$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEE9BCBAD2AE11EC906EC956C4F9AE02.roa File: DEE9BCBAD2AE11EC906EC956C4F9AE02.roa (raw, json) Hash identifier: mFC7y2xEg7okMAXmyL3zWMhYggfsJlMQgQwfiArSvOg= Subject key identifier: 0F:D9:F8:9A:F7:47:90:1B:C1:66:7A:97:89:B2:96:63:FA:31:40:34 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B5C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEE9BCBAD2AE11EC906EC956C4F9AE02.roa Signing time: Wed 10 May 2023 16:19:18 +0000 ROA not before: Wed 10 May 2023 16:19:18 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134888 IP address blocks: 103.106.106.0/23 maxlen: 24 103.181.160.0/23 maxlen: 24 2001:df2:1440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27484 (0x6b5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:18 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc405-94a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:c1:9b:e1:6f:8f:4d:9c:62:36:37:34:2d: 48:01:0f:9d:a9:bb:52:b7:f1:6d:6e:a4:ee:93:4c: cc:1b:2c:cd:57:ab:7b:ea:03:aa:17:51:c2:36:f0: 3b:31:fb:06:8a:45:7e:7d:24:ed:74:b6:35:21:4a: e0:67:2f:8e:bd:84:de:fa:f9:f9:f6:85:76:07:d1: d9:a0:09:b7:9d:ba:58:99:61:9e:2a:37:c2:d2:ae: b8:09:f5:cc:b1:31:f1:20:70:4c:41:f6:0c:ae:be: ea:27:47:54:bb:b1:1e:dc:58:5d:8b:0e:6e:e2:9f: a9:59:d5:7b:0d:bc:38:d3:c4:0a:27:94:22:4f:53: 76:5d:27:71:ef:ea:5f:b3:90:3e:52:a8:cc:11:55: 28:ab:83:ca:71:f3:c6:03:f8:e4:54:38:38:58:5a: a2:06:84:a5:72:72:e3:ea:1e:b8:45:fa:d4:ce:3b: 59:9d:8e:74:4f:3f:c2:e4:c1:b6:86:ee:d1:2f:b6: 27:7f:b5:75:10:d2:c6:d1:c4:ac:9b:12:f3:37:67: 0c:e1:e6:45:94:1d:88:e4:b9:58:72:b0:7c:d4:30: 80:07:ef:54:99:aa:ae:4c:d7:a2:d7:7b:d9:43:79: 66:a0:19:78:ab:dd:b7:ac:db:24:b0:d5:e8:1f:e9: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D9:F8:9A:F7:47:90:1B:C1:66:7A:97:89:B2:96:63:FA:31:40:34 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEE9BCBAD2AE11EC906EC956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.106.0/23 103.181.160.0/23 IPv6: 2001:df2:1440::/48 Signature Algorithm: sha256WithRSAEncryption 66:07:0b:0c:9c:66:e8:ba:fe:30:d5:cc:09:13:a8:c2:0a:71: 11:8e:3a:7b:2e:6b:b4:2c:ad:69:58:80:29:47:bd:0d:a5:d0: 2c:3e:52:ce:9d:73:77:38:a5:7f:13:fc:3a:0f:5a:23:ba:31: 0e:cf:8f:07:02:a5:8c:c4:21:0e:e8:ae:33:22:ed:ea:81:0f: 4e:93:31:fb:4b:2d:1b:46:b4:61:43:4b:7b:3a:08:94:90:ff: 32:84:72:f0:0c:e2:5d:68:67:23:ca:67:ef:ee:78:39:cf:05: 4c:bb:1d:3f:ce:7b:6a:35:a6:1a:c7:4b:3d:9c:77:a6:96:e7: a8:e2:99:7e:72:aa:e4:42:b3:81:7b:a3:fd:b4:95:a8:5d:a0: fe:04:62:a7:f4:5f:71:0d:e9:60:00:6c:2b:47:f4:98:84:c2: 91:c0:8e:54:c4:9d:6b:e4:75:4b:b0:40:1b:fb:ac:43:35:0f: b9:be:ea:d2:07:84:53:47:f4:81:ad:cb:c6:fe:f9:9c:80:d6: 40:15:dc:3a:a7:36:cb:b0:d4:3e:d0:69:db:4d:57:9a:87:39: 53:f7:7d:45:b5:0b:de:46:15:a5:7b:be:6c:46:1e:f4:41:cc: 27:43:1b:43:9c:e0:70:de:0d:c7:bb:ce:78:06:49:c3:82:0c: e1:9c:0b:75 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICa1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQwNS05NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/PBm+Fvj02cYjY3NC1IAQ+dqbtSt/FtbqTuk0zMGyzNV6t76gOqF1HCNvA7 MfsGikV+fSTtdLY1IUrgZy+OvYTe+vn59oV2B9HZoAm3nbpYmWGeKjfC0q64CfXM sTHxIHBMQfYMrr7qJ0dUu7Ee3Fhdiw5u4p+pWdV7Dbw408QKJ5QiT1N2XSdx7+pf s5A+UqjMEVUoq4PKcfPGA/jkVDg4WFqiBoSlcnLj6h64RfrUzjtZnY50Tz/C5MG2 hu7RL7Ynf7V1ENLG0cSsmxLzN2cM4eZFlB2I5LlYcrB81DCAB+9UmaquTNei13vZ Q3lmoBl4q923rNsksNXoH+lAgwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFA/Z+Jr3 R5AbwWZ6l4mylmP6MUA0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREVFOUJDQkFE MkFFMTFFQzkwNkVDOTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnamoDBAFntaAwDwQCAAIwCQMHACABDfIUQDANBgkqhkiG 9w0BAQsFAAOCAQEAZgcLDJxm6Lr+MNXMCROowgpxEY46ey5rtCytaViAKUe9DaXQ LD5Szp1zdzilfxP8Og9aI7oxDs+PBwKljMQhDuiuMyLt6oEPTpMx+0stG0a0YUNL ezoIlJD/MoRy8AziXWhnI8pn7+54Oc8FTLsdP857ajWmGsdLPZx3ppbnqOKZfnKq 5EKzgXuj/bSVqF2g/gRip/RfcQ3pYABsK0f0mITCkcCOVMSda+R1S7BAG/usQzUP ub7q0geEU0f0ga3Lxv75nIDWQBXcOqc2y7DUPtBp201Xmoc5U/d9RbUL3kYVpXu+ bEYe9EHMJ0MbQ5zgcN4Nx7vOeAZJw4IM4ZwLdQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org