$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa File: DB6A217EEE3311EC852B2644C4F9AE02.roa (raw, json) Hash identifier: WYGaTnaCJfj3E7TFh3pcIVIFLev58/kTzkw/RsSS30U= Subject key identifier: 70:25:15:9D:AC:74:65:1C:98:D5:75:C4:54:94:77:A0:54:E9:E6:1E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 83C9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa Signing time: Wed 28 Feb 2024 06:56:50 +0000 ROA not before: Wed 28 Feb 2024 06:56:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132765 IP address blocks: 103.189.102.0/23 maxlen: 24 103.199.97.0/24 maxlen: 24 2001:df0:d2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33737 (0x83c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 28 06:56:50 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65ded932-5048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:fb:27:ad:e8:ca:fc:52:9c:25:2e:33:7f: d1:b6:e5:3b:3c:5e:f7:29:ce:bc:c8:87:a8:d3:64: c8:19:0e:17:76:8a:3b:0d:50:a1:94:19:c0:73:da: 2f:4f:ce:92:c5:a6:c2:69:12:e6:55:0d:6e:12:ea: cf:c0:15:75:50:26:97:70:2c:76:88:57:27:0b:c9: 9a:ed:4f:cf:64:0f:0d:b0:49:6d:c2:9b:ab:9d:7d: 75:e2:b5:cb:1c:c5:7c:ce:dd:c7:ee:18:54:c9:d5: 9f:a8:12:8f:4f:66:d8:72:b8:4c:7c:ea:e8:a5:42: 54:42:20:23:2b:f8:77:e1:40:f4:17:dd:5a:4e:15: db:17:b5:81:f5:59:38:24:25:74:92:b9:d0:3d:64: a4:31:5d:5a:03:59:6c:73:99:18:a4:54:39:e1:0d: eb:8f:5d:fb:25:21:ac:50:c6:4a:cb:e8:3f:11:85: ec:2a:b5:a4:b2:63:9e:13:17:2a:68:93:57:a1:b7: 2e:6c:98:22:46:60:bc:21:e1:4e:6b:14:1f:87:ed: 89:d7:54:98:8b:20:dc:2d:64:13:c9:9a:c7:33:73: 93:d9:b1:32:fe:be:6b:b6:71:f3:ee:57:25:1a:56: 04:26:d0:1a:ca:0b:b5:a8:e9:c4:ea:b2:68:71:60: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:25:15:9D:AC:74:65:1C:98:D5:75:C4:54:94:77:A0:54:E9:E6:1E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB6A217EEE3311EC852B2644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.102.0/23 103.199.97.0/24 IPv6: 2001:df0:d2c0::/48 Signature Algorithm: sha256WithRSAEncryption 80:79:20:6b:5d:ef:1e:29:2e:37:f5:e6:74:1b:c6:59:39:41: 17:ce:75:cf:2b:93:3c:b2:e6:d6:57:40:82:e9:d4:04:39:10: 10:51:f9:9b:3a:9b:20:ad:9f:bd:f5:b2:c0:47:78:95:fd:bf: 84:ad:ac:40:66:72:9a:48:d6:68:e8:76:70:98:6d:c3:16:1e: fc:0c:95:1a:db:25:30:6e:1d:c2:23:69:db:9e:60:fa:f4:8e: 97:ff:fa:7f:3b:cd:8e:8a:8a:d0:d5:f9:fd:06:5e:37:98:6d: 14:11:98:55:ac:cb:55:7e:4c:1d:de:23:03:35:7f:64:1a:10: 3f:d9:7e:e6:83:af:ae:e3:e5:9f:10:1e:7a:66:ba:49:f0:55: 34:a5:7e:4d:53:f7:66:63:6d:da:e2:87:61:de:eb:a1:2d:04: 40:c0:c9:20:e5:e0:b3:56:1a:ef:11:d2:fe:ee:fd:74:6c:65: cf:07:8c:78:03:27:08:49:4e:77:65:55:ae:f1:dc:fe:b5:aa: a8:a1:12:90:e8:68:3a:13:50:10:28:46:af:5b:13:03:14:c7: 3f:70:d7:94:68:4c:76:36:37:29:dd:6a:af:10:5b:0c:e5:49: 03:e1:ef:e2:b5:b8:15:f5:6d:3a:cb:79:32:de:cf:e1:a8:04: 68:ab:f9:19 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAIPJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIyODA2NTY1MFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVkZWQ5MzItNTA0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeS+yet6Mr8UpwlLjN/0bblOzxe9ynOvMiHqNNkyBkOF3aKOw1QoZQZwHPa L0/OksWmwmkS5lUNbhLqz8AVdVAml3AsdohXJwvJmu1Pz2QPDbBJbcKbq519deK1 yxzFfM7dx+4YVMnVn6gSj09m2HK4THzq6KVCVEIgIyv4d+FA9BfdWk4V2xe1gfVZ OCQldJK50D1kpDFdWgNZbHOZGKRUOeEN649d+yUhrFDGSsvoPxGF7Cq1pLJjnhMX KmiTV6G3LmyYIkZgvCHhTmsUH4ftiddUmIsg3C1kE8maxzNzk9mxMv6+a7Zx8+5X JRpWBCbQGsoLtajpxOqyaHFgSCsCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBRwJRWd rHRlHJjVdcRUlHegVOnmHjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCNkEyMTdF RUUzMzExRUM4NTJCMjY0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZ71mAwQAZ8dhMA8EAgACMAkDBwAgAQ3w0sAwDQYJKoZI hvcNAQELBQADggEBAIB5IGtd7x4pLjf15nQbxlk5QRfOdc8rkzyy5tZXQILp1AQ5 EBBR+Zs6myCtn731ssBHeJX9v4StrEBmcppI1mjodnCYbcMWHvwMlRrbJTBuHcIj adueYPr0jpf/+n87zY6KitDV+f0GXjeYbRQRmFWsy1V+TB3eIwM1f2QaED/ZfuaD r67j5Z8QHnpmuknwVTSlfk1T92Zjbdrih2He66EtBEDAySDl4LNWGu8R0v7u/XRs Zc8HjHgDJwhJTndlVa7x3P61qqihEpDoaDoTUBAoRq9bEwMUxz9w15RoTHY2Nynd aq8QWwzlSQPh7+K1uBX1bTrLeTLez+GoBGir+Rk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org