$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa File: DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa (raw, json) Hash identifier: FlSBGwDWBaAapvzA0sXPsljpRszVCB8cuXnQG2jD8iw= Subject key identifier: 96:54:05:F8:F4:7B:66:24:07:DA:95:83:A8:02:74:3D:37:4B:21:CB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7100 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa Signing time: Wed 10 May 2023 16:46:10 +0000 ROA not before: Wed 10 May 2023 16:46:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150571 IP address blocks: 103.159.99.0/24 maxlen: 24 2001:df2:3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28928 (0x7100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:46:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bca52-b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:bc:36:23:f2:9f:9a:1d:8a:da:e0:45:c0: 56:fa:c4:fe:c4:6f:10:ce:e1:0c:02:c1:a9:75:b9: 5c:27:9b:d7:d9:b9:80:79:29:d1:7f:e4:09:98:6f: 8e:7d:15:3e:12:8e:e5:13:dc:e7:cb:c6:7a:40:ee: 52:95:a8:ad:b3:52:1b:d8:25:65:3e:b4:fd:0f:c0: 32:3d:c8:16:0b:4f:4c:fb:44:9f:f7:d1:2b:7a:bf: 70:e2:63:c8:f6:c5:72:86:69:ea:10:98:c1:75:34: 85:29:7a:13:92:66:51:b6:5c:b9:0b:e3:0a:5a:04: f7:87:79:97:54:95:18:5e:35:b4:42:7d:16:95:2b: e6:f2:6b:8d:2a:cc:06:1c:70:41:05:32:25:80:29: 71:d7:85:07:ce:33:43:f3:ad:6c:2d:f2:52:2c:8a: 36:72:bc:98:2b:d4:b5:22:ae:d8:bd:de:f3:3e:af: 3e:39:4c:a3:87:5b:04:51:2a:1e:0d:c1:c8:97:a2: cf:8d:44:ae:3a:3d:90:61:07:84:d7:d8:03:d3:45: c3:f4:e2:9c:d4:7e:6b:2c:b5:a8:04:c9:a5:67:78: db:f2:58:d6:a3:4a:3a:1e:58:6e:52:31:7b:a1:43: aa:57:81:78:fe:34:02:68:8f:02:74:a4:e9:76:22: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:54:05:F8:F4:7B:66:24:07:DA:95:83:A8:02:74:3D:37:4B:21:CB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.99.0/24 IPv6: 2001:df2:3c0::/48 Signature Algorithm: sha256WithRSAEncryption 0f:1c:8f:a4:b7:0a:f7:59:e6:d7:a8:3b:33:a2:77:f0:e8:56: 92:41:d8:9a:96:81:c2:78:cd:3a:74:61:91:c6:41:ee:31:bb: b1:5c:70:cf:59:f6:71:92:15:41:7a:05:e9:0a:1c:51:24:7c: fd:ed:33:18:8c:f5:4b:e2:7e:77:7a:2a:4c:e0:c4:a1:75:87: bb:32:c0:51:e2:99:1f:c4:20:51:4d:fd:b6:81:43:f3:f0:03: d8:34:e6:02:81:47:93:7d:52:bd:e8:4c:6c:97:67:6c:8c:b6: 66:33:cf:c3:17:85:c1:24:f6:54:18:a9:c4:32:1f:8c:71:c9: ab:bb:77:80:51:c3:a3:71:c2:cf:5c:e6:42:8e:0e:53:53:33: fe:1f:ce:51:de:b3:0f:be:f5:56:f9:62:32:20:23:09:6a:80: 41:c2:95:56:5f:56:36:89:b8:04:c4:af:41:70:af:6c:0b:3e: b7:bc:68:22:d8:f8:25:5e:35:28:d5:c7:73:da:28:ec:b6:28: a0:1d:d6:fc:23:de:1a:38:a9:f2:5d:b7:a9:69:fa:ca:dd:d3: e1:72:58:a0:97:59:15:da:f3:f5:fa:0d:8c:77:69:00:50:9b: df:7b:a4:ec:62:b1:62:fe:c1:10:42:87:12:1e:6b:47:2e:53: 1b:48:fd:9e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2E1Mi1iOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqC8NiPyn5oditrgRcBW+sT+xG8QzuEMAsGpdblcJ5vX2bmAeSnRf+QJmG+O fRU+Eo7lE9zny8Z6QO5Slaits1Ib2CVlPrT9D8AyPcgWC09M+0Sf99Erer9w4mPI 9sVyhmnqEJjBdTSFKXoTkmZRtly5C+MKWgT3h3mXVJUYXjW0Qn0WlSvm8muNKswG HHBBBTIlgClx14UHzjND861sLfJSLIo2cryYK9S1Iq7Yvd7zPq8+OUyjh1sEUSoe DcHIl6LPjUSuOj2QYQeE19gD00XD9OKc1H5rLLWoBMmlZ3jb8ljWo0o6HlhuUjF7 oUOqV4F4/jQCaI8CdKTpdiJiFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJZUBfj0 e2YkB9qVg6gCdD03SyHLMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREE5RkE2RTZB QjcxMTFFRDhBREYwNjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnn2MwDwQCAAIwCQMHACABDfIDwDANBgkqhkiG9w0BAQsF AAOCAQEADxyPpLcK91nm16g7M6J38OhWkkHYmpaBwnjNOnRhkcZB7jG7sVxwz1n2 cZIVQXoF6QocUSR8/e0zGIz1S+J+d3oqTODEoXWHuzLAUeKZH8QgUU39toFD8/AD 2DTmAoFHk31SvehMbJdnbIy2ZjPPwxeFwST2VBipxDIfjHHJq7t3gFHDo3HCz1zm Qo4OU1Mz/h/OUd6zD771VvliMiAjCWqAQcKVVl9WNom4BMSvQXCvbAs+t7xoItj4 JV41KNXHc9oo7LYooB3W/CPeGjip8l23qWn6yt3T4XJYoJdZFdrz9foNjHdpAFCb 33uk7GKxYv7BEEKHEh5rRy5TG0j9ng== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org