$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF818EE8AE3111EB90C5FF59C4F9AE02.roa File: DF818EE8AE3111EB90C5FF59C4F9AE02.roa (raw, json) Hash identifier: Bf4qgKqcyupGw5FrpWR5jlz8k0OO2q/X6M+o3vFgvM8= Subject key identifier: 05:91:CD:51:AF:E3:73:02:68:2A:27:22:94:D5:79:12:9C:CA:38:CF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E05 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF818EE8AE3111EB90C5FF59C4F9AE02.roa Signing time: Wed 10 May 2023 16:32:09 +0000 ROA not before: Wed 10 May 2023 16:32:09 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 139563 IP address blocks: 103.156.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28165 (0x6e05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:32:09 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc709-e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:e2:04:36:8e:3e:3f:db:01:ae:29:f6:36: 33:20:63:a9:e5:e8:2b:40:6c:6d:be:04:7b:f7:fc: de:41:08:a7:57:74:64:02:32:45:6e:78:ab:07:33: 2e:dd:0f:76:bc:10:ac:da:fb:88:27:1d:59:e4:8a: 91:1b:da:16:58:c1:75:8f:2a:ea:52:68:e9:a8:c6: 62:d6:6b:3c:c3:14:69:02:2e:33:a2:fe:04:96:c1: 1b:4a:b2:c1:2b:1d:96:b5:14:07:6f:39:79:79:82: 47:ac:6b:37:ff:c4:78:c2:c1:96:dc:24:19:d0:3a: 13:4f:19:cc:a9:6a:a3:51:1b:9f:93:cd:10:46:af: 30:86:36:e6:4c:bf:d8:b1:a4:51:e8:4a:32:0b:76: 20:71:c9:7e:65:83:a0:ab:87:ee:7d:bd:1d:80:6f: 85:ee:7b:13:04:52:ac:56:41:74:2f:9f:a3:b5:fd: 01:45:49:6f:ca:34:df:1d:e5:19:a2:28:40:2a:5e: 29:d1:58:78:12:80:28:e0:66:ef:87:fe:8b:85:44: 17:29:aa:a9:db:6f:4c:5a:d2:b5:ed:3a:5f:0b:30: b4:13:ff:ee:d2:31:13:fa:03:d1:4c:c0:19:99:d5: a4:67:12:49:37:1f:37:4e:ef:75:55:ec:17:0d:73: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:91:CD:51:AF:E3:73:02:68:2A:27:22:94:D5:79:12:9C:CA:38:CF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF818EE8AE3111EB90C5FF59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.122.0/23 Signature Algorithm: sha256WithRSAEncryption 65:ac:f1:b4:d4:73:30:9e:d7:e0:fe:b9:cd:70:1c:64:4c:8f: 3d:8e:5e:2c:56:51:93:2e:69:b0:3b:b7:5d:45:08:0b:0a:f3: b9:d1:7b:33:5c:9e:a5:3b:d3:3d:9a:12:c9:39:6b:b4:bc:3c: 79:31:b3:ca:bf:07:0e:bf:57:19:f6:aa:96:d6:3c:fe:3b:2c: 2e:b2:c2:f6:82:50:05:4d:8d:be:0f:ee:7c:f7:12:8d:fb:bf: df:4a:62:2c:d8:30:c3:d2:b5:55:41:03:66:e3:01:1a:af:1d: 64:98:3a:74:e9:b8:bd:51:45:54:be:3c:41:3e:83:cf:12:66: d8:a7:a3:ca:ed:c3:fb:02:d7:b7:07:f7:6f:af:7b:f9:3e:2b: 1a:70:0a:2a:90:3e:3b:20:47:a5:32:3a:f2:1a:b0:23:4b:50: b8:cf:c8:0c:28:45:e8:19:44:3c:e8:ce:9a:9a:4c:07:b1:b3: a7:f7:fe:c5:68:15:46:f5:70:56:ab:72:11:fd:61:35:3b:9f: 20:3b:c4:b7:c8:07:5b:a7:24:0b:2f:4f:8a:a7:91:5a:3e:2b: 89:98:36:fa:5b:f4:79:ac:3b:74:8b:9d:93:bb:e9:2a:07:40: 55:9f:9e:ba:4d:f9:3e:ea:d2:1e:f6:db:58:8f:e1:59:52:0b: 0e:af:3a:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMjA5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzcwOS1lMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaXiBDaOPj/bAa4p9jYzIGOp5egrQGxtvgR79/zeQQinV3RkAjJFbnirBzMu 3Q92vBCs2vuIJx1Z5IqRG9oWWMF1jyrqUmjpqMZi1ms8wxRpAi4zov4ElsEbSrLB Kx2WtRQHbzl5eYJHrGs3/8R4wsGW3CQZ0DoTTxnMqWqjURufk80QRq8whjbmTL/Y saRR6EoyC3Ygccl+ZYOgq4fufb0dgG+F7nsTBFKsVkF0L5+jtf0BRUlvyjTfHeUZ oihAKl4p0Vh4EoAo4Gbvh/6LhUQXKaqp229MWtK17TpfCzC0E//u0jET+gPRTMAZ mdWkZxJJNx83Tu91VewXDXPyQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAWRzVGv 43MCaConIpTVeRKcyjjPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREY4MThFRThB RTMxMTFFQjkwQzVGRjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnHowDQYJKoZIhvcNAQELBQADggEBAGWs8bTUczCe1+D+ uc1wHGRMjz2OXixWUZMuabA7t11FCAsK87nRezNcnqU70z2aEsk5a7S8PHkxs8q/ Bw6/Vxn2qpbWPP47LC6ywvaCUAVNjb4P7nz3Eo37v99KYizYMMPStVVBA2bjARqv HWSYOnTpuL1RRVS+PEE+g88SZtino8rtw/sC17cH92+ve/k+KxpwCiqQPjsgR6Uy OvIasCNLULjPyAwoRegZRDzozpqaTAexs6f3/sVoFUb1cFarchH9YTU7nyA7xLfI B1unJAsvT4qnkVo+K4mYNvpb9HmsO3SLnZO76SoHQFWfnrpN+T7q0h7221iP4VlS Cw6vOkM= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:40 2024 by rpki-client on console-fra.rpki-client.org