$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCD2DCC2D6C311EC9E478684C4F9AE02.roa File: DCD2DCC2D6C311EC9E478684C4F9AE02.roa (raw, json) Hash identifier: 81MHJg1G2oUf1qeTU9IuZAVQrGRx0KgWmK93Zs1m0tI= Subject key identifier: 85:33:B8:F9:8B:3B:3A:28:FF:E3:6F:54:A4:28:DB:3C:48:42:2A:A6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7065 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCD2DCC2D6C311EC9E478684C4F9AE02.roa Signing time: Wed 10 May 2023 16:43:23 +0000 ROA not before: Wed 10 May 2023 16:43:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149536 IP address blocks: 103.187.137.0/24 maxlen: 24 2001:df1:6cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28773 (0x7065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:43:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9ab-3a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:74:8e:b7:51:17:0d:f3:67:69:72:d8:b1: e6:b8:a2:8a:e9:6a:9d:89:bc:be:80:6c:52:8e:41: d4:10:78:32:a5:27:96:f4:95:eb:a8:42:04:36:25: e0:6e:4e:b9:f7:76:f9:18:97:f8:66:bb:d8:9c:c5: 8d:36:34:07:64:a5:92:25:47:58:87:bc:43:70:29: 43:78:3a:99:bb:59:df:e3:b0:4f:d9:82:8a:84:b3: bd:f0:83:c2:2d:a7:8d:0e:a2:41:76:9c:9c:dd:68: 51:a5:9f:3f:4a:1e:90:24:55:52:eb:13:4b:a7:b6: a2:88:6d:b4:e3:ba:11:58:df:4e:0d:24:47:54:7f: 9e:09:30:ca:64:d8:73:2d:7e:5c:c3:96:56:89:71: ca:8b:c8:c2:ab:3c:df:52:6a:a3:81:bb:bf:50:af: 96:52:89:4a:6a:8a:28:92:aa:84:e3:ba:b3:fa:4e: f3:4f:b7:4e:77:e6:74:7f:73:1b:b6:39:08:87:39: 0a:59:ee:77:e3:ef:7d:07:c7:b0:3e:04:80:79:4e: 67:94:fd:0f:a5:53:ec:22:3f:2b:54:85:71:6c:a3: 3f:b5:3d:77:2f:20:5e:81:f7:0c:8e:d9:9a:27:91: ee:22:46:4a:5f:32:a8:e3:b5:35:6f:8e:04:a2:c9: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:B8:F9:8B:3B:3A:28:FF:E3:6F:54:A4:28:DB:3C:48:42:2A:A6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DCD2DCC2D6C311EC9E478684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.137.0/24 IPv6: 2001:df1:6cc0::/48 Signature Algorithm: sha256WithRSAEncryption 54:e3:39:54:e9:91:ce:4b:57:4c:d7:08:5e:98:ca:1e:09:68: 13:8d:b8:b0:e8:1c:0d:6a:b0:60:c7:53:1e:f0:ff:a7:60:31: e5:6c:55:41:51:c6:d5:70:51:ab:6e:4d:84:f0:9c:df:d0:4c: 3a:41:55:f1:a9:8d:45:72:c2:e0:46:70:41:15:1d:f7:0e:21: 0a:27:d0:24:ce:85:b9:ea:61:a4:b1:c9:16:c2:4c:2a:05:d3: f1:e3:52:0a:9a:e3:36:ac:a9:dc:49:83:b7:4f:31:70:ce:03: 8d:46:60:74:4f:58:0c:fc:e6:22:64:cb:1b:bc:6e:3a:c9:2a: 83:6a:69:e9:66:23:e3:29:67:0c:67:6a:d3:c7:f0:25:0a:76: f9:60:04:14:a7:69:3f:32:e5:ed:b7:f2:54:6a:f3:4c:96:55: 61:10:05:31:af:1d:c3:f0:ca:60:7d:1f:0c:a7:04:33:00:d4: f9:de:86:9e:b1:5a:a9:41:34:e6:9b:f4:70:6a:a4:04:bb:5b: 93:1e:bf:f9:c0:9d:37:44:09:d4:78:b2:d7:ec:37:71:53:1e: 38:c6:f8:aa:3a:20:0a:51:e2:28:74:f6:f5:96:55:90:cd:32: e5:db:d6:2d:61:8d:ec:d8:60:c5:51:bd:e1:ef:b2:15:e7:43: 0c:00:0e:a9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICcGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlhYi0zYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ip0jrdRFw3zZ2ly2LHmuKKK6Wqdiby+gGxSjkHUEHgypSeW9JXrqEIENiXg bk6593b5GJf4ZrvYnMWNNjQHZKWSJUdYh7xDcClDeDqZu1nf47BP2YKKhLO98IPC LaeNDqJBdpyc3WhRpZ8/Sh6QJFVS6xNLp7aiiG2047oRWN9ODSRHVH+eCTDKZNhz LX5cw5ZWiXHKi8jCqzzfUmqjgbu/UK+WUolKaoookqqE47qz+k7zT7dOd+Z0f3Mb tjkIhzkKWe534+99B8ewPgSAeU5nlP0PpVPsIj8rVIVxbKM/tT13LyBegfcMjtma J5HuIkZKXzKo47U1b44Eosk21QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIUzuPmL Ozoo/+NvVKQo2zxIQiqmMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRENEMkRDQzJE NkMzMTFFQzlFNDc4Njg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnu4kwDwQCAAIwCQMHACABDfFswDANBgkqhkiG9w0BAQsF AAOCAQEAVOM5VOmRzktXTNcIXpjKHgloE424sOgcDWqwYMdTHvD/p2Ax5WxVQVHG 1XBRq25NhPCc39BMOkFV8amNRXLC4EZwQRUd9w4hCifQJM6FuephpLHJFsJMKgXT 8eNSCprjNqyp3EmDt08xcM4DjUZgdE9YDPzmImTLG7xuOskqg2pp6WYj4ylnDGdq 08fwJQp2+WAEFKdpPzLl7bfyVGrzTJZVYRAFMa8dw/DKYH0fDKcEMwDU+d6GnrFa qUE05pv0cGqkBLtbkx6/+cCdN0QJ1Hiy1+w3cVMeOMb4qjogClHiKHT29ZZVkM0y 5dvWLWGN7NhgxVG94e+yFedDDAAOqQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org