$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AEA7F2F4FE11EBBF60EA16C4F9AE02.roa File: E4AEA7F2F4FE11EBBF60EA16C4F9AE02.roa (raw, json) Hash identifier: tbbV7daHWomUf1H2H3s8Ids0Q/1vFGJsDMvMpjdM34k= Subject key identifier: 95:37:B3:4A:D8:78:88:E7:4A:F7:C8:6E:92:E6:41:CE:4A:14:7A:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B80 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AEA7F2F4FE11EBBF60EA16C4F9AE02.roa Signing time: Wed 10 May 2023 16:19:59 +0000 ROA not before: Wed 10 May 2023 16:19:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135031 IP address blocks: 45.65.40.0/22 maxlen: 24 103.210.252.0/22 maxlen: 24 103.211.84.0/22 maxlen: 24 103.211.88.0/22 maxlen: 24 103.211.128.0/22 maxlen: 24 160.202.48.0/22 maxlen: 24 160.202.52.0/22 maxlen: 24 160.238.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27520 (0x6b80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc42e-727d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:18:96:fe:8c:c4:dd:af:09:41:d2:e8:73: 3d:e5:7f:26:aa:eb:52:74:3a:4b:29:68:ab:60:a0: ca:db:43:6e:d4:57:dd:b8:88:0f:ab:af:5e:09:2d: f7:2e:4c:25:76:cc:81:0c:5f:3f:66:5f:71:66:5f: 2e:4e:94:fd:7f:95:c2:1b:c1:31:3c:f0:f5:77:c5: ee:81:90:21:81:0d:ea:8b:7e:5e:0d:c3:27:c0:18: b1:cc:1e:f6:6e:d7:db:74:7c:cb:ed:e9:47:51:7f: 5a:5f:64:ee:49:88:e8:82:b5:e5:a8:77:84:38:c0: c1:2a:e8:d2:31:c7:47:99:ba:1c:ff:9f:86:dd:12: 7e:d1:e5:e3:aa:28:42:d0:16:2d:d6:e7:8a:34:7c: 38:cf:60:83:90:a2:b1:f0:bc:29:48:98:ae:70:14: 37:ae:17:46:5c:b2:60:69:37:5a:68:aa:17:df:70: f7:dc:97:68:03:a1:17:ed:a2:a6:0c:40:7d:75:28: 41:9d:b9:d8:42:32:e3:4e:22:d8:22:c8:c8:ef:46: 8d:e0:37:c5:13:33:2d:a7:f0:e0:95:22:82:9e:49: d5:ba:1e:59:e5:23:22:a3:62:a6:86:8e:4b:29:b8: 28:66:1a:2f:da:93:d5:a6:f0:be:d7:c4:ed:4d:3b: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:37:B3:4A:D8:78:88:E7:4A:F7:C8:6E:92:E6:41:CE:4A:14:7A:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4AEA7F2F4FE11EBBF60EA16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.65.40.0/22 103.210.252.0/22 103.211.84.0-103.211.91.255 103.211.128.0/22 160.202.48.0/21 160.238.88.0/22 Signature Algorithm: sha256WithRSAEncryption 66:67:7a:9e:af:2a:35:20:24:25:71:2d:cf:e2:14:a9:47:f4: 40:7a:64:6d:db:57:53:82:c3:34:2c:b9:a9:5c:8e:41:a9:eb: e6:b4:f0:20:3f:d2:b0:62:ea:11:36:dc:6b:ba:34:41:5a:60: 1f:d4:68:89:ed:05:27:aa:dd:a9:f0:e4:87:ea:29:f5:22:1c: b2:5e:26:d1:3a:e6:9b:51:ba:44:b3:5e:38:71:33:22:86:92: 3c:30:7e:d9:ae:72:c3:4f:d1:7a:dc:98:7b:84:a7:ea:b3:64: 32:0a:1b:4f:aa:9c:37:7a:28:65:7d:aa:7b:80:6d:57:9f:59: 7a:ad:49:f3:46:a3:4c:b4:07:11:a9:e2:3c:1d:63:19:3e:b4: 74:8e:9c:79:af:3f:a6:81:66:10:30:1d:d7:01:d0:9f:f0:af: 7d:2e:75:5e:6f:5c:dd:41:c7:0a:39:fa:6b:f8:1e:7b:21:29: 6a:a8:2e:41:85:22:95:86:8f:59:a9:cf:65:42:b3:61:9b:fa: da:78:7d:a5:85:d1:3e:e5:7d:91:f3:f3:39:ec:73:18:eb:98: f6:3d:16:01:f9:35:05:d7:44:3e:89:51:e6:14:f4:c4:f7:71: 45:a6:ed:28:3e:ab:f2:3f:e2:58:8a:62:35:85:bf:df:21:fe: a9:ce:97:c7 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICa4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQyZS03MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5AYlv6MxN2vCUHS6HM95X8mqutSdDpLKWirYKDK20Nu1FfduIgPq69eCS33 LkwldsyBDF8/Zl9xZl8uTpT9f5XCG8ExPPD1d8XugZAhgQ3qi35eDcMnwBixzB72 btfbdHzL7elHUX9aX2TuSYjogrXlqHeEOMDBKujSMcdHmboc/5+G3RJ+0eXjqihC 0BYt1ueKNHw4z2CDkKKx8LwpSJiucBQ3rhdGXLJgaTdaaKoX33D33JdoA6EX7aKm DEB9dShBnbnYQjLjTiLYIsjI70aN4DfFEzMtp/DglSKCnknVuh5Z5SMio2Kmho5L KbgoZhov2pPVpvC+18TtTTvp0QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJU3s0rY eIjnSvfIbpLmQc5KFHrJMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTRBRUE3RjJG NEZFMTFFQkJGNjBFQTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAItQSgDBAJn0vwwDAMEAmfTVAMEAmfTWAMEAmfTgAMEA6DK MAMEAqDuWDANBgkqhkiG9w0BAQsFAAOCAQEAZmd6nq8qNSAkJXEtz+IUqUf0QHpk bdtXU4LDNCy5qVyOQanr5rTwID/SsGLqETbca7o0QVpgH9Roie0FJ6rdqfDkh+op 9SIcsl4m0Trmm1G6RLNeOHEzIoaSPDB+2a5yw0/RetyYe4Sn6rNkMgobT6qcN3oo ZX2qe4BtV59Zeq1J80ajTLQHEaniPB1jGT60dI6cea8/poFmEDAd1wHQn/CvfS51 Xm9c3UHHCjn6a/geeyEpaqguQYUilYaPWanPZUKzYZv62nh9pYXRPuV9kfPzOexz GOuY9j0WAfk1BddEPolR5hT0xPdxRabtKD6r8j/iWIpiNYW/3yH+qc6Xxw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org