4f:92:0b:34:2c:eb:38:90:4e:7d: 51:12:ee:62:c2:28:7a:08:c3:45:5e:fc:ac:5d:34:37:79:e8: 09:5d:e8:7d:9e:52:46:50:53:80:6b:42:c3:30:09:c0:47:41: 25:c6:d7:83:d2:42:f5:11:e4:67:63:b4:3c:8d:fc:9e:2b:2a: cc:47:8d:fd:29:13:8b:70:ba:36:ad:17:2b:17:eb:c7:92:4e: f7:7c:cf:f6:23:da:09:64:f3:7c:b3:b3:d7:ba:96:92:11:84: e4:a4:d7:b4:be:46:cd:b5:ea:c7:03:c2:3b:59:d5:b1:9d:9e: e5:52:1a:2e:41:f7:8c:e5:66:ea:df:cb:4e:14:f1:0b:70:a0: 6e:e8:27:a1:c6:5d:31:97:3c:f3:57:c7:17:ba:9b:ae:df:25: 33:bf:1b:08:2d:4b:28:e0:18:6c:ba:a6:72:18:c0:43:98:52: e6:2f:5d:e9:9e:4d:d7:ec:ed:81:7a:e9:52:8e:ff:49:15:e9: 08:5f:1e:11:64:26:cd:c6:ba:63:a0:34:28:e2:f0:d0:03:35: 7b:0a:07:db:0c:bb:dc:a7:a4:46:b2:75:54:68:df:88:04:31: 43:8d:f5:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTIxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxMC0yNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Lp7ZH/KeXINR06z/CkuoutK5w1ZrGxh3fJ5jODf7TLIUhFKcgZLCf7t6JA5 Xz4CRYQhyTibELt3n1ldl7i2f9xOyTxZIUESXxII8vdoZv4qfP2el158f79lUD/K kpbDFAFQigzI2tXGvlF/gQatVePfWpx1wx7dlZ2Z78Bw4iAShaUO61C1tG63KFB7 Mz4B35uxte3DotEouwg5Bex3uxt3zBSO2/F+e1P4stubWfD4DAvbtP/i4P3ZKuje kf/y8eejnuoXEfwSRWp5OkOa+q38U6cOOjJjFglifPbear6pUARiJc4oOCj/h6Mg EwZZoI9RfAR1VhbNBbCMchhrOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMgOzfVy hgPjunZ9B6++VB302mKQMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDlBOTg4QkEy OEE2MTFFQkFCMTkzQzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn8xwwDQYJKoZIhvcNAQELBQADggEBAFnbqZgbb5HnQ47V vEhloUmD0fV0XUuP3BQ4T5ILNCzrOJBOfVES7mLCKHoIw0Ve/KxdNDd56Ald6H2e UkZQU4BrQsMwCcBHQSXG14PSQvUR5GdjtDyN/J4rKsxHjf0pE4twujatFysX68eS Tvd8z/Yj2glk83yzs9e6lpIRhOSk17S+Rs216scDwjtZ1bGdnuVSGi5B94zlZurf y04U8QtwoG7oJ6HGXTGXPPNXxxe6m67fJTO/GwgtSyjgGGy6pnIYwEOYUuYvXeme Tdfs7YF66VKO/0kV6QhfHhFkJs3GumOgNCji8NADNXsKB9sMu9ynpEaydVRo34gE MUON9R4= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org