$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa File: E23445400C1711EEA6897210C4F9AE02.roa (raw, json) Hash identifier: lpmI5yQoZEfsI2pvJOjmGzWQVn2XI3q9Q3J+kGAo1O4= Subject key identifier: BB:75:B5:00:A7:7E:BD:CF:D5:4B:76:B6:3A:14:6D:BE:EB:DD:A1:15 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 851B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa Signing time: Wed 20 Mar 2024 10:33:41 +0000 ROA not before: Wed 20 Mar 2024 10:33:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151101 IP address blocks: 103.136.189.0/24 maxlen: 24 103.209.172.0/24 maxlen: 24 103.221.238.0/23 maxlen: 24 2001:df2:94c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34075 (0x851b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 20 10:33:41 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65fabb84-2c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:5b:da:62:f4:99:c8:dd:32:7a:40:72:fe: 7d:2d:8c:9c:b0:64:49:59:a3:3c:bb:c1:b8:d2:e0: 63:bd:1b:ff:f8:e2:68:00:28:ea:39:ec:78:f1:09: 5d:7c:11:9f:8a:e9:14:19:d2:2f:6a:93:c7:6a:10: f2:36:b5:80:eb:f1:aa:bd:ed:e0:7d:9f:94:ee:37: 69:03:b4:0e:ec:92:f0:8c:47:df:ec:77:c5:0b:36: 9e:45:9f:8f:dc:62:ab:bb:26:b6:e9:20:6e:a8:8b: 15:77:df:69:84:9e:0c:a7:65:d9:8d:64:c9:7a:53: ed:2c:d2:b4:e3:10:c3:99:47:89:1e:d3:01:e3:40: 6b:13:57:6e:87:ef:4d:a6:fc:2f:63:20:ef:08:e0: 60:4f:94:04:a8:39:4a:0c:c0:1c:bd:4a:5f:ee:e8: 4b:53:89:03:e3:6b:40:c5:10:b4:07:55:38:a6:e6: da:32:7a:05:5f:cd:00:a7:f1:2e:57:6f:90:ae:ee: f0:d0:9f:cc:7b:a5:fe:eb:3c:10:42:aa:5c:f5:0d: 0d:ef:e1:fb:82:a2:0a:ef:02:16:1a:18:33:72:36: 1a:59:eb:68:21:20:d5:31:7b:d5:4d:21:37:bf:6e: 48:3b:f9:52:b9:b7:f8:8c:fc:8d:d3:66:bb:1f:ad: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:75:B5:00:A7:7E:BD:CF:D5:4B:76:B6:3A:14:6D:BE:EB:DD:A1:15 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.189.0/24 103.209.172.0/24 103.221.238.0/23 IPv6: 2001:df2:94c0::/48 Signature Algorithm: sha256WithRSAEncryption 14:9f:87:45:00:46:06:f9:63:3d:0e:ae:46:78:f5:b7:a0:35: dd:0b:cb:b9:e1:13:2a:95:3e:35:9b:df:15:79:b4:0a:73:8b: 79:65:0c:bd:a7:52:9a:2a:cd:57:01:c8:be:d1:a8:25:1e:b6: 2f:b4:7e:32:e5:16:51:7f:a7:0a:39:91:e0:00:e6:e4:00:e9: 57:6d:49:05:0a:45:76:2c:07:09:48:e2:fe:fd:2e:1a:05:92: 14:06:3b:aa:28:31:25:ad:cb:e8:5c:ec:4b:b6:a6:58:89:7d: 31:e0:27:8c:c3:02:40:1f:cc:4b:67:39:04:22:f1:9e:72:a5: 0c:e3:2e:d4:98:57:0a:c5:71:e9:bb:58:63:83:95:89:fb:42: 17:d1:8b:4e:08:b8:9d:5f:14:e0:4a:5d:0d:b1:13:ac:1c:22: 75:d6:82:72:2a:40:70:d8:77:f4:82:6b:94:49:92:b2:7a:30: e8:3e:fc:c9:95:a8:13:9d:35:05:53:a2:22:43:e0:cc:2e:46: 6c:c0:17:af:80:b0:35:ec:f9:93:8c:16:f3:22:48:d1:9d:76: 23:6c:15:32:2b:d9:3a:62:9e:7c:a3:ab:a1:d1:b8:28:9a:b6: 47:4c:a7:99:5c:17:e9:27:5b:cd:7e:a0:80:b2:48:00:43:cc: 76:be:c5:b8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAIUbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMyMDEwMzM0MVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVmYWJiODQtMmM2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqsW9pi9JnI3TJ6QHL+fS2MnLBkSVmjPLvBuNLgY70b//jiaAAo6jnsePEJ XXwRn4rpFBnSL2qTx2oQ8ja1gOvxqr3t4H2flO43aQO0DuyS8IxH3+x3xQs2nkWf j9xiq7smtukgbqiLFXffaYSeDKdl2Y1kyXpT7SzStOMQw5lHiR7TAeNAaxNXbofv Tab8L2Mg7wjgYE+UBKg5SgzAHL1KX+7oS1OJA+NrQMUQtAdVOKbm2jJ6BV/NAKfx LldvkK7u8NCfzHul/us8EEKqXPUNDe/h+4KiCu8CFhoYM3I2GlnraCEg1TF71U0h N79uSDv5Urm3+Iz8jdNmux+tFzMCAwEAAaOCArIwggKuMB0GA1UdDgQWBBS7dbUA p369z9VLdrY6FG2+692hFTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UyMzQ0NTQw MEMxNzExRUVBNjg5NzIxMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQAZ4i9AwQAZ9GsAwQBZ93uMA8EAgACMAkDBwAgAQ3ylMAw DQYJKoZIhvcNAQELBQADggEBABSfh0UARgb5Yz0OrkZ49begNd0Ly7nhEyqVPjWb 3xV5tApzi3llDL2nUpoqzVcByL7RqCUeti+0fjLlFlF/pwo5keAA5uQA6VdtSQUK RXYsBwlI4v79LhoFkhQGO6ooMSWty+hc7Eu2pliJfTHgJ4zDAkAfzEtnOQQi8Z5y pQzjLtSYVwrFcem7WGODlYn7QhfRi04IuJ1fFOBKXQ2xE6wcInXWgnIqQHDYd/SC a5RJkrJ6MOg+/MmVqBOdNQVToiJD4MwuRmzAF6+AsDXs+ZOMFvMiSNGddiNsFTIr 2Tpinnyjq6HRuCiatkdMp5lcF+knW81+oICySABDzHa+xbg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org