$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa File: DB9F2F829E7E11EB95A1EF65C4F9AE02.roa (raw, json) Hash identifier: VeAdbfwjT8X+tzEHmMlPwFLYowM3RUgfdAL2MQwI+bY= Subject key identifier: A9:49:DF:7E:FB:64:4C:A4:CD:70:9F:17:1A:A2:FB:D0:1D:5C:8E:CB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6CB1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa Signing time: Wed 10 May 2023 16:25:46 +0000 ROA not before: Wed 10 May 2023 16:25:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136701 IP address blocks: 103.102.84.0/24 maxlen: 24 2001:df2:cd00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27825 (0x6cb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:25:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc58a-e66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:6c:34:02:eb:75:6d:1b:84:0e:05:ed:0f: bd:1c:ad:82:a7:44:67:80:a2:b3:d7:c0:e0:91:85: 1c:1e:19:06:c9:b0:a7:e5:6e:cd:91:16:08:d6:90: c0:af:c6:5e:33:b6:1b:f2:59:c4:20:f5:c7:4b:7f: 74:fc:b4:68:c2:0c:e6:c1:49:00:8c:52:de:0f:3a: d0:a0:32:99:58:84:6a:09:8b:ed:1e:0e:bb:e2:f8: e5:d8:ed:ef:75:84:71:cd:e0:a6:8a:d9:dc:c6:2d: 78:a7:3e:7c:be:48:e1:c8:e8:45:0c:75:d3:7b:04: 32:cc:9d:e0:5b:a4:56:ce:e7:75:91:f8:f4:75:f6: 27:22:6a:df:01:46:28:ef:9f:e6:74:d1:b9:a4:38: 30:bb:a0:1d:dc:ba:68:3f:79:ba:5c:23:a5:82:ca: ba:90:27:85:1d:68:a6:c0:08:ad:25:c8:f8:a8:1a: b7:75:12:e0:61:9b:7a:c3:b1:ae:79:f3:cf:ed:d5: e6:d8:5d:e1:f0:a2:ca:85:cd:51:38:05:84:d6:65: 1a:be:7d:b5:b9:e1:b5:41:c0:66:01:9a:ee:8f:c3: 96:cb:2c:46:64:53:e8:95:a8:d6:c1:9e:03:47:17: 10:0e:94:70:14:30:39:b6:6b:1f:3c:e5:72:75:09: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:49:DF:7E:FB:64:4C:A4:CD:70:9F:17:1A:A2:FB:D0:1D:5C:8E:CB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.84.0/24 IPv6: 2001:df2:cd00::/48 Signature Algorithm: sha256WithRSAEncryption 42:35:a8:c9:3a:fa:e2:c3:f9:ff:1f:74:53:6b:cb:65:6d:f2: 13:c7:5f:57:47:07:90:44:36:fc:ac:61:40:87:12:d5:d1:63: 84:67:ca:93:66:98:cd:78:e6:b6:00:03:bc:a8:68:dd:ac:f8: f5:a0:58:00:b4:f3:b4:4e:f3:c3:07:31:e6:fe:14:99:7f:39: c1:ec:c4:ea:c0:20:03:6e:9d:d2:12:e0:a9:00:85:f9:ef:34: 49:c7:7e:d9:aa:7f:16:66:ad:d7:c1:a1:d5:43:a0:07:97:60: 67:79:6b:93:cc:6e:b8:97:26:26:e8:52:ac:77:6d:a0:74:cb: d0:1b:c6:f1:b7:95:34:32:f8:ac:2d:eb:d7:88:2f:77:58:39: 07:6b:e7:6c:8b:8a:0b:39:8f:c0:f0:bb:b6:d4:3e:e2:aa:b5: 1c:84:26:25:4a:cc:ba:97:9a:7e:32:99:5d:e1:65:4f:26:87: e2:67:58:bd:7c:12:19:56:b3:e6:f0:23:c4:0a:d5:44:36:2d: 92:1f:78:92:f4:84:68:49:35:00:5c:f3:e8:83:61:19:f2:7e: fe:ae:ed:2d:b8:30:e9:70:43:7c:a9:bb:0a:0d:6e:48:32:c4: da:03:19:43:07:51:e9:ca:5c:30:e1:50:2b:bf:97:46:ef:5a: 1e:d6:c0:4e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNTQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU4YS1lNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCVsNALrdW0bhA4F7Q+9HK2Cp0RngKKz18DgkYUcHhkGybCn5W7NkRYI1pDA r8ZeM7Yb8lnEIPXHS390/LRowgzmwUkAjFLeDzrQoDKZWIRqCYvtHg674vjl2O3v dYRxzeCmitncxi14pz58vkjhyOhFDHXTewQyzJ3gW6RWzud1kfj0dfYnImrfAUYo 75/mdNG5pDgwu6Ad3LpoP3m6XCOlgsq6kCeFHWimwAitJcj4qBq3dRLgYZt6w7Gu efPP7dXm2F3h8KLKhc1ROAWE1mUavn21ueG1QcBmAZruj8OWyyxGZFPolajWwZ4D RxcQDpRwFDA5tmsfPOVydQnYqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKlJ3377 ZEykzXCfFxqi+9AdXI7LMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREI5RjJGODI5 RTdFMTFFQjk1QTFFRjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZlQwDwQCAAIwCQMHACABDfLNADANBgkqhkiG9w0BAQsF AAOCAQEAQjWoyTr64sP5/x90U2vLZW3yE8dfV0cHkEQ2/KxhQIcS1dFjhGfKk2aY zXjmtgADvKho3az49aBYALTztE7zwwcx5v4UmX85wezE6sAgA26d0hLgqQCF+e80 Scd+2ap/Fmat18Gh1UOgB5dgZ3lrk8xuuJcmJuhSrHdtoHTL0BvG8beVNDL4rC3r 14gvd1g5B2vnbIuKCzmPwPC7ttQ+4qq1HIQmJUrMupeafjKZXeFlTyaH4mdYvXwS GVaz5vAjxArVRDYtkh94kvSEaEk1AFzz6INhGfJ+/q7tLbgw6XBDfKm7Cg1uSDLE 2gMZQwdR6cpcMOFQK7+XRu9aHtbATg== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org