$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE10460E8C8E11EB97179C31C4F9AE02.roa File: DE10460E8C8E11EB97179C31C4F9AE02.roa (raw, json) Hash identifier: WcTjhbcThKdYA/nKAamd7NUEt7TDbIHKwnFXbC1Hl4c= Subject key identifier: C6:47:DD:23:30:43:6C:2C:D8:D7:04:3D:16:58:69:B8:55:1A:AD:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6EA8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE10460E8C8E11EB97179C31C4F9AE02.roa Signing time: Wed 10 May 2023 16:35:04 +0000 ROA not before: Wed 10 May 2023 16:35:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141478 IP address blocks: 103.160.223.0/24 maxlen: 24 2001:df5:aa80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28328 (0x6ea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:35:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc7b8-ab41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:4d:1f:8e:96:29:8c:c4:ab:15:f8:fb:b5: ae:2d:5b:53:66:11:f2:88:1e:34:09:5d:af:e4:0e: 91:7a:47:9d:18:e2:eb:f5:fc:3b:f7:cb:78:0e:e2: 2b:b3:30:7c:dd:07:62:13:00:82:76:dd:2e:b8:4a: cd:62:7d:0b:fb:a6:7e:b3:ee:8d:77:76:d2:20:68: 63:a1:b4:f2:da:de:1e:ab:20:dc:9a:6a:61:24:47: ae:88:53:f1:2a:90:06:c7:1d:10:aa:bd:4a:5b:ac: 71:79:f7:29:80:b6:6b:a6:48:bb:24:c5:88:34:99: df:88:82:26:c1:1b:4f:2e:73:30:fd:09:c3:e3:0d: fb:da:5e:ce:b2:f6:9e:3f:cd:fb:7d:bf:e3:d7:cb: 75:96:67:78:3e:6e:17:26:6b:b9:16:48:18:35:28: 53:94:9a:f6:10:91:3a:34:e6:05:f6:c9:2d:03:e4: db:58:c5:e8:21:df:51:02:1e:f3:4c:43:c7:20:44: 51:f1:4c:d0:b4:60:36:e5:00:c7:05:3f:48:b5:4a: 53:01:80:9a:2f:55:29:d2:93:ab:ee:f3:71:99:bf: ec:ee:26:22:3b:29:0b:92:2e:67:c5:00:aa:a3:85: 19:01:95:16:51:0d:2c:85:1e:1f:53:0d:8e:2d:2b: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:47:DD:23:30:43:6C:2C:D8:D7:04:3D:16:58:69:B8:55:1A:AD:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE10460E8C8E11EB97179C31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.223.0/24 IPv6: 2001:df5:aa80::/48 Signature Algorithm: sha256WithRSAEncryption 99:cd:4b:a3:c4:27:d4:00:e2:cb:bd:7a:e7:8c:5c:db:ad:f1: 5c:d8:a2:4d:81:47:e6:bc:e2:3b:46:0d:cf:47:c8:61:f5:4f: 9d:42:ee:70:c6:88:f2:1c:5f:40:30:ba:80:34:81:d4:b5:77: f7:98:1d:59:4b:24:17:b6:63:5d:df:41:c1:41:7c:15:ba:20: cc:67:77:df:50:82:bd:12:b6:97:be:5a:e2:3e:7f:74:82:54: 8b:9e:80:a8:f8:ef:c6:9a:f1:20:80:f9:7c:2b:e3:b5:9c:6d: 7f:75:af:66:80:ad:d7:50:ff:12:6c:e5:2c:6b:ee:18:b4:a9: bd:34:ea:21:f9:ec:81:ef:54:47:a7:66:e9:c9:27:85:6e:96: 65:25:44:d2:bd:43:38:0b:f7:e8:02:6a:33:fe:2d:ab:5d:22: 68:5e:4a:3d:91:66:92:d4:2b:ab:a4:54:d9:59:6d:4f:1c:84: 88:e0:cd:3c:9a:ce:06:e7:4c:99:b0:e2:59:27:a6:c4:78:7a: 2c:cb:4f:5c:4c:06:5d:0c:76:94:56:66:38:47:f5:7e:16:20: 0d:91:fa:97:cf:02:fb:12:17:d9:0d:9a:b9:35:f1:2a:7d:7d: d5:b7:22:38:55:a1:b9:17:26:ae:49:3c:a3:ab:0f:c0:8c:5d: 44:99:72:15 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICbqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzNTA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzdiOC1hYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaVNH46WKYzEqxX4+7WuLVtTZhHyiB40CV2v5A6RekedGOLr9fw798t4DuIr szB83QdiEwCCdt0uuErNYn0L+6Z+s+6Nd3bSIGhjobTy2t4eqyDcmmphJEeuiFPx KpAGxx0Qqr1KW6xxefcpgLZrpki7JMWINJnfiIImwRtPLnMw/QnD4w372l7Osvae P837fb/j18t1lmd4Pm4XJmu5FkgYNShTlJr2EJE6NOYF9sktA+TbWMXoId9RAh7z TEPHIERR8UzQtGA25QDHBT9ItUpTAYCaL1Up0pOr7vNxmb/s7iYiOykLki5nxQCq o4UZAZUWUQ0shR4fUw2OLSsOkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMZH3SMw Q2ws2NcEPRZYabhVGq18MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREUxMDQ2MEU4 QzhFMTFFQjk3MTc5QzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnoN8wDwQCAAIwCQMHACABDfWqgDANBgkqhkiG9w0BAQsF AAOCAQEAmc1Lo8Qn1ADiy71654xc263xXNiiTYFH5rziO0YNz0fIYfVPnULucMaI 8hxfQDC6gDSB1LV395gdWUskF7ZjXd9BwUF8FbogzGd331CCvRK2l75a4j5/dIJU i56AqPjvxprxIID5fCvjtZxtf3WvZoCt11D/EmzlLGvuGLSpvTTqIfnsge9UR6dm 6cknhW6WZSVE0r1DOAv36AJqM/4tq10iaF5KPZFmktQrq6RU2VltTxyEiODNPJrO BudMmbDiWSemxHh6LMtPXEwGXQx2lFZmOEf1fhYgDZH6l88C+xIX2Q2auTXxKn19 1bciOFWhuRcmrkk8o6sPwIxdRJlyFQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org