$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC8B21DA1F3F11EB81DE383EC4F9AE02.roa File: DC8B21DA1F3F11EB81DE383EC4F9AE02.roa (raw, json) Hash identifier: JN9DxXD1gUqCQL/FENH7aKDP6k6lca0vOYjMDfhW0k0= Subject key identifier: D2:85:73:D9:3B:62:38:7D:F3:04:BB:AE:D8:CA:70:62:D7:2A:4D:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6A3B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC8B21DA1F3F11EB81DE383EC4F9AE02.roa Signing time: Wed 10 May 2023 16:13:46 +0000 ROA not before: Wed 10 May 2023 16:13:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 132983 IP address blocks: 103.27.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27195 (0x6a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:13:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc2b9-6776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:46:4a:de:84:ee:bf:f8:4b:5c:da:18:6e: f5:b5:a6:f4:8a:fc:2f:06:39:69:09:d1:4c:46:ab: bf:58:54:1b:a1:aa:98:4d:f5:c8:59:2e:4b:f2:92: 9b:0a:61:c9:bd:25:98:b6:bd:79:a5:0a:71:4a:7a: 0f:35:14:a2:51:42:c4:ab:40:db:c1:fe:a7:de:aa: 26:60:97:44:eb:34:dc:12:c9:a0:a4:f2:de:48:81: 1f:75:3f:8d:0a:b0:3c:43:59:73:4d:cb:4b:27:4c: e8:20:79:da:3a:6e:52:d6:e5:fe:c1:52:9e:08:f1: c0:59:9d:7d:16:ba:7d:ae:bd:b1:6e:ed:06:28:d0: 36:87:53:1d:5d:0c:5e:24:d6:51:e6:61:e4:82:b4: 07:63:4c:2d:e8:9f:4a:42:d5:eb:90:ce:3f:ce:c9: 90:45:68:d6:90:65:f1:27:01:5e:7b:92:9e:52:2a: 75:2d:51:cd:cf:1d:a9:cb:dd:ad:e7:bb:91:59:05: 80:b6:03:f7:c8:e2:bb:9d:56:07:87:08:2c:53:0e: 8d:80:a2:17:aa:bf:0c:c6:b1:14:3e:f5:32:8d:66: 73:b6:40:7d:ad:92:55:28:56:0c:2c:15:c2:f7:3d: 5a:dc:bb:48:f1:23:4c:1c:de:5d:fe:69:ed:55:ab: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:85:73:D9:3B:62:38:7D:F3:04:BB:AE:D8:CA:70:62:D7:2A:4D:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DC8B21DA1F3F11EB81DE383EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.16.0/22 Signature Algorithm: sha256WithRSAEncryption 75:59:83:ab:bf:bf:b9:bd:1d:42:57:c3:42:2c:ee:88:dd:fb: 44:02:7c:e6:f9:41:e1:60:a8:19:d7:3a:bb:19:99:49:ed:43: 74:24:d8:15:74:12:8e:10:75:e1:46:d2:e9:b2:5e:ee:45:1a: d0:df:24:9a:29:dc:44:1f:37:aa:13:25:96:e6:66:b7:5c:9f: 17:6d:8a:cb:73:63:70:0f:48:7e:4c:5d:70:a5:09:5b:2d:83: 9d:09:5c:be:9b:5a:8f:04:2d:81:72:b8:58:f2:06:3a:2a:b1: 6e:58:69:74:82:0e:77:f8:53:da:f8:ae:c1:40:d0:47:a0:b4: a1:0d:0e:52:42:0c:16:d6:e0:a5:39:66:c0:dd:fa:fe:a2:d8: 15:28:22:53:78:55:2f:fb:b4:80:e3:86:65:aa:70:41:57:9b: 45:a8:e9:4a:f6:d2:77:4d:a1:ad:af:52:95:26:56:12:14:1b: 85:3d:9a:3b:ce:5e:94:58:52:45:47:32:c9:cc:35:d2:99:ab: bb:37:95:0e:c2:8d:d2:63:34:4e:67:b3:c9:de:f6:7d:4d:aa: 53:f2:2d:a2:e3:29:5e:c3:fc:2a:ef:fd:b4:c9:e6:27:6e:ec: 7e:3d:52:75:28:17:83:4a:94:9b:c3:b6:15:8c:88:1c:7a:a6: 55:aa:a3:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICajswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzJiOS02Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UtGSt6E7r/4S1zaGG71tab0ivwvBjlpCdFMRqu/WFQboaqYTfXIWS5L8pKb CmHJvSWYtr15pQpxSnoPNRSiUULEq0Dbwf6n3qomYJdE6zTcEsmgpPLeSIEfdT+N CrA8Q1lzTctLJ0zoIHnaOm5S1uX+wVKeCPHAWZ19Frp9rr2xbu0GKNA2h1MdXQxe JNZR5mHkgrQHY0wt6J9KQtXrkM4/zsmQRWjWkGXxJwFee5KeUip1LVHNzx2py92t 57uRWQWAtgP3yOK7nVYHhwgsUw6NgKIXqr8MxrEUPvUyjWZztkB9rZJVKFYMLBXC 9z1a3LtI8SNMHN5d/mntVavjDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNKFc9k7 Yjh98wS7rtjKcGLXKk37MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREM4QjIxREEx RjNGMTFFQjgxREUzODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnGxAwDQYJKoZIhvcNAQELBQADggEBAHVZg6u/v7m9HUJX w0Is7ojd+0QCfOb5QeFgqBnXOrsZmUntQ3Qk2BV0Eo4QdeFG0umyXu5FGtDfJJop 3EQfN6oTJZbmZrdcnxdtistzY3APSH5MXXClCVstg50JXL6bWo8ELYFyuFjyBjoq sW5YaXSCDnf4U9r4rsFA0EegtKENDlJCDBbW4KU5ZsDd+v6i2BUoIlN4VS/7tIDj hmWqcEFXm0Wo6Ur20ndNoa2vUpUmVhIUG4U9mjvOXpRYUkVHMsnMNdKZq7s3lQ7C jdJjNE5ns8ne9n1NqlPyLaLjKV7D/Crv/bTJ5idu7H49UnUoF4NKlJvDthWMiBx6 plWqoy0= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:35 2024 by rpki-client on console-ams.rpki-client.org