$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1548F6695E711EB88C1FA77C4F9AE02.roa File: E1548F6695E711EB88C1FA77C4F9AE02.roa (raw, json) Hash identifier: RquYdPH35+iJyOb+ueW6x8XQU94rP2avu3MznwHcvqQ= Subject key identifier: BC:9B:AF:1A:73:42:44:AC:57:A6:33:9D:51:5D:9F:66:86:7E:34:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6E3D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1548F6695E711EB88C1FA77C4F9AE02.roa Signing time: Wed 10 May 2023 16:33:08 +0000 ROA not before: Wed 10 May 2023 16:33:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 140180 IP address blocks: 103.155.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28221 (0x6e3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:33:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc744-ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:1d:23:2c:6c:0b:40:1d:da:ce:0a:fd:18: 7a:d2:9f:33:9e:01:69:e1:3e:6a:50:f7:93:9f:19: 99:5d:fa:2a:d6:1c:20:f6:f3:e0:41:ee:83:da:f0: 8a:b6:0c:82:09:6e:2b:0f:25:64:0a:02:a7:27:7d: 6a:76:15:5a:0e:4e:b8:d5:22:86:62:0d:fd:81:51: de:47:24:77:bf:2a:7b:f9:21:a5:c1:58:fe:11:cc: fc:6b:c0:d0:99:dd:4f:48:4c:ec:62:c3:d0:f6:6e: d6:55:57:e7:e4:62:2d:c8:21:7d:81:97:50:71:58: 44:39:e4:8f:1d:54:68:35:ee:da:24:dd:32:2a:45: a7:ae:2f:ab:8b:1b:b6:f6:ad:93:35:3f:04:d4:28: 09:10:77:dc:e0:c6:c2:35:96:04:1d:c9:e2:e5:43: aa:7e:b7:49:24:bb:cd:3e:a4:9e:ec:c9:bb:66:97: 35:86:0b:ce:c8:fc:0f:31:bf:92:aa:33:d8:9f:23: a4:56:5a:70:a1:1a:69:5d:36:a4:b3:f5:6f:d8:74: 91:1f:68:a9:9b:83:1b:86:fb:0b:e5:6c:75:13:49: 8b:22:d9:a9:b6:06:91:90:fd:bd:9b:b2:68:81:7d: 3f:df:6c:78:1a:6a:3f:13:c4:41:bc:9a:b8:66:0a: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9B:AF:1A:73:42:44:AC:57:A6:33:9D:51:5D:9F:66:86:7E:34:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1548F6695E711EB88C1FA77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.108.0/23 Signature Algorithm: sha256WithRSAEncryption a9:03:38:df:f1:e0:91:b4:5f:15:32:67:e0:93:99:5e:3f:11: 3a:15:7f:a1:50:1c:f0:cf:47:ee:53:cb:42:4d:6d:5b:bb:c3: a0:b7:f4:80:30:dc:50:88:8a:57:ad:68:44:50:df:16:26:e6: 9d:94:25:d5:ca:69:fa:68:03:71:25:06:db:30:01:b9:8e:60: ab:55:85:95:ca:82:5c:97:55:23:cb:dc:c5:71:ae:21:f9:2c: 7a:33:27:c9:f4:cf:e2:2c:21:3b:ea:c0:f8:d6:e5:36:a8:96: 97:8a:44:c2:87:e6:ad:c5:ac:1d:df:31:d5:db:c0:b5:7a:67: 63:4c:2a:a5:89:02:8d:82:3f:ad:6e:0a:60:0d:59:98:95:70: 33:25:55:44:21:93:0f:67:ed:8c:3a:3c:70:f6:35:aa:c8:04: fb:5b:65:2c:dc:5d:d1:77:65:51:90:87:76:16:ab:0b:1a:5a: 15:08:96:0f:1e:7b:23:02:f9:f4:6e:50:39:19:20:cf:83:10: 4c:60:69:37:d5:57:52:96:7c:a5:86:9e:32:e4:e3:65:07:cd: 04:c3:3f:31:e1:54:6e:27:d1:02:80:98:0f:4d:6a:bc:88:ac: da:03:64:95:11:75:2d:82:98:05:4a:b2:1e:64:0c:de:81:2c: 0a:db:e9:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMzA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzc0NC1hYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvysdIyxsC0Ad2s4K/Rh60p8zngFp4T5qUPeTnxmZXfoq1hwg9vPgQe6D2vCK tgyCCW4rDyVkCgKnJ31qdhVaDk641SKGYg39gVHeRyR3vyp7+SGlwVj+Ecz8a8DQ md1PSEzsYsPQ9m7WVVfn5GItyCF9gZdQcVhEOeSPHVRoNe7aJN0yKkWnri+rixu2 9q2TNT8E1CgJEHfc4MbCNZYEHcni5UOqfrdJJLvNPqSe7Mm7Zpc1hgvOyPwPMb+S qjPYnyOkVlpwoRppXTaks/Vv2HSRH2ipm4MbhvsL5Wx1E0mLItmptgaRkP29m7Jo gX0/32x4Gmo/E8RBvJq4ZgqIdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLybrxpz QkSsV6YznVFdn2aGfjR3MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTE1NDhGNjY5 NUU3MTFFQjg4QzFGQTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm2wwDQYJKoZIhvcNAQELBQADggEBAKkDON/x4JG0XxUy Z+CTmV4/EToVf6FQHPDPR+5Ty0JNbVu7w6C39IAw3FCIiletaERQ3xYm5p2UJdXK afpoA3ElBtswAbmOYKtVhZXKglyXVSPL3MVxriH5LHozJ8n0z+IsITvqwPjW5Tao lpeKRMKH5q3FrB3fMdXbwLV6Z2NMKqWJAo2CP61uCmANWZiVcDMlVUQhkw9n7Yw6 PHD2NarIBPtbZSzcXdF3ZVGQh3YWqwsaWhUIlg8eeyMC+fRuUDkZIM+DEExgaTfV V1KWfKWGnjLk42UHzQTDPzHhVG4n0QKAmA9NaryIrNoDZJURdS2CmAVKsh5kDN6B LArb6Zs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org