$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E197D31627F611EBA0CAA681C4F9AE02.roa File: E197D31627F611EBA0CAA681C4F9AE02.roa (raw, json) Hash identifier: ztO5q+5dqqimJlW0117+miLRgxDK0uKf6cGccaNenjs= Subject key identifier: D2:DD:0C:57:C0:6F:A0:ED:5D:1F:2A:22:ED:69:A5:E4:19:E2:02:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7191 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E197D31627F611EBA0CAA681C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:52 +0000 ROA not before: Wed 10 May 2023 16:48:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45747 IP address blocks: 203.89.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29073 (0x7191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaf4-941f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:56:9b:4f:7e:26:ca:aa:66:d7:f0:9a:b2: 85:8e:93:b9:b8:4f:fa:1c:8b:34:7c:74:1f:09:1e: 41:d3:ec:c7:17:ce:86:6e:bb:ae:bc:54:6b:4a:98: be:75:f0:2b:d4:e6:04:8f:96:76:5b:e8:77:da:c3: 1d:3f:d6:4b:3f:f3:91:43:12:9d:31:26:b2:8a:a5: d9:49:62:5c:47:1a:07:5c:db:28:f9:77:84:d9:73: 08:7c:1d:dd:81:83:54:d6:52:db:90:76:b3:05:46: a7:3a:0d:9d:a8:12:fc:7e:95:88:c3:6f:c0:5c:9c: d4:a3:2e:6d:b1:93:1e:d8:d4:bc:70:ad:fd:f7:ab: 5d:d3:73:88:bd:8a:f4:85:f6:b6:03:16:30:83:c1: 9f:7f:d7:48:7e:f0:24:ee:13:fc:93:28:5b:29:5b: e6:c9:03:ca:41:0e:04:3d:82:5e:e8:cf:10:a0:f4: 2e:79:90:4a:48:d2:11:6a:4a:6c:22:b1:e3:a9:bb: 4e:26:cd:b9:10:c8:91:be:0d:89:bb:0f:fe:01:72: 40:93:ce:53:6f:fb:06:f2:97:cd:09:e6:97:a0:1e: 31:cc:3d:03:d8:3a:6b:a3:be:5c:f6:65:c9:3c:d6: 1a:c9:ec:d2:ae:12:b5:6c:08:cb:63:dd:d2:74:fb: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:0C:57:C0:6F:A0:ED:5D:1F:2A:22:ED:69:A5:E4:19:E2:02:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E197D31627F611EBA0CAA681C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.134.0/23 Signature Algorithm: sha256WithRSAEncryption 71:6e:3f:08:a1:c9:36:68:aa:cb:7d:db:b6:94:fe:0b:25:71: 7c:2f:b4:42:1d:52:33:57:9f:ae:c9:61:8c:66:31:57:eb:8a: 0b:68:32:7b:38:66:d8:a6:86:ce:e7:97:1b:84:4e:a3:00:00: 5e:8c:02:c8:34:08:53:c1:06:d6:40:36:4d:b6:6c:50:95:8d: 1e:63:b5:88:7f:ac:2f:71:d2:41:5b:d1:1a:29:9f:ad:0a:16: 42:56:34:7d:0b:b1:e1:d1:4c:35:9a:4c:19:cc:48:2f:9e:06: 57:0f:b7:fc:7d:4d:e4:3b:38:1d:c8:e9:22:a0:06:d8:b6:e2: 04:0c:31:9a:4a:b6:2f:02:f7:5c:02:cc:64:de:ce:a1:d0:19: 69:87:7c:e7:e7:25:4f:93:a1:e0:a3:38:8c:f9:dd:c9:e9:94: 6b:dc:33:cd:7a:f7:5f:79:0e:da:cc:88:d4:23:41:2d:35:59: 61:f1:05:ee:c2:36:7c:2a:86:21:05:6a:64:ca:9d:e2:22:97: 06:48:26:0c:29:88:f6:b4:5c:bb:d7:f2:f1:bd:c7:e1:0b:48: 64:d3:74:e9:7e:88:31:b7:e1:81:c7:f1:55:5e:cf:90:b7:a3: 54:6a:9a:34:8f:bd:7e:9f:c2:84:a5:38:ca:03:07:9b:4d:53: 03:0b:9d:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FmNC05NDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXlWm09+JsqqZtfwmrKFjpO5uE/6HIs0fHQfCR5B0+zHF86GbruuvFRrSpi+ dfAr1OYEj5Z2W+h32sMdP9ZLP/ORQxKdMSayiqXZSWJcRxoHXNso+XeE2XMIfB3d gYNU1lLbkHazBUanOg2dqBL8fpWIw2/AXJzUoy5tsZMe2NS8cK3996td03OIvYr0 hfa2AxYwg8Gff9dIfvAk7hP8kyhbKVvmyQPKQQ4EPYJe6M8QoPQueZBKSNIRakps IrHjqbtOJs25EMiRvg2Juw/+AXJAk85Tb/sG8pfNCeaXoB4xzD0D2Dpro75c9mXJ PNYayezSrhK1bAjLY93SdPu9bQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNLdDFfA b6DtXR8qIu1ppeQZ4gJEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTE5N0QzMTYy N0Y2MTFFQkEwQ0FBNjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLWYYwDQYJKoZIhvcNAQELBQADggEBAHFuPwihyTZoqst9 27aU/gslcXwvtEIdUjNXn67JYYxmMVfrigtoMns4Ztimhs7nlxuETqMAAF6MAsg0 CFPBBtZANk22bFCVjR5jtYh/rC9x0kFb0Ropn60KFkJWNH0LseHRTDWaTBnMSC+e BlcPt/x9TeQ7OB3I6SKgBti24gQMMZpKti8C91wCzGTezqHQGWmHfOfnJU+ToeCj OIz53cnplGvcM8169195DtrMiNQjQS01WWHxBe7CNnwqhiEFamTKneIilwZIJgwp iPa0XLvX8vG9x+ELSGTTdOl+iDG34YHH8VVez5C3o1RqmjSPvX6fwoSlOMoDB5tN UwMLnSA= -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:04 2024 by rpki-client on console-fra.rpki-client.org